Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/Lu16Ya9yllUGCRVBC40K3w0jwVY.roa
File: Lu16Ya9yllUGCRVBC40K3w0jwVY.roa (raw, json)
Hash identifier: znjRTKzFYE3ShWbCJp3sekpjQ64C/ypK/HpgimU6OYk=
Subject key identifier: 2E:ED:7A:61:AF:72:96:55:06:09:15:41:0B:8D:0A:DF:0D:23:C1:56
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 15E6
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/Lu16Ya9yllUGCRVBC40K3w0jwVY.roa
Signing time: Wed 13 Mar 2024 01:21:41 +0000
ROA not before: Wed 13 Mar 2024 01:21:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5606 (0x15e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 13 01:21:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2EED7A61AF729655060915410B8D0ADF0D23C156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:93:8a:fa:0f:fa:49:28:c2:ec:2a:00:e4:
dd:0f:33:15:e9:ef:7f:e1:6b:67:c2:3f:9b:40:2e:
bb:c4:c5:69:20:99:f9:dd:7b:ea:d1:8e:ce:c8:fb:
38:29:7a:43:db:75:50:8a:a0:ba:26:81:ba:2d:a0:
3e:a5:ba:c1:96:ce:80:3d:20:80:22:93:5f:52:f9:
6e:13:ee:a7:e9:f5:f0:a6:24:42:4c:f8:a3:58:4e:
3a:60:e8:80:6e:e5:14:1c:de:54:48:a8:a3:85:d3:
b1:66:8a:49:98:4c:2c:c0:88:52:f1:e1:bd:9a:db:
10:9f:34:6c:32:21:67:c1:f9:10:d1:14:40:6e:d1:
26:0c:03:9f:21:84:4d:3a:7c:42:d6:a5:3d:7a:64:
77:c3:85:bc:2a:42:fc:c5:6a:d3:28:58:96:50:29:
fb:9f:9a:85:bd:68:e6:25:c5:48:ce:72:5c:52:e2:
51:71:3b:d5:c7:32:d1:3d:5c:1f:e2:3d:90:5c:b2:
28:ec:a9:31:31:f0:13:e0:8b:db:ef:54:53:1b:ce:
c6:c5:f4:ac:6a:36:4f:2a:19:58:59:f7:5c:a4:5d:
70:b7:e9:b5:6d:81:ac:29:92:f9:00:20:55:85:5e:
3c:3d:8e:32:06:38:d1:a3:02:5e:08:ca:b4:28:59:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:ED:7A:61:AF:72:96:55:06:09:15:41:0B:8D:0A:DF:0D:23:C1:56
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/Lu16Ya9yllUGCRVBC40K3w0jwVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
5e:bd:99:05:83:9b:98:cb:70:e4:a0:60:11:49:7a:23:2e:8d:
85:80:a8:0a:1a:6a:aa:9a:38:bf:cf:09:c2:98:c7:9f:b9:6d:
da:47:63:ae:28:2a:97:5a:26:9d:8c:08:8d:85:f6:e6:f4:b0:
bf:b4:a2:67:51:50:3a:61:3c:22:0a:0d:2a:63:c3:21:0a:80:
63:06:ef:24:75:c2:60:80:cc:bf:14:7f:09:90:d9:bb:e1:0f:
a6:91:fa:1b:49:25:af:a5:f6:e4:82:bb:f5:5c:ad:6a:6b:ce:
4e:c2:8f:1a:be:e5:3b:99:c8:28:69:4f:8d:3f:a9:63:b1:66:
36:75:b6:be:4b:d2:cc:6a:3f:85:cf:fd:e7:cb:b1:87:4b:8b:
dd:c5:e7:aa:b7:09:4c:5e:da:1c:e7:f0:55:63:78:6f:fd:fc:
e0:9a:ba:c0:e4:da:b4:b5:3e:ce:17:2f:14:1c:71:41:f7:8b:
a3:fc:46:c1:7c:90:58:ab:30:38:57:6d:d1:e9:85:6b:1f:2c:
b3:94:2b:fb:fa:39:86:35:3d:f4:0a:f6:26:87:d5:4e:e6:1e:
de:72:25:18:0b:a9:f8:91:42:8f:9c:5c:ad:67:be:1e:9e:1a:
e2:ab:48:5b:68:80:11:e8:67:01:a7:e7:77:41:02:87:91:b7:
9c:b5:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org