Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/vFbcOIfruvv9lVXH2L5_HCIcR1o.roa
File: vFbcOIfruvv9lVXH2L5_HCIcR1o.roa (raw, json)
Hash identifier: 7tkEqPczmtNCZwkEA3x1iJvmSwZbTHu0kMLI2/5xP2A=
Subject key identifier: BC:56:DC:38:87:EB:BA:FB:FD:95:55:C7:D8:BE:7F:1C:22:1C:47:5A
Certificate issuer: /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Certificate serial: D8
Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/vFbcOIfruvv9lVXH2L5_HCIcR1o.roa
Signing time: Sun 04 Feb 2024 10:35:39 +0000
ROA not before: Sun 04 Feb 2024 10:35:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4837
IP address blocks: 36.50.226.0/23 maxlen: 32
Validation: Failed, certificate revoked on Sun 11 Feb 2024 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Validity
Not Before: Feb 4 10:35:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BC56DC3887EBBAFBFD9555C7D8BE7F1C221C475A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:ea:b6:eb:00:8f:29:b6:54:6a:4a:62:fe:
8b:67:4d:8d:f9:c9:ea:01:75:d1:6f:fb:42:49:1c:
f2:b4:85:41:81:8e:65:ed:b7:dd:6a:f5:a9:85:b3:
44:7b:ca:70:83:49:db:90:2f:fc:b4:91:c3:4c:34:
c2:a0:1f:79:52:bd:57:7c:42:9f:79:6b:e7:2f:af:
1b:d7:f9:e8:54:d5:38:46:b4:66:e3:48:20:63:94:
e7:e2:e4:23:ac:1a:40:4a:f5:76:f7:da:7d:31:b8:
b7:f0:20:b5:b9:ac:48:d1:29:da:ee:fc:44:45:fc:
c7:a2:99:ec:0f:ca:78:61:82:62:f0:cf:fb:d0:3c:
c4:10:54:32:cc:a2:a7:5f:81:83:f3:e5:a4:8b:19:
96:b4:e0:59:96:1c:6b:c4:fd:a1:2f:b0:bc:5d:cd:
c4:80:c0:ab:4e:82:ed:7b:ab:6b:96:31:26:f3:ea:
f5:90:45:1f:1b:fc:5d:82:c9:6d:a5:ae:f0:14:5e:
c6:d3:85:22:b4:41:72:76:71:d1:ac:67:7a:cb:41:
50:62:08:7c:5a:a0:a4:6a:0b:34:54:9a:d2:0e:4d:
bb:03:c8:3d:75:7d:83:fe:39:bd:20:34:66:b9:cd:
3b:2b:58:85:66:2e:bc:88:a7:dd:4d:fd:a4:23:04:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:DC:38:87:EB:BA:FB:FD:95:55:C7:D8:BE:7F:1C:22:1C:47:5A
X509v3 Authority Key Identifier:
keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/vFbcOIfruvv9lVXH2L5_HCIcR1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.226.0/23
Signature Algorithm: sha256WithRSAEncryption
11:4b:a2:d8:ec:44:2f:1d:23:a3:44:0e:da:f5:97:fd:a4:2a:
b8:c4:3e:fb:94:a6:52:9b:86:0b:29:8f:12:de:e8:6a:d4:11:
6e:41:7d:8a:df:75:73:cd:63:49:1e:26:69:06:4e:bb:4e:77:
ce:d0:43:32:f9:61:62:cd:f9:37:94:78:00:59:86:81:de:ca:
67:be:24:d8:a4:85:e1:95:a2:8d:53:ae:d4:8e:5a:8c:6c:16:
60:04:89:22:41:8e:ae:d0:0c:07:43:4e:9c:bb:0c:07:39:aa:
9e:49:76:3f:e2:c5:db:7e:0f:dc:b6:15:ee:a9:e1:0c:1e:d6:
8c:5b:0e:a5:ac:be:97:d2:92:a0:a1:ea:e1:7f:99:2e:5d:88:
73:1b:4f:3e:29:9d:0f:79:f2:a5:33:ed:67:6d:c5:5c:82:96:
af:ba:04:b5:0e:ee:3f:98:52:11:33:52:4d:3f:29:4b:fd:fc:
9f:35:e0:a5:b4:b8:20:20:c0:f8:e2:00:2e:72:9c:50:81:c6:
a4:7c:28:2b:c7:85:15:c4:6d:e9:d0:3c:23:6a:4d:76:3c:73:
81:22:0a:25:6b:8b:d4:7f:03:3f:e0:f5:e2:3e:24:16:53:9f:
d9:5e:1e:14:e2:a8:e6:e1:50:92:b4:36:d0:78:ed:23:71:cf:
5f:12:7f:0a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQz
NEQ1OTgxRDdCNkEwMDEyN0I5RjI2ODc0OEE0RTEyMzNFMTM4RjAeFw0yNDAyMDQx
MDM1MzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJDNTZEQzM4ODdFQkJB
RkJGRDk1NTVDN0Q4QkU3RjFDMjIxQzQ3NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCggOq26wCPKbZUakpi/otnTY35yeoBddFv+0JJHPK0hUGBjmXt
t91q9amFs0R7ynCDSduQL/y0kcNMNMKgH3lSvVd8Qp95a+cvrxvX+ehU1ThGtGbj
SCBjlOfi5COsGkBK9Xb32n0xuLfwILW5rEjRKdru/ERF/MeimewPynhhgmLwz/vQ
PMQQVDLMoqdfgYPz5aSLGZa04FmWHGvE/aEvsLxdzcSAwKtOgu17q2uWMSbz6vWQ
RR8b/F2CyW2lrvAUXsbThSK0QXJ2cdGsZ3rLQVBiCHxaoKRqCzRUmtIOTbsDyD11
fYP+Ob0gNGa5zTsrWIVmLryIp91N/aQjBEUZAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUvFbcOIfruvv9lVXH2L5/HCIcR1owHwYDVR0jBBgwFoAUjTTVmB17agASe58m
h0ik4SM+E48wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
MC9qVFRWbUIxN2FnQVNlNThtaDBpazRTTS1FNDguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2pUVFZtQjE3YWdBU2U1OG1oMGlrNFNNLUU0OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTAvdkZiY09JZnJ1dnY5
bFZYSDJMNV9IQ0ljUjFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEASQy4jANBgkqhkiG9w0BAQsFAAOCAQEAEUui2OxELx0jo0QO2vWX/aQquMQ+
+5SmUpuGCymPEt7oatQRbkF9it91c81jSR4maQZOu053ztBDMvlhYs35N5R4AFmG
gd7KZ74k2KSF4ZWijVOu1I5ajGwWYASJIkGOrtAMB0NOnLsMBzmqnkl2P+LF234P
3LYV7qnhDB7WjFsOpay+l9KSoKHq4X+ZLl2IcxtPPimdD3nypTPtZ23FXIKWr7oE
tQ7uP5hSETNSTT8pS/38nzXgpbS4ICDA+OIALnKcUIHGpHwoK8eFFcRt6dA8I2pN
djxzgSIKJWuL1H8DP+D14j4kFlOf2V4eFOKo5uFQkrQ20HjtI3HPXxJ/Cg==
-----END CERTIFICATE-----
Generated at Sun Feb 11 09:12:20 2024 by rpki-client on console-ams.rpki-client.org