Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/PMgY3KJ9_sAQAxmFpsqUIQYFcZ4.roa
File: PMgY3KJ9_sAQAxmFpsqUIQYFcZ4.roa (raw, json)
Hash identifier: 1hi92RmFxHWAMLSkjZMyNCKRtr4tHb3TaxfEpHmfOdc=
Subject key identifier: 3C:C8:18:DC:A2:7D:FE:C0:10:03:19:85:A6:CA:94:21:06:05:71:9E
Certificate issuer: /CN=CC8CF726F2323299108744D6930BEF18D677445D
Certificate serial: 0703
Authority key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/PMgY3KJ9_sAQAxmFpsqUIQYFcZ4.roa
Signing time: Fri 02 Dec 2022 11:34:28 +0000
ROA not before: Fri 02 Dec 2022 11:34:28 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 48024
IP address blocks: 2403:3d80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC8CF726F2323299108744D6930BEF18D677445D
Validity
Not Before: Dec 2 11:34:28 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=3CC818DCA27DFEC010031985A6CA94210605719E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:3b:f0:48:79:78:dc:d7:a3:86:52:20:0b:
1e:1f:a4:fd:ba:db:13:1c:5f:59:52:cf:a1:97:bc:
e8:00:77:9d:9f:67:60:26:10:a9:21:f1:ac:2f:03:
1b:d8:3c:ca:87:bd:5b:71:29:b8:36:91:3e:a3:d1:
03:cb:17:89:8e:91:b0:2e:d5:4f:9d:b8:5a:07:3c:
75:44:10:0d:83:2e:99:45:60:42:17:e9:8c:89:5f:
fa:fd:87:da:9f:c4:ce:23:3e:fe:03:71:a6:f8:79:
ed:ec:4b:ce:90:5f:f6:7f:fe:15:51:ef:c4:f6:e4:
31:97:1c:29:f3:3a:31:27:49:02:df:98:8b:9b:83:
1d:8d:13:02:2a:6f:60:3b:d4:f6:0c:1d:8a:36:cf:
fd:fb:6c:9f:94:30:ca:cb:1d:c1:66:30:c6:f2:c6:
4f:ab:2c:9f:3d:55:63:c0:d1:e8:30:b0:2d:f1:01:
e0:80:c7:3d:14:d8:a6:f3:1d:ba:0a:72:b6:0b:60:
73:fe:b9:43:cf:44:a6:03:79:fb:88:59:89:25:56:
ca:04:56:32:fb:9c:0a:c2:af:15:09:23:61:cd:36:
3a:2c:be:d4:6f:fe:91:94:49:cc:a3:b8:6c:86:fc:
2a:f8:6d:5c:55:f5:97:62:ce:2b:ec:48:2c:e7:bb:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:18:DC:A2:7D:FE:C0:10:03:19:85:A6:CA:94:21:06:05:71:9E
X509v3 Authority Key Identifier:
keyid:CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/PMgY3KJ9_sAQAxmFpsqUIQYFcZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
82:e7:65:82:72:10:f6:57:0a:93:66:dd:8a:e8:7c:34:f0:73:
d1:b7:c4:e6:b8:84:87:14:6a:39:78:a5:02:70:e5:e2:43:4f:
f9:45:78:54:be:6f:d1:af:2b:7c:50:78:2f:52:46:8b:10:5e:
3c:f0:c6:6a:0d:c0:c2:2a:cc:f7:da:aa:21:38:9a:32:79:12:
88:11:18:61:cd:ad:00:5a:65:bd:b6:4e:57:c3:cb:4d:5f:af:
8c:7c:8b:a1:1b:0f:e4:67:9a:bc:c4:c9:56:db:00:8b:1e:a0:
bc:ca:13:d3:b4:34:8c:e0:3f:82:75:7a:0e:8f:6c:15:ce:c5:
1d:bd:dc:48:ad:52:fd:7b:d1:e8:16:d5:9f:c0:1d:8f:8e:ce:
de:00:a9:af:68:20:58:93:c8:a4:b5:0b:8a:76:e8:f2:a3:5c:
46:49:c8:87:1d:c1:11:fc:79:f9:13:71:f1:bb:d1:63:9c:e7:
59:de:6d:e4:01:9e:cf:56:26:eb:fa:40:5f:71:04:3e:5d:a5:
4c:a3:44:00:d8:f2:72:e3:e5:5b:00:34:82:cd:bc:0c:41:62:
00:a4:c8:9f:6b:8a:30:3c:c5:9c:66:14:94:66:bb:10:43:6d:
8f:e9:cd:f9:0f:af:e2:0f:0b:cf:66:3e:cc:90:12:92:c5:95:
d7:ec:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:53 2023 by rpki-client on console-fra.rpki-client.org