Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/nCJfUuZhLlhuv_EJtX0Ro2MWIFE.roa
File: nCJfUuZhLlhuv_EJtX0Ro2MWIFE.roa (raw, json)
Hash identifier: 6o5H4PO3EkkJ6ONEHrg7xYTrnml5BatKS5N9IooQ384=
Subject key identifier: 9C:22:5F:52:E6:61:2E:58:6E:BF:F1:09:B5:7D:11:A3:63:16:20:51
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 1024
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nCJfUuZhLlhuv_EJtX0Ro2MWIFE.roa
Signing time: Wed 24 May 2023 03:55:18 +0000
ROA not before: Wed 24 May 2023 03:55:18 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 138915
IP address blocks: 27.0.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: May 24 03:55:18 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9C225F52E6612E586EBFF109B57D11A363162051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:d5:ab:75:94:5b:29:0e:0e:d1:b9:52:c5:
97:68:43:56:dd:48:d0:9f:34:c6:dd:db:b4:cc:03:
81:a8:9d:b9:53:08:84:d2:43:31:dd:c3:29:5c:83:
57:31:99:d8:ff:be:34:84:04:33:71:21:19:6e:e8:
e6:5c:33:2d:9e:37:0f:fc:0e:1d:41:d5:b8:2a:a5:
0e:78:e8:48:ea:18:48:00:06:73:0a:bc:b4:d1:86:
fc:6d:3e:9f:c3:89:58:09:6f:d0:29:bc:c4:ce:bb:
c5:e2:89:4c:2c:1d:20:cd:14:0d:96:c7:8f:65:27:
c2:d6:64:73:75:42:eb:34:f5:57:9c:41:80:5d:90:
5a:07:91:9f:84:81:f2:fe:44:3f:b9:90:4f:1a:7a:
16:86:85:24:55:dc:07:cc:f7:db:6d:1d:29:da:ce:
10:08:f6:b2:9b:11:b5:eb:a5:89:a0:5e:3d:6d:31:
c0:e6:ed:4d:03:6e:ad:6d:47:90:60:ce:f4:0f:2f:
dc:63:e2:9e:07:00:45:da:87:4e:c8:b0:72:d5:db:
dd:59:65:4e:66:e1:7b:d0:dc:18:77:40:a5:34:68:
cd:cf:9a:da:19:8d:c4:bd:92:27:58:cc:a7:c9:22:
56:b4:13:e1:69:84:d6:69:7f:7e:41:14:42:f1:9e:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:5F:52:E6:61:2E:58:6E:BF:F1:09:B5:7D:11:A3:63:16:20:51
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nCJfUuZhLlhuv_EJtX0Ro2MWIFE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b9:c4:ff:dd:06:e1:43:c9:2a:a2:62:f1:a3:b7:a4:17:c3:
d9:0a:b7:66:b9:f2:39:d8:a2:08:26:3c:69:09:ed:79:36:62:
cc:53:b8:7d:38:35:fe:65:45:f7:4e:87:e8:f1:fe:11:f3:27:
4c:ac:0a:30:14:bf:0d:c7:4f:38:94:24:87:10:39:2e:e3:55:
f3:e4:54:35:c7:d8:14:8b:01:ce:40:3d:ad:8c:8e:32:55:0b:
46:a1:5b:53:92:f4:74:ff:2e:ae:64:99:d7:68:12:1f:31:c1:
11:9c:3e:e6:62:96:66:fa:21:ff:bf:8a:2e:74:73:43:e5:41:
7f:89:fc:1a:2e:f0:f6:aa:54:f4:f8:40:4b:11:18:56:6e:78:
a3:3c:1c:88:32:c2:f9:fa:95:2e:1d:59:e3:62:8b:ff:bc:f3:
80:61:99:8c:0d:24:9f:78:87:25:c0:df:13:1d:f5:4a:c6:4b:
65:85:11:4a:e8:ca:a7:8d:61:91:6d:25:72:ef:b8:b8:6f:07:
65:97:37:65:68:84:ef:5a:01:dd:6b:4a:6e:55:16:ed:cb:ad:
91:f4:19:3d:2b:92:c9:08:3b:63:27:84:d5:20:92:8f:cb:90:
1c:8d:5a:f4:85:4a:b2:b9:af:6f:fb:31:7f:2c:f8:ae:43:c0:
bd:3c:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org