Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
File: GAjHeEY891Cz9B8mhXzFfA2k2d0.roa (raw, json)
Hash identifier: G5lweNqGicojjrW78bKTK27m5rpZ5++ADPYDX0YWOx4=
Subject key identifier: 18:08:C7:78:46:3C:F7:50:B3:F4:1F:26:85:7C:C5:7C:0D:A4:D9:DD
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1012
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
Signing time: Fri 19 May 2023 05:53:32 +0000
ROA not before: Fri 19 May 2023 05:53:32 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 135373
IP address blocks: 112.73.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4114 (0x1012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: May 19 05:53:32 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=1808C778463CF750B3F41F26857CC57C0DA4D9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:01:f8:ba:3a:0d:53:17:fc:e9:ac:c7:ab:
0e:f9:31:a5:bc:79:ff:40:ee:f6:38:7c:62:47:42:
a7:ed:1f:01:21:ce:9c:ac:7f:18:d5:88:47:d9:3b:
cd:79:4c:76:61:a2:07:d6:05:97:99:17:a8:77:e1:
ba:29:0f:7a:8b:a0:9c:be:fb:a0:d7:e9:a1:c2:19:
93:d0:45:99:a2:39:6a:01:82:8d:51:d9:84:c5:ab:
b3:ca:fc:2d:22:01:a0:12:04:1d:8b:72:4f:56:4f:
d7:4c:68:3f:87:1f:30:91:d6:c7:4f:32:76:96:47:
54:32:60:57:6f:ed:0c:98:4b:ad:2a:fb:d6:50:6e:
d9:50:6c:96:c9:bb:f4:d9:91:19:51:2f:46:94:fb:
5e:69:9d:05:b7:a0:3a:bd:2c:d2:71:ee:14:ce:fd:
9c:e6:fd:88:a5:2e:f4:e0:34:0b:c3:a4:b1:7f:b8:
4b:89:60:1e:a1:b5:11:c8:59:c2:83:1f:43:9e:64:
85:4b:af:06:ec:36:a4:30:e8:75:06:46:7b:f6:5b:
92:bc:8e:eb:93:7d:80:e0:86:f8:d8:23:3b:91:00:
e6:5f:a4:c0:31:ed:8c:8f:a6:1e:0c:19:88:52:28:
01:2f:02:b9:46:76:97:7c:4e:4e:6f:31:dc:45:0b:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:C7:78:46:3C:F7:50:B3:F4:1F:26:85:7C:C5:7C:0D:A4:D9:DD
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/GAjHeEY891Cz9B8mhXzFfA2k2d0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:c4:26:e5:c8:56:7d:57:73:83:e5:52:22:2c:0e:52:0f:91:
55:9a:20:2f:fe:c8:a7:af:a2:68:2d:d6:e2:6d:c4:f5:57:c4:
8c:37:b7:fe:09:33:6d:dd:2e:05:c4:10:e7:f0:3e:8b:95:22:
6c:44:fe:48:0a:d2:cd:29:a0:e5:dc:81:8c:f0:4f:b5:51:0b:
06:a2:37:1b:75:ea:f7:ea:e9:35:5c:c2:d5:84:46:b0:9a:7b:
4e:6b:97:8b:c6:ba:ab:38:9a:6c:84:b5:89:2e:04:91:f9:59:
1d:00:be:40:6c:be:7f:45:a9:a7:d1:4c:7b:b0:fd:10:ce:2a:
57:49:52:3d:48:34:80:fd:50:8e:12:c6:db:23:e1:af:ce:e0:
90:13:11:e9:bd:68:4a:ca:80:30:97:b8:92:82:ea:26:7e:03:
ec:c9:64:c3:9a:6a:2a:34:85:0f:c0:da:a5:7c:ed:58:71:59:
e3:0d:fb:7c:45:01:28:c6:2a:23:2f:5b:6a:72:55:4c:27:5a:
ba:eb:22:6d:71:6e:4d:da:3b:2a:4d:59:9e:75:28:b0:b6:33:
e7:47:d8:88:22:04:73:2a:ee:ec:83:f6:b0:de:e5:9a:0b:12:
17:c8:23:4c:1e:02:41:2c:55:bd:9b:b9:bb:5b:09:6b:13:a5:
70:49:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 01:50:59 2023 by rpki-client on console-fra.rpki-client.org