Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/euMQfPSdmPPVF6g1Wam7ueVvI5I.roa
File: euMQfPSdmPPVF6g1Wam7ueVvI5I.roa (raw, json)
Hash identifier: l6U9hLHTs6M+bmK2cmI11yP7JIaUoraWiOy35T7F1qw=
Subject key identifier: 7A:E3:10:7C:F4:9D:98:F3:D5:17:A8:35:59:A9:BB:B9:E5:6F:23:92
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 18C2
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/euMQfPSdmPPVF6g1Wam7ueVvI5I.roa
Signing time: Wed 24 May 2023 03:54:05 +0000
ROA not before: Wed 24 May 2023 03:54:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134762
IP address blocks: 43.226.49.0/24 maxlen: 24
43.226.53.0/24 maxlen: 24
43.226.54.0/24 maxlen: 24
43.227.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6338 (0x18c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: May 24 03:54:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=7AE3107CF49D98F3D517A83559A9BBB9E56F2392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:cc:2d:2b:77:fc:65:db:63:50:10:91:88:
7a:8b:90:89:be:71:f1:7d:de:b3:7f:ad:7f:5a:24:
01:f4:56:2c:39:f6:c5:eb:a6:82:a0:91:6d:ca:3a:
d9:59:84:86:01:87:24:de:fc:14:da:24:f4:4d:b7:
3f:42:7b:ac:fd:35:6e:44:48:bc:7f:2b:9c:e3:ee:
f1:b1:12:61:08:82:f2:38:3e:52:be:d9:46:58:36:
de:e6:c7:3d:2b:9b:dc:55:36:62:ad:30:25:03:df:
88:2b:4e:56:02:12:a4:a9:7b:5f:81:67:bf:f3:a9:
1b:5a:6f:c2:91:38:6d:c6:ea:39:ab:a3:8e:df:a5:
15:29:62:fe:e9:54:82:19:55:e2:76:35:c5:88:e2:
52:aa:7f:f8:5f:70:a0:01:d7:4b:dc:65:d8:b0:66:
1c:f4:60:a8:5e:bb:d5:2c:44:c8:bd:87:47:1a:1b:
73:c6:04:f3:0b:28:08:3a:83:20:c6:7f:d4:d1:2c:
de:c8:41:3c:ec:c5:ea:d2:d8:a1:45:c6:66:38:26:
57:a4:e4:35:65:6e:b9:0a:93:78:f9:de:fa:a9:d2:
83:1f:d1:fc:b7:5a:8d:3c:4e:b9:66:21:b5:b0:e5:
82:ec:c7:ba:24:41:7b:f3:ff:49:ea:a0:d3:32:86:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:10:7C:F4:9D:98:F3:D5:17:A8:35:59:A9:BB:B9:E5:6F:23:92
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/euMQfPSdmPPVF6g1Wam7ueVvI5I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
43.226.53.0-43.226.54.255
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:20:9b:eb:b2:ba:7c:a9:25:64:20:13:3c:a1:c1:f5:38:c5:
59:44:35:fd:f3:6e:93:57:e9:89:3c:d3:e3:60:b3:ff:d5:c7:
f8:53:9a:dc:c6:ee:46:c2:e2:81:84:78:73:f3:a8:7e:cf:5d:
0f:6f:82:5c:0c:45:f8:2a:cc:3e:dd:90:66:13:81:00:26:95:
c3:07:15:75:06:31:26:30:75:34:d9:74:eb:bd:1a:dd:86:44:
f9:37:93:b9:6c:71:6d:0a:99:85:46:2c:21:bd:34:6f:71:db:
9e:18:7d:cf:10:51:36:99:92:7a:61:00:ca:58:91:a2:7e:6a:
ad:14:ef:06:54:b5:cb:d6:ab:a2:2a:4f:aa:ca:c0:dd:e4:3b:
cb:a3:6a:1c:26:4d:85:9c:a9:48:82:55:92:b7:31:86:63:e2:
b8:91:17:7d:6e:3c:b9:bc:de:ba:3f:9b:fb:a5:d6:a3:a6:9c:
60:58:93:dc:1b:28:5f:e4:3c:41:f8:1b:59:64:1a:40:61:94:
36:c0:a9:56:9c:46:9a:b0:e4:aa:01:18:7b:97:7c:a0:bf:a7:
78:3c:5d:81:be:e7:49:7b:0e:c3:aa:2f:6f:53:78:9e:39:e7:
73:eb:50:a6:1c:b8:02:36:59:76:1e:a0:66:36:9e:63:29:dd:
4e:45:35:96
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICGMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMzA1MjQw
MzU0MDVaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDdBRTMxMDdDRjQ5RDk4
RjNENTE3QTgzNTU5QTlCQkI5RTU2RjIzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6I8wtK3f8ZdtjUBCRiHqLkIm+cfF93rN/rX9aJAH0Viw59sXr
poKgkW3KOtlZhIYBhyTe/BTaJPRNtz9Ce6z9NW5ESLx/K5zj7vGxEmEIgvI4PlK+
2UZYNt7mxz0rm9xVNmKtMCUD34grTlYCEqSpe1+BZ7/zqRtab8KROG3G6jmro47f
pRUpYv7pVIIZVeJ2NcWI4lKqf/hfcKAB10vcZdiwZhz0YKheu9UsRMi9h0caG3PG
BPMLKAg6gyDGf9TRLN7IQTzsxerS2KFFxmY4Jlek5DVlbrkKk3j53vqp0oMf0fy3
Wo08TrlmIbWw5YLsx7okQXvz/0nqoNMyhiVvAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUeuMQfPSdmPPVF6g1Wam7ueVvI5IwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvZXVNUWZQU2RtUFBW
RjZnMVdhbTd1ZVZ2STVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEw
GgMEACviMTAMAwQAK+I1AwQAK+I2AwQAK+NEMA0GCSqGSIb3DQEBCwUAA4IBAQCP
IJvrsrp8qSVkIBM8ocH1OMVZRDX9826TV+mJPNPjYLP/1cf4U5rcxu5GwuKBhHhz
86h+z10Pb4JcDEX4Ksw+3ZBmE4EAJpXDBxV1BjEmMHU02XTrvRrdhkT5N5O5bHFt
CpmFRiwhvTRvcdueGH3PEFE2mZJ6YQDKWJGifmqtFO8GVLXL1quiKk+qysDd5DvL
o2ocJk2FnKlIglWStzGGY+K4kRd9bjy5vN66P5v7pdajppxgWJPcGyhf5DxB+BtZ
ZBpAYZQ2wKlWnEaasOSqARh7l3ygv6d4PF2BvudJew7Dqi9vU3ieOedz61CmHLgC
Nll2HqBmNp5jKd1ORTWW
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org