Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/t7HAvZ6veqWfwJPuIdS2btY5mn0.roa
File: t7HAvZ6veqWfwJPuIdS2btY5mn0.roa (raw, json)
Hash identifier: gFxrmMkPHyIja2phNTEla/2k/9NIONTj/eXD8/0w1fQ=
Subject key identifier: B7:B1:C0:BD:9E:AF:7A:A5:9F:C0:93:EE:21:D4:B6:6E:D6:39:9A:7D
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 0E08
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/t7HAvZ6veqWfwJPuIdS2btY5mn0.roa
Signing time: Thu 23 May 2024 06:53:34 +0000
ROA not before: Thu 23 May 2024 06:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 63199
IP address blocks: 2400:5280:807::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Nov 2024 09:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: May 23 06:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B7B1C0BD9EAF7AA59FC093EE21D4B66ED6399A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:40:ae:37:96:8d:3d:da:ec:2a:24:7c:a3:
72:e6:e5:00:62:05:41:8c:6e:59:f3:90:26:54:d0:
02:bc:07:2b:2e:11:b1:12:bc:5f:ed:01:2d:f7:9c:
ad:0a:77:b9:18:d4:68:84:cb:4a:60:c8:b2:6c:8f:
93:0c:c0:e4:0f:70:86:63:f0:5e:87:93:88:ab:18:
5c:a0:67:af:31:ec:d8:ea:2a:40:ed:14:6e:9d:86:
48:91:b5:58:c5:ae:8b:3e:d7:07:73:96:e6:71:37:
66:a6:9a:85:72:90:be:db:76:e2:0a:1a:0c:f0:1a:
63:7a:55:01:de:32:9d:cc:b2:be:af:06:be:b4:73:
b3:e9:dd:2e:4e:c3:f4:3c:88:c8:5c:34:a3:a6:c4:
5b:e6:2e:08:02:ef:c1:17:51:0d:19:4e:b5:03:ca:
ce:20:3d:c5:62:de:61:79:45:c0:89:65:22:0a:d2:
8a:23:30:f2:be:81:d0:fd:e6:1b:79:d8:1c:25:e7:
ab:ed:e7:5b:54:1a:f8:a0:11:bf:a3:88:b4:ed:c3:
79:72:c0:ab:57:f3:ce:26:c0:98:3d:3b:c3:38:45:
a8:13:2e:e0:14:25:28:45:83:5a:d8:74:c9:37:2b:
7f:c2:6f:58:ec:21:96:6b:8b:db:ad:e9:f6:70:ab:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:C0:BD:9E:AF:7A:A5:9F:C0:93:EE:21:D4:B6:6E:D6:39:9A:7D
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/t7HAvZ6veqWfwJPuIdS2btY5mn0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5280:807::/48
Signature Algorithm: sha256WithRSAEncryption
30:29:c6:96:3e:ca:bc:f8:ed:0e:a7:3d:08:32:d9:b1:f4:4d:
fe:aa:86:c8:3d:af:b7:52:5b:2f:a7:f0:3b:14:83:7f:ec:67:
19:b9:03:17:84:c8:76:e9:39:8e:fe:48:f5:8c:c8:a2:fb:6e:
09:9f:3c:fe:43:fc:8e:c1:fe:47:de:a6:ca:e6:7e:06:2f:14:
82:1e:ce:a4:8d:65:09:bd:22:ee:9d:18:12:bf:be:e1:71:a6:
0f:ec:64:cd:f6:ed:07:21:24:b0:be:ca:15:e3:93:e4:e8:e7:
fe:bd:c3:a6:0e:dc:bf:8d:e3:90:96:0d:9c:b2:7c:96:29:28:
24:38:11:a3:79:71:55:e4:ab:8c:ef:22:e1:18:0b:28:6d:f0:
71:ca:77:48:2b:4b:17:7d:f2:1e:22:39:37:52:f3:ea:2b:19:
97:f2:c5:8b:83:50:58:5e:fc:cd:85:83:8f:33:ad:d8:2d:ef:
3b:1e:30:e5:2d:3d:01:77:8c:87:e7:e3:c0:6f:9f:83:bb:e1:
f8:f3:62:6c:ed:96:ed:b7:8f:98:9e:78:c3:01:40:87:2e:ff:
2d:e0:9f:63:9c:be:0b:04:a3:4e:6e:94:f5:a9:95:bd:59:4f:
54:3a:e0:ac:83:41:86:41:19:69:77:55:ae:37:c0:7a:35:d3:
b6:ed:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 12:38:46 2024 by rpki-client on console-ams.rpki-client.org