Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/GZgMUG95V_jF5SyZ3UCt-ip4zEg.roa
File: GZgMUG95V_jF5SyZ3UCt-ip4zEg.roa (raw, json)
Hash identifier: sLFcQCbBwf7iEU1v14IX3Xb5UlI3rqVcHT7KDXAdP1M=
Subject key identifier: 19:98:0C:50:6F:79:57:F8:C5:E5:2C:99:DD:40:AD:FA:2A:78:CC:48
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 0D8B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GZgMUG95V_jF5SyZ3UCt-ip4zEg.roa
Signing time: Fri 13 Jan 2023 03:52:38 +0000
ROA not before: Fri 13 Jan 2023 03:52:38 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 139021
IP address blocks: 218.247.64.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3467 (0xd8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 13 03:52:38 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=19980C506F7957F8C5E52C99DD40ADFA2A78CC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:46:ff:77:77:d3:3d:29:bf:a3:f3:eb:b9:
0d:73:6c:d0:20:bf:14:37:01:a8:59:06:ea:0a:97:
a7:d5:10:72:7d:11:4c:46:c0:4a:b9:56:93:eb:14:
8c:2a:94:07:1f:42:e6:68:d9:75:9b:8c:7e:eb:6b:
1a:64:a7:a2:3b:3d:bc:f6:30:d1:ab:bc:0e:88:a7:
22:57:89:25:fe:5a:f6:8d:9d:5d:cf:c9:2a:4e:75:
2d:d8:01:54:9f:33:7f:4e:67:78:b4:62:a3:cf:da:
ec:90:75:3a:48:b0:ea:0e:b4:67:0a:b0:b7:8b:3b:
e9:50:b5:62:67:ef:16:92:8f:c1:a8:17:24:b1:56:
21:66:48:2c:1c:9f:a1:07:6e:ba:d0:bd:9f:51:ea:
3e:d8:09:fc:f4:78:d9:11:cf:61:94:79:b6:89:ab:
9e:39:3c:56:6f:ed:bb:5a:0b:10:d2:0e:84:41:79:
a9:40:59:ee:6c:26:ec:8d:05:d1:f8:61:30:72:da:
d2:44:a4:0a:83:18:d5:a7:27:81:9f:01:ec:42:a4:
cb:1f:af:b5:e7:88:a7:79:ee:b7:d2:9c:c0:aa:1b:
71:b7:ed:b0:8a:76:6f:4d:37:51:88:1f:38:ae:04:
59:1f:59:2a:7b:ab:2c:a4:41:e6:06:15:dd:66:ae:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:0C:50:6F:79:57:F8:C5:E5:2C:99:DD:40:AD:FA:2A:78:CC:48
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GZgMUG95V_jF5SyZ3UCt-ip4zEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:b3:56:da:06:85:24:43:ab:9e:09:bc:0d:e1:91:91:63:ec:
69:ce:e3:ff:8a:e7:1f:1b:f0:5d:3e:0c:b1:54:63:d2:cc:dd:
f6:2a:b6:e6:2a:0b:4b:2c:85:36:58:c3:43:22:32:06:9d:8f:
fd:55:4d:69:56:de:5f:26:0d:3f:e6:aa:ab:3c:ee:4a:50:1a:
cc:cc:ae:e5:b3:a0:cc:7a:ee:e6:6e:83:d3:4f:00:2e:4c:2b:
db:92:98:bd:10:05:be:4b:2b:59:97:43:13:ca:64:c9:bc:50:
be:f7:75:05:71:13:a9:c3:c7:2f:01:c5:b2:f1:2c:cd:95:b6:
bf:37:c9:fd:c4:cd:9b:71:52:aa:5d:f9:60:5c:37:0b:c9:90:
59:11:52:06:54:36:91:ba:0b:b0:1a:ca:c6:bd:6a:f9:7c:27:
c0:f0:bd:b1:85:4a:a8:43:79:db:7b:2e:73:2d:e6:f1:04:ae:
52:7f:d7:82:59:f0:58:7d:89:ce:18:42:f8:33:93:c3:c9:2c:
c9:b1:ea:8a:2c:37:ac:70:51:fe:d3:7c:0e:fd:3f:33:03:f8:
70:c7:24:44:61:e2:0d:6a:1b:42:9f:8f:a4:a9:16:d8:9d:68:
2c:f4:c8:36:e3:6c:11:aa:53:69:60:c4:1a:28:fe:94:0f:10:
6f:77:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org