Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/MmxK3wqnplrBUJygBw81FbN0XV4.roa
File: MmxK3wqnplrBUJygBw81FbN0XV4.roa (raw, json)
Hash identifier: jkPTTvBLGoJd4Zh/qp7qEBhGnUxw4xtCDxn80cViKFs=
Subject key identifier: 32:6C:4A:DF:0A:A7:A6:5A:C1:50:9C:A0:07:0F:35:15:B3:74:5D:5E
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 15E5
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MmxK3wqnplrBUJygBw81FbN0XV4.roa
Signing time: Wed 13 Mar 2024 01:21:41 +0000
ROA not before: Wed 13 Mar 2024 01:21:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4515
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5605 (0x15e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Mar 13 01:21:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=326C4ADF0AA7A65AC1509CA0070F3515B3745D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:86:c6:b5:3b:44:dd:63:14:b5:81:85:3b:
69:bd:33:98:66:33:41:eb:f3:7e:6f:8a:3e:2a:38:
4c:3a:23:82:80:fd:0a:02:8c:44:3f:db:77:4a:4a:
5a:0c:f1:8e:83:a1:3d:b1:ee:e1:7d:c4:8c:44:65:
fb:52:c9:cf:7c:b0:d9:2a:38:f6:8c:44:48:5a:df:
b3:fc:86:97:96:45:32:68:b7:71:06:3f:53:f4:f2:
49:f1:7c:c4:5e:d0:5d:0b:a6:b6:79:0c:d9:e0:f9:
5b:2e:c7:e7:65:9c:dc:34:17:c3:be:2a:e1:11:16:
da:37:10:c1:d9:18:e7:bb:a4:ac:df:eb:e1:0a:b6:
b3:b6:20:ef:87:6e:24:90:1e:ec:17:cc:06:90:be:
fd:3c:8f:c8:76:44:11:3a:68:f8:5d:ff:22:56:f1:
a1:f9:93:07:8d:8c:8c:c1:82:c0:4b:d3:86:bf:78:
a9:57:2c:cb:3f:16:35:23:9c:eb:99:37:3a:fd:55:
1e:90:be:c8:a2:f0:98:b1:4c:4d:6a:29:71:c5:f9:
77:5f:a0:42:19:14:9d:16:6d:bc:9d:70:77:78:20:
e8:12:cd:55:49:92:8f:88:5e:56:2a:f8:35:3b:6a:
6f:b3:f8:c4:87:bb:88:4c:92:80:99:f3:c4:06:33:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:4A:DF:0A:A7:A6:5A:C1:50:9C:A0:07:0F:35:15:B3:74:5D:5E
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MmxK3wqnplrBUJygBw81FbN0XV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.246.0/23
Signature Algorithm: sha256WithRSAEncryption
33:4a:db:dd:7d:08:9b:ed:49:30:e0:85:55:a5:ba:e0:b4:a2:
15:71:f5:da:19:40:c8:9e:b1:90:d3:f9:ba:b2:34:fc:ca:43:
de:7f:25:f1:69:61:cd:3c:b1:ab:6a:8d:d4:69:f3:27:cf:e9:
07:6b:7c:8a:81:3a:3e:41:67:6d:8a:6a:1e:25:32:78:86:9b:
bd:5f:21:bc:1c:ed:11:24:69:ff:34:3f:23:a6:bb:9f:95:3d:
74:e4:fd:16:b2:cb:f8:2e:1b:16:aa:5f:4d:6c:90:e6:1e:7e:
37:28:e6:86:55:1c:b2:12:83:12:b9:ae:58:00:13:e3:bd:9b:
b7:9b:ba:10:37:7f:a3:f3:fc:e5:ac:2b:a1:d2:e2:75:e7:14:
71:24:ea:02:bb:3c:fc:24:0b:59:fb:19:ae:fc:8b:e6:37:b2:
71:4f:45:24:f6:68:8e:81:af:a2:7a:b2:3b:38:bd:e9:d4:40:
fe:36:6e:e3:91:ac:65:76:3e:d4:20:e2:f2:3b:24:03:fc:33:
ef:bb:12:c7:10:1d:17:8e:d4:fe:86:9b:2c:50:e9:e0:46:ec:
57:18:a6:51:9a:66:84:fd:61:3f:82:6e:9d:6b:3f:b8:f8:b7:
73:70:af:6e:89:38:e7:08:17:07:42:20:2c:d7:0c:1a:ba:8e:
24:c9:eb:29
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICFeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4
ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNDAzMTMw
MTIxNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMyNkM0QURGMEFBN0E2
NUFDMTUwOUNBMDA3MEYzNTE1QjM3NDVENUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK4IbGtTtE3WMUtYGFO2m9M5hmM0Hr835vij4qOEw6I4KA/QoC
jEQ/23dKSloM8Y6DoT2x7uF9xIxEZftSyc98sNkqOPaMREha37P8hpeWRTJot3EG
P1P08knxfMRe0F0LprZ5DNng+Vsux+dlnNw0F8O+KuERFto3EMHZGOe7pKzf6+EK
trO2IO+HbiSQHuwXzAaQvv08j8h2RBE6aPhd/yJW8aH5kweNjIzBgsBL04a/eKlX
LMs/FjUjnOuZNzr9VR6Qvsii8JixTE1qKXHF+XdfoEIZFJ0WbbydcHd4IOgSzVVJ
ko+IXlYq+DU7am+z+MSHu4hMkoCZ88QGM8mpAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQUMmxK3wqnplrBUJygBw81FbN0XV4wHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL
qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvTW14SzN3cW5wbHJC
VUp5Z0J3ODFGYk4wWFY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEAHsx7QMEAHsx8gMEAXsx9jANBgkqhkiG9w0BAQsFAAOCAQEAM0rb3X0Im+1J
MOCFVaW64LSiFXH12hlAyJ6xkNP5urI0/MpD3n8l8WlhzTyxq2qN1GnzJ8/pB2t8
ioE6PkFnbYpqHiUyeIabvV8hvBztESRp/zQ/I6a7n5U9dOT9FrLL+C4bFqpfTWyQ
5h5+NyjmhlUcshKDErmuWAAT472bt5u6EDd/o/P85awrodLidecUcSTqArs8/CQL
WfsZrvyL5jeycU9FJPZojoGvonqyOzi96dRA/jZu45GsZXY+1CDi8jskA/wz77sS
xxAdF47U/oabLFDp4EbsVximUZpmhP1hP4JunWs/uPi3c3Cvbok45wgXB0IgLNcM
GrqOJMnrKQ==
-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org