Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/RHP2EOsBFXXUmxuPO-MzxxcFeGo.roa
File: RHP2EOsBFXXUmxuPO-MzxxcFeGo.roa (raw, json)
Hash identifier: sOwfKemamfpGvApfYjTV+WNehLmqOmOVYWGwUpVzjcg=
Subject key identifier: 44:73:F6:10:EB:01:15:75:D4:9B:1B:8F:3B:E3:33:C7:17:05:78:6A
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 100F
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/RHP2EOsBFXXUmxuPO-MzxxcFeGo.roa
Signing time: Fri 19 May 2023 05:53:31 +0000
ROA not before: Fri 19 May 2023 05:53:31 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 38372
IP address blocks: 120.31.164.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4111 (0x100f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: May 19 05:53:31 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4473F610EB011575D49B1B8F3BE333C71705786A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:ed:e4:98:ba:33:b6:2e:c0:af:45:9e:ec:
7e:73:bd:51:60:10:2c:63:36:9d:f3:da:68:5f:7f:
b7:ed:14:e2:0c:01:60:62:c3:a0:6b:61:e1:a1:c9:
3c:db:42:b0:cf:9a:11:c7:07:73:b1:7c:b9:45:b1:
4b:b0:1e:7a:a2:a0:15:06:74:f3:e5:15:7f:a6:87:
8d:f8:2b:a3:b2:7a:51:58:8f:f7:f9:e2:8c:26:3b:
05:f8:c8:4f:de:fc:51:31:9d:8d:90:6f:38:a8:07:
d0:74:93:62:98:65:51:52:37:f2:8f:0a:52:b5:7f:
2a:08:16:2f:50:d7:4e:58:5b:81:98:4d:37:e1:75:
7c:5c:ae:11:67:01:ca:f5:08:3d:04:3f:f7:d9:3e:
d2:a1:4a:d0:51:dc:ca:b2:7b:27:24:10:0b:63:aa:
87:fb:7e:9e:25:82:53:5a:d9:93:3d:b8:2f:8e:76:
65:ce:71:60:ed:99:b5:36:ff:fb:43:15:a8:49:73:
f6:80:e3:ce:bd:b8:de:ca:15:57:61:71:68:3f:41:
c7:02:39:f9:11:65:c0:9e:6e:19:7c:c9:cb:c3:e5:
53:4b:8f:a0:57:a0:98:66:b4:99:e3:ba:87:9c:7b:
9a:a3:db:3d:23:0b:ef:7c:78:16:73:1e:ba:03:8d:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:F6:10:EB:01:15:75:D4:9B:1B:8F:3B:E3:33:C7:17:05:78:6A
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/RHP2EOsBFXXUmxuPO-MzxxcFeGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
98:0f:7d:f1:4c:9e:54:8a:10:49:ae:45:1c:bd:52:1a:fd:8f:
bf:c7:8a:80:6c:d5:6b:ab:a7:de:d6:8b:34:49:58:33:34:5c:
f6:ec:e0:4e:c6:2d:1c:b3:04:b4:b9:69:8b:62:88:df:1f:95:
a8:ac:5d:0d:b9:be:14:45:b0:a6:0b:9d:a4:6b:bd:2a:4e:98:
fa:3c:25:fb:9e:80:7f:b3:0b:22:50:17:f6:c4:e2:b6:d9:67:
3d:da:64:42:7e:fd:a5:b4:94:76:65:1e:c8:91:c9:fe:1e:d9:
a0:29:12:66:c6:71:a9:b8:e0:c1:83:ba:82:ac:ab:29:dc:ee:
d0:1e:af:2b:6f:65:3a:7f:c2:09:c9:aa:85:46:34:90:bc:ce:
cc:a8:ed:f4:92:e2:d4:d6:17:67:38:0a:0b:68:fd:07:1b:5d:
25:99:d2:a1:ac:04:91:d2:08:ab:f3:87:dd:76:2c:51:eb:02:
49:48:06:21:69:ac:40:5d:10:e0:00:e7:ec:8d:a5:26:48:b8:
07:33:6b:e2:62:8c:bd:b5:19:d5:0e:31:55:eb:ae:ac:e2:38:
05:ea:75:de:00:22:08:48:f9:60:7a:35:1e:a4:5e:13:4f:43:
c7:90:9d:76:35:f8:ba:db:32:07:92:78:e7:d7:26:72:7f:62:
14:62:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 01:50:59 2023 by rpki-client on console-fra.rpki-client.org