Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/UrNWExw_7zrEnnJkPQRUT6Gh6WM.roa
File: UrNWExw_7zrEnnJkPQRUT6Gh6WM.roa (raw, json)
Hash identifier: WsN+A4HtDzqa+MgpWggR1VMpgJ+OSEQaPQ23p7/Zkps=
Subject key identifier: 52:B3:56:13:1C:3F:EF:3A:C4:9E:72:64:3D:04:54:4F:A1:A1:E9:63
Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF
Certificate serial: 1574
Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/UrNWExw_7zrEnnJkPQRUT6Gh6WM.roa
Signing time: Tue 05 Mar 2024 06:26:31 +0000
ROA not before: Tue 05 Mar 2024 06:26:31 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 63199
IP address blocks: 139.159.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5492 (0x1574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF
Validity
Not Before: Mar 5 06:26:31 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=52B356131C3FEF3AC49E72643D04544FA1A1E963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:84:92:01:86:fc:ca:71:e4:ba:38:43:ef:
b6:92:f4:25:85:11:43:81:62:8d:52:af:58:a2:62:
df:fc:18:d9:82:35:55:b2:6e:42:e3:5a:fa:38:55:
9f:ae:29:0a:d1:56:d2:25:e7:7c:1a:7c:5a:28:9e:
69:d1:79:15:00:01:0f:2c:90:e3:43:44:78:e7:15:
98:66:51:f6:88:54:65:72:a6:6a:55:d9:92:16:b6:
cf:8b:b3:ba:03:21:37:84:63:27:81:a4:5c:83:b2:
91:ca:ae:78:11:07:b1:f6:b5:93:39:34:ff:9c:3d:
45:5b:ef:4b:e6:c8:3b:e6:1c:f1:52:45:ea:b9:a4:
c7:95:db:3c:7a:83:1b:25:8d:c6:54:2e:51:30:79:
a1:d9:ae:0e:78:c5:04:49:fa:15:6a:96:b2:23:12:
d6:f3:b5:52:81:ec:6d:34:7a:91:05:f9:1d:e7:e7:
6b:d4:08:b1:6a:db:fb:40:11:62:45:e4:9d:5e:17:
04:f7:b1:6d:2e:95:84:af:51:e7:e3:84:08:e4:e5:
ff:85:58:d1:f8:e3:11:c2:0d:42:31:33:78:04:32:
91:17:a2:a8:a4:c5:d9:2c:93:9b:c5:f4:6f:58:03:
dc:e0:64:6e:df:47:b0:25:2e:df:da:0d:32:1e:0b:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:56:13:1C:3F:EF:3A:C4:9E:72:64:3D:04:54:4F:A1:A1:E9:63
X509v3 Authority Key Identifier:
keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/UrNWExw_7zrEnnJkPQRUT6Gh6WM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:de:ef:b7:70:43:88:ad:20:14:38:37:08:95:49:48:23:a2:
5e:1b:06:b5:85:45:2b:c8:93:8c:18:35:70:93:9e:b9:8b:6a:
39:2f:51:79:b6:e8:dd:22:a7:46:4b:1f:33:0f:82:d8:02:7c:
e1:c3:31:8b:e2:dd:d2:2c:3e:3b:18:ce:38:d5:71:ee:9c:67:
44:15:ba:b2:8e:29:45:0b:9f:a0:0d:5a:b8:67:f2:55:ca:67:
9d:92:82:cc:17:4d:69:56:c2:5c:87:26:f8:82:1d:c2:66:f3:
e7:ef:ff:f3:c2:8f:d0:00:e9:1f:95:96:06:40:88:95:76:61:
5c:cc:10:9f:db:2f:bb:7c:88:ad:98:76:9b:4d:58:bc:3a:1d:
9b:38:80:dd:5e:96:bc:93:39:98:6f:5c:e1:c7:d1:9e:31:44:
0c:f8:70:97:d7:a0:c7:8a:08:c9:51:64:62:f4:43:0f:6d:ec:
f7:41:2c:d8:95:57:64:d3:07:2d:b5:75:d7:4e:5c:91:15:8a:
e9:62:48:fa:8b:38:4b:66:38:ad:45:ac:90:bb:ec:7a:15:78:
97:07:67:61:30:19:a0:e1:74:92:1f:d2:53:36:50:1d:55:43:
7e:1e:13:0a:df:c4:0b:43:b0:56:81:bd:1d:18:55:d2:8f:bc:
51:5c:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org