Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa
File: OugnFsaaxQAFpgOrbyvfHEXX3iM.roa (raw, json)
Hash identifier: hLSx6AvZw4cpq6DtZRbLH8yn3CB84mUKh/279IzLwrg=
Subject key identifier: 3A:E8:27:16:C6:9A:C5:00:05:A6:03:AB:6F:2B:DF:1C:45:D7:DE:23
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 3D
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa
Signing time: Wed 24 Apr 2024 01:50:28 +0000
ROA not before: Wed 24 Apr 2024 01:50:28 +0000
ROA not after: Tue 15 Apr 2025 09:24:38 +0000
asID: 58834
IP address blocks: 119.2.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 09:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Apr 24 01:50:28 2024 GMT
Not After : Apr 15 09:24:38 2025 GMT
Subject: CN=3AE82716C69AC50005A603AB6F2BDF1C45D7DE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:43:48:82:90:65:80:ac:e4:0d:ab:67:ed:
75:13:ce:3b:48:8d:ba:a9:d1:0d:5e:5a:1d:28:be:
2f:3e:05:4a:a7:c9:dd:67:4d:e8:13:62:32:c6:03:
23:5b:4e:69:1c:9a:a5:bd:21:93:c2:4e:29:4c:c5:
f9:58:87:40:fa:58:00:4f:11:6d:e7:f3:e0:dc:82:
2d:88:c7:87:9e:7b:b4:e1:c2:56:48:74:4e:41:21:
2b:b0:93:ea:2b:21:40:f6:b6:4a:ee:0c:30:78:3b:
a7:f4:6f:8b:c3:86:13:e6:c7:55:e8:32:ce:b4:53:
1d:ef:7b:1d:ef:ed:ad:a5:c0:d8:c8:1c:36:d2:5d:
1b:9a:65:40:6d:8c:58:5d:27:34:7d:eb:0b:8f:5f:
a0:ef:47:16:24:4f:a2:aa:68:df:20:aa:ff:f6:be:
c7:ac:a4:63:08:2e:1c:6a:2a:2f:6b:9a:b4:c6:cc:
59:72:f5:03:30:5e:28:2c:cc:b9:8d:d3:c2:dd:ce:
f4:ee:21:ea:b4:e5:c5:b3:97:12:5b:05:95:9d:cf:
f4:c6:9b:e3:af:92:60:3e:95:96:c4:4c:21:c8:6f:
bd:46:85:fc:2e:4a:f7:4c:24:ec:63:82:2f:1f:33:
ec:26:6c:4f:29:cb:28:a9:88:0f:a6:30:73:de:15:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:27:16:C6:9A:C5:00:05:A6:03:AB:6F:2B:DF:1C:45:D7:DE:23
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/OugnFsaaxQAFpgOrbyvfHEXX3iM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.2.255.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a8:f3:23:20:6f:1f:db:8a:a0:bd:0e:26:f1:bc:18:21:ba:
3f:10:95:21:e2:21:1e:55:75:8a:2a:7e:01:dc:c4:b0:ee:d9:
3e:04:e8:fb:93:fc:fd:a8:04:2c:fa:e8:91:3e:6f:78:a2:2f:
50:0b:23:91:64:e9:2c:cd:cc:4a:ca:23:5c:45:da:fe:54:93:
19:92:e1:e8:a5:98:b8:95:46:88:8d:0a:e1:28:93:4c:e5:a0:
d1:b6:de:4d:47:a0:ab:9d:c9:17:64:97:bb:16:68:75:1f:b2:
09:c4:0a:af:fe:6b:20:8f:66:c7:36:46:4a:f9:6e:02:9c:e3:
6c:47:e5:a0:8a:fd:05:0b:58:ca:ac:2c:f6:f7:0a:c2:b3:00:
30:59:b6:07:6c:2e:d8:8b:7f:09:0a:4f:0d:fc:77:2a:26:4e:
59:b4:da:22:34:9e:f2:a2:08:b1:0d:94:48:48:14:f1:ef:05:
cd:9f:96:ac:34:ff:ac:66:68:37:b5:66:85:65:09:c7:96:b6:
e1:cb:00:c4:1f:11:f0:c3:29:92:ee:6f:cb:59:bb:39:9c:a2:
c5:72:3b:24:85:97:40:6d:0b:b5:cb:3c:fe:f9:e7:a5:75:69:
26:15:14:f4:ad:67:92:30:55:37:35:7e:38:3d:4f:11:ad:f0:
6c:54:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:34 2025 by rpki-client