Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/t5YXD0zrXaa1GCLpNzYX_SwehJo.roa
File: t5YXD0zrXaa1GCLpNzYX_SwehJo.roa (raw, json)
Hash identifier: 0trFX5yGu590ixTYlt+yv4/7gw5W3H83BJx40sIOZ2g=
Subject key identifier: B7:96:17:0F:4C:EB:5D:A6:B5:18:22:E9:37:36:17:FD:2C:1E:84:9A
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 1BB8
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/t5YXD0zrXaa1GCLpNzYX_SwehJo.roa
Signing time: Thu 28 Nov 2024 14:39:21 +0000
ROA not before: Thu 28 Nov 2024 14:39:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 45.126.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 03:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7096 (0x1bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Nov 28 14:39:21 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B796170F4CEB5DA6B51822E9373617FD2C1E849A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:4b:b5:b1:b7:b0:32:44:9a:40:ad:04:ef:
b8:fa:99:9f:bc:b6:fb:c7:a3:91:2c:8a:cf:83:8c:
29:17:7b:5b:a6:8f:1b:bc:e1:03:c4:4c:f9:48:8d:
3d:6e:1c:c1:c7:be:34:bd:5c:68:8e:ae:5d:19:a3:
bf:a8:6e:cb:c7:16:9c:99:b9:90:9f:8b:25:41:18:
5a:18:6a:98:45:96:f8:3e:c1:5e:18:65:83:a6:d3:
06:b7:32:13:60:33:91:74:03:2f:86:c6:5c:f5:33:
64:59:e7:c4:18:42:bf:bf:e3:78:35:3b:ac:bf:06:
0b:cd:45:09:d2:e9:bf:dc:a7:e5:8d:3a:22:a9:46:
a3:41:0f:7b:81:e4:fd:5b:39:ba:bb:b4:58:9b:f3:
4c:54:9f:8a:97:87:85:85:f5:dd:52:64:49:81:db:
b6:26:9d:fd:f3:f9:c5:24:82:02:35:f8:7a:d9:09:
99:08:7a:84:d7:9b:a6:d9:1e:46:ac:1f:3a:6f:df:
16:e2:88:1a:55:84:ce:26:fc:de:5f:c6:c8:6b:ba:
31:6c:6f:47:92:94:1c:86:ae:f2:49:cd:c4:06:de:
0c:c1:d5:49:a0:39:90:6d:cd:b9:4d:82:15:88:76:
98:48:e8:e5:b7:62:b2:90:f8:06:42:74:ce:cb:1a:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:17:0F:4C:EB:5D:A6:B5:18:22:E9:37:36:17:FD:2C:1E:84:9A
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/t5YXD0zrXaa1GCLpNzYX_SwehJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.100.0/22
Signature Algorithm: sha256WithRSAEncryption
40:2e:08:c9:0d:f1:e8:f6:b0:9c:d9:98:e9:0a:78:d8:8d:3f:
d9:3f:ea:8c:e9:52:45:8a:4c:f2:e0:62:9f:8b:b8:66:18:3e:
85:1b:2e:82:90:54:5e:ca:19:c6:bd:96:64:d4:bc:17:6e:ee:
10:3c:05:8f:a0:10:a9:a2:bc:3e:3a:fc:88:2f:65:d3:37:d2:
18:ab:8e:2f:bb:60:90:94:a4:15:bd:af:10:e9:b9:c7:2e:81:
64:9f:2f:8a:1d:c3:b0:48:6d:61:24:a7:0e:34:9d:d8:95:ca:
85:14:fc:03:ec:31:42:11:93:00:f8:e0:f0:d4:4a:66:68:0a:
f3:b4:1e:c3:d0:bc:6d:aa:80:7e:88:3c:e6:b7:87:2c:5d:c4:
6c:a4:bc:77:96:33:eb:1e:56:d3:a8:c0:15:fa:02:2d:c6:be:
14:a3:30:76:15:e6:2f:e3:43:72:9d:cf:c6:33:23:e7:71:0d:
46:36:30:ea:49:3a:2b:be:ce:d9:1f:94:d0:47:cb:32:a5:6f:
5c:d5:42:5c:ee:0f:fb:eb:04:f4:a2:f8:15:73:91:a5:5b:fd:
07:a5:e9:60:ca:31:f8:15:02:01:c0:d2:c1:d1:12:ea:33:03:
4a:9e:7f:52:da:e1:72:c5:09:6d:f1:53:02:cc:41:22:3f:47:
01:4a:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:51 2025 by rpki-client