Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/9mGKWiIxy7goxegtZFkX6GVGTt8.roa
File: 9mGKWiIxy7goxegtZFkX6GVGTt8.roa (raw, json)
Hash identifier: 8AwenVnpV2cJqAeeCFb9FN0GFcdLuNMTJ+bz7QWzRNA=
Subject key identifier: F6:61:8A:5A:22:31:CB:B8:28:C5:E8:2D:64:59:17:E8:65:46:4E:DF
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 1BB7
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/9mGKWiIxy7goxegtZFkX6GVGTt8.roa
Signing time: Thu 28 Nov 2024 14:39:21 +0000
ROA not before: Thu 28 Nov 2024 14:39:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 45.126.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 03:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7095 (0x1bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Nov 28 14:39:21 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6618A5A2231CBB828C5E82D645917E865464EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:25:7d:ab:a3:b6:50:14:d8:de:d7:8b:cc:
f7:1e:47:37:10:45:04:cb:04:7f:70:6a:a5:c4:39:
40:b0:f8:29:e5:9f:78:f8:5e:23:3e:d4:d0:fd:46:
27:2c:df:2d:01:b9:76:55:49:f9:c4:c6:18:ae:16:
6f:b2:fd:78:77:c3:5a:2c:e6:f9:f1:93:a6:4b:ff:
81:28:73:c9:c7:95:da:30:55:c7:90:a0:ef:1b:a3:
dc:6c:25:f0:9c:0d:38:b0:a5:e5:40:b9:21:3e:55:
a2:3c:81:ea:54:57:fe:c1:76:32:17:ff:07:97:5a:
69:1e:ad:8f:db:94:bb:ed:0e:ee:b4:06:6a:94:10:
22:72:f8:76:b2:5d:bd:57:5a:44:44:7e:d1:7c:0c:
15:cc:1b:cc:66:b6:3e:0b:bf:4c:53:d7:0d:e4:ff:
e4:3b:0a:04:f2:fa:b2:53:1e:4e:a9:ea:4a:02:8f:
22:f4:92:32:b0:f5:aa:3a:af:19:e0:98:ae:fc:02:
1c:20:5c:9b:13:e7:21:54:8e:e0:77:0c:ee:a1:1f:
59:4d:ac:ab:98:e4:29:7a:21:bb:4e:29:ec:b9:de:
2e:3d:e6:4a:e9:f2:17:43:18:31:a4:62:33:d4:78:
58:b8:8e:be:8a:7e:9f:1e:a8:46:65:79:81:47:25:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:8A:5A:22:31:CB:B8:28:C5:E8:2D:64:59:17:E8:65:46:4E:DF
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/9mGKWiIxy7goxegtZFkX6GVGTt8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.100.0/22
Signature Algorithm: sha256WithRSAEncryption
37:56:01:c2:ef:b0:06:cb:b9:07:35:5b:3a:f6:76:57:20:92:
fa:c3:63:29:8b:c3:1f:3a:f8:ec:c3:54:80:e6:78:28:37:dd:
cd:cb:9b:b8:94:7b:e8:8d:45:3f:12:dd:4c:b7:06:d4:82:92:
1b:df:7a:b4:21:f0:c3:63:b3:74:cd:04:1a:fa:95:5a:d0:e4:
0d:98:c8:d2:b8:e8:8c:62:ba:41:70:14:95:a9:09:f4:7a:79:
81:be:5e:37:6a:b1:26:75:43:a3:ca:dc:b1:26:71:45:af:f4:
e0:91:0e:ce:d5:77:aa:57:80:c6:e0:41:a4:ab:36:81:37:34:
0b:ce:b2:f6:dc:d6:85:b1:fb:e4:f3:f5:bd:48:ae:92:b1:a4:
72:c9:04:87:3e:0b:bd:e0:33:9e:b5:4e:2c:70:3b:69:ff:44:
09:dc:4f:f2:98:ab:bc:ef:6c:3d:62:f3:e9:12:d1:cc:41:3c:
99:35:ad:6f:6b:0d:c5:cf:43:8f:42:20:6a:32:77:09:bd:5b:
a1:05:be:76:40:6b:f0:2e:6d:9e:9a:66:c9:60:97:8b:0c:09:
a7:84:a2:14:bc:c0:df:3f:78:65:d0:cc:27:27:14:8f:b4:73:
07:9a:2f:17:23:8e:98:86:57:99:e9:c8:10:7a:92:50:28:a5:
95:96:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:24 2025 by rpki-client