Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/O71Zt9wnVoTGo_rrjq65cOyDvME.roa
File: O71Zt9wnVoTGo_rrjq65cOyDvME.roa (raw, json)
Hash identifier: /T45xL/n7K6r2STmi9noLFN/a3p5cjxyEkMGczOvAGY=
Subject key identifier: 3B:BD:59:B7:DC:27:56:84:C6:A3:FA:EB:8E:AE:B9:70:EC:83:BC:C1
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 0DA0
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/O71Zt9wnVoTGo_rrjq65cOyDvME.roa
Signing time: Mon 16 Jan 2023 08:53:46 +0000
ROA not before: Mon 16 Jan 2023 08:53:46 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 139021
IP address blocks: 218.247.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 16 08:53:46 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=3BBD59B7DC275684C6A3FAEB8EAEB970EC83BCC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:6f:82:c9:6a:4b:71:56:88:59:af:b7:d3:
fc:48:18:47:ad:6c:36:08:df:13:94:80:38:60:e6:
f4:5e:f1:ad:8a:25:06:8f:cc:c2:73:51:34:15:db:
d5:7a:36:f3:7a:87:5e:0d:10:5a:1c:64:07:56:cd:
4e:5c:cc:f7:d9:30:38:66:da:6a:b0:b0:52:b7:f5:
97:5e:10:d7:ff:9f:b9:11:c6:b2:b2:06:6f:76:a6:
e5:bb:63:96:41:88:14:55:1d:9a:f4:74:4e:57:ee:
ec:9f:fe:d7:ac:b9:d8:99:1f:da:57:b4:45:6c:7e:
0b:ed:05:63:75:48:65:af:c0:2f:00:b8:ac:9a:d3:
d3:98:ef:0b:21:aa:d0:ec:65:c0:c6:2c:1d:1f:ca:
d7:d0:c6:3e:f8:4e:f3:32:30:f2:9e:93:0c:2e:cd:
84:ca:95:ca:33:13:b4:ba:01:fa:bc:3b:5f:20:ef:
ca:88:de:35:e2:b1:2b:21:e6:62:63:fc:3c:2e:f2:
61:3b:84:7b:ab:82:bd:97:ff:8f:2b:94:d5:24:a5:
81:95:9b:34:60:3e:a1:89:14:5a:16:2a:dc:03:92:
d2:70:c0:ab:04:d7:77:d8:ca:b4:04:19:dc:b7:2f:
c4:30:ce:e2:f9:72:49:47:d0:5f:06:f2:76:4a:ea:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:59:B7:DC:27:56:84:C6:A3:FA:EB:8E:AE:B9:70:EC:83:BC:C1
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/O71Zt9wnVoTGo_rrjq65cOyDvME.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.80.0/22
Signature Algorithm: sha256WithRSAEncryption
16:32:74:90:3e:60:6c:ce:52:c0:b2:c2:d3:37:c6:fc:b4:71:
aa:eb:fc:d3:a7:59:32:72:74:09:22:f0:8f:d9:85:89:aa:9b:
e1:db:58:94:73:00:78:36:e1:05:0f:cf:35:6c:71:ca:c9:54:
fe:40:b2:bc:75:b6:83:f1:30:05:e9:b2:cf:88:d3:27:5e:51:
14:b6:c8:de:4e:99:20:b6:e1:6e:37:c5:99:4d:36:66:74:fe:
7d:31:e9:32:76:47:71:aa:12:48:bb:a4:ef:5f:a8:7a:ee:91:
f8:5e:f1:f5:99:3a:f6:c2:fb:4d:da:b9:df:e5:15:e5:3e:f9:
70:fc:eb:60:30:2d:1a:e3:f1:72:de:b4:2f:36:e0:e4:64:ff:
a3:c4:d2:cd:db:8c:c7:af:50:82:0a:b9:2a:63:53:08:08:5f:
0b:6e:49:01:7c:2b:d8:68:05:f6:04:38:3f:37:2f:ed:d6:51:
02:f9:d6:65:dc:ef:72:dc:e0:c0:43:f4:24:d1:b6:58:f7:8b:
46:a8:62:01:c7:0b:87:c6:ca:be:06:47:1b:e4:96:8f:ca:63:
fa:5a:0d:12:c5:51:00:c5:29:01:d1:c0:04:82:f2:dc:77:1e:
09:ad:d0:3f:eb:89:7e:71:18:2d:c6:bb:84:83:53:06:ce:1d:
76:3c:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org