Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/gj4Vv3AUpU5YVoXsuojWF4N6kzQ.roa
File: gj4Vv3AUpU5YVoXsuojWF4N6kzQ.roa (raw, json)
Hash identifier: 47rE36BVukB7xR51fXEbKCsDvlvlZcQwPUZGA6YmOVY=
Subject key identifier: 82:3E:15:BF:70:14:A5:4E:58:56:85:EC:BA:88:D6:17:83:7A:93:34
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 0D9D
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/gj4Vv3AUpU5YVoXsuojWF4N6kzQ.roa
Signing time: Mon 16 Jan 2023 08:53:45 +0000
ROA not before: Mon 16 Jan 2023 08:53:45 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 139021
IP address blocks: 218.247.64.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3485 (0xd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 16 08:53:45 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=823E15BF7014A54E585685ECBA88D617837A9334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:50:b4:cb:92:9f:0d:1d:69:20:e6:aa:81:
db:bf:33:49:b1:30:cb:be:97:f5:18:a6:ec:eb:f1:
40:50:04:1b:6c:bd:28:a5:8c:4f:87:a2:70:52:f8:
2c:3d:7b:40:77:6f:f6:ba:c6:48:dd:83:97:cd:78:
e4:41:1d:79:2c:12:7b:8a:63:d6:dd:ee:37:a2:b9:
04:81:4f:3b:09:06:87:d5:f7:15:f9:9a:30:49:84:
64:6f:c1:69:a2:ae:7d:4c:0d:9f:38:2c:70:11:0b:
fa:80:89:d5:18:7c:a7:ae:c8:73:2b:66:75:43:57:
3d:83:15:98:a8:2e:20:14:64:77:23:bd:22:08:6f:
d7:c8:15:9c:ef:a2:fe:9a:8b:ba:0f:fb:27:ed:51:
76:b5:66:fa:96:09:29:e7:99:34:6e:26:9b:38:22:
e9:d7:5d:76:29:3b:ae:96:c2:e5:e5:f1:8e:9e:ff:
b6:d2:55:a4:bc:4d:ff:6c:2e:f8:75:32:4f:bc:d2:
d5:c7:7f:ce:b6:89:05:38:93:9f:52:96:39:1f:c8:
73:19:c8:ca:92:ab:34:73:71:c2:5a:a6:b9:76:ae:
3a:a3:c5:27:75:a1:ec:63:9b:0f:a4:5f:fa:ec:96:
42:e2:fa:30:4e:a7:48:b9:2e:ad:ae:ca:0d:bd:ce:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:15:BF:70:14:A5:4E:58:56:85:EC:BA:88:D6:17:83:7A:93:34
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/gj4Vv3AUpU5YVoXsuojWF4N6kzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.64.0/20
Signature Algorithm: sha256WithRSAEncryption
38:c9:0a:0f:25:f4:cd:6d:51:dd:77:c4:71:f9:45:50:05:44:
8a:06:d1:56:6a:e7:bf:d0:b0:fa:74:d9:6b:4f:97:f4:f2:3a:
10:0a:ba:85:53:4d:91:97:9d:ad:40:1f:32:f3:44:c1:2d:5a:
eb:b2:c4:01:64:58:af:3d:aa:34:86:b8:82:ce:35:cd:45:ba:
29:07:96:38:96:47:27:74:85:84:9e:6b:55:4f:d1:9a:a2:6b:
f7:ea:de:0b:91:dc:7d:96:4b:f9:01:49:6d:9f:2c:cc:fe:55:
9b:a2:df:8f:03:a5:af:06:c9:32:47:49:6d:90:3e:46:25:3f:
fc:24:51:30:22:85:80:52:ed:b8:0a:9e:1e:1d:7f:7e:94:a1:
34:43:a2:b1:33:90:f7:06:01:80:d6:78:55:5a:8e:93:2f:34:
e1:dc:7f:6e:8d:bf:a1:b3:6b:14:0a:28:5d:4d:79:7d:91:00:
48:89:c5:20:df:40:ac:b9:60:8f:eb:a0:c6:73:b7:01:ad:8d:
5c:84:db:bf:5c:c8:9d:fb:7b:fe:37:7c:34:39:ee:70:16:65:
bf:54:8f:ef:54:42:68:71:e7:e3:d4:7d:d8:71:2c:ba:a8:40:
39:66:6a:bd:ca:7c:fd:9e:f1:bd:f6:96:9f:76:55:30:af:82:
22:e7:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org