Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa
File: N9betOYlP4dNSg1zfLZLz93Cf3k.roa (raw, json)
Hash identifier: Rd6KBqpzSRX6UnLF4hTCvmBudUM77ktYpRmBV4KnlB0=
Subject key identifier: 37:D6:DE:B4:E6:25:3F:87:4D:4A:0D:73:7C:B6:4B:CF:DD:C2:7F:79
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 0D58
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa
Signing time: Tue 02 Jan 2024 06:19:07 +0000
ROA not before: Tue 02 Jan 2024 06:19:07 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 37963
IP address blocks: 112.124.0.0/14 maxlen: 14
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 2 06:19:07 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=37D6DEB4E6253F874D4A0D737CB64BCFDDC27F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:df:76:a4:ef:d5:a6:e4:42:5e:40:a1:84:
c0:a9:79:f3:06:d1:c3:96:92:d5:82:68:24:72:82:
12:7e:0f:eb:4f:b7:ff:01:2a:a6:f0:e7:bc:78:22:
7f:e4:40:6c:e0:08:d7:f4:5a:7e:b4:38:d9:d5:46:
85:e7:ea:c1:80:18:93:13:81:7b:d6:45:fc:a1:ed:
ae:9b:bf:31:57:a1:88:3e:84:af:fe:d8:6a:d9:22:
0e:91:a1:6e:7c:bf:5b:b5:64:73:28:76:16:e6:85:
a2:8e:52:7d:b4:62:1a:69:7b:9c:0b:67:e0:4c:82:
d7:45:93:b9:1b:fd:04:8d:b4:86:db:99:a3:0b:e1:
ba:bf:2b:87:77:db:52:3a:6c:48:a3:d8:03:53:89:
0d:63:43:67:7d:9c:b7:d3:67:92:70:44:25:18:e3:
6a:b4:6e:6b:3b:15:60:14:0d:49:83:96:ae:6b:08:
94:6f:28:98:05:e0:75:f7:f6:cf:5b:e9:6d:fe:a2:
75:bd:e6:cb:83:38:fd:99:1a:92:b6:f4:2c:4a:29:
81:ed:89:f9:03:17:4b:b0:37:2a:49:f8:b4:4e:0c:
b7:80:7f:7d:61:77:fa:19:2d:11:0d:a6:37:fc:1d:
61:18:57:65:a4:31:ee:4f:86:c9:c5:44:17:64:8c:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:DE:B4:E6:25:3F:87:4D:4A:0D:73:7C:B6:4B:CF:DD:C2:7F:79
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/N9betOYlP4dNSg1zfLZLz93Cf3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
26:a4:58:12:82:48:13:c2:6b:78:06:9b:fa:99:1e:81:69:65:
d3:56:de:87:27:2b:7c:39:3e:60:1c:c1:f8:9e:4e:46:02:82:
27:87:0e:62:36:dc:a3:71:c6:8b:ba:a4:ad:31:3a:bd:0a:a2:
6b:5c:69:bc:b1:24:32:58:ba:80:a0:50:32:a2:a2:c9:cd:bb:
fa:a4:84:03:d5:c4:c4:58:0c:fe:fd:d4:6c:7a:aa:d6:e9:e8:
c5:4b:b8:a4:6c:2a:be:ee:ee:e2:7b:f0:d6:b9:49:e4:8c:41:
2c:c1:ce:ef:dd:0c:f4:61:82:ea:f8:5d:5c:d5:08:61:ca:cb:
66:0b:5a:6d:be:e3:ef:ac:c7:e2:d5:64:b4:f3:7e:c8:13:f1:
28:74:62:a4:29:59:ce:14:f5:5a:9a:30:f3:20:5e:cd:38:f1:
86:2a:9b:76:13:41:d0:92:b8:93:43:81:db:c5:3b:78:a7:e9:
9f:99:85:42:c5:2a:25:c6:33:bc:71:d9:f9:d5:2b:6d:7b:19:
19:5b:61:5d:6b:4b:4a:ed:cf:5c:5c:cb:d5:03:7f:23:9c:ad:
56:7b:47:ef:49:b9:64:e9:12:aa:4a:69:f6:45:dc:6e:8e:04:
cb:48:30:75:7f:e6:ee:d0:08:b4:ba:30:e4:18:b1:4f:1a:25:
ec:24:e5:91
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC
QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNDAxMDIw
NjE5MDdaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDM3RDZERUI0RTYyNTNG
ODc0RDRBMEQ3MzdDQjY0QkNGRERDMjdGNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR+t92pO/VpuRCXkChhMCpefMG0cOWktWCaCRyghJ+D+tPt/8B
Kqbw57x4In/kQGzgCNf0Wn60ONnVRoXn6sGAGJMTgXvWRfyh7a6bvzFXoYg+hK/+
2GrZIg6RoW58v1u1ZHModhbmhaKOUn20Yhppe5wLZ+BMgtdFk7kb/QSNtIbbmaML
4bq/K4d321I6bEij2ANTiQ1jQ2d9nLfTZ5JwRCUY42q0bms7FWAUDUmDlq5rCJRv
KJgF4HX39s9b6W3+onW95suDOP2ZGpK29CxKKYHtifkDF0uwNypJ+LRODLeAf31h
d/oZLRENpjf8HWEYV2WkMe5PhsnFRBdkjENfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUN9betOYlP4dNSg1zfLZLz93Cf3kwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0
OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3
L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L045YmV0T1lsUDRkTlNn
MXpmTFpMejkzQ2Yzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwJwfDANBgkqhkiG9w0BAQsFAAOCAQEAJqRYEoJIE8JreAab+pkegWll01behycr
fDk+YBzB+J5ORgKCJ4cOYjbco3HGi7qkrTE6vQqia1xpvLEkMli6gKBQMqKiyc27
+qSEA9XExFgM/v3UbHqq1unoxUu4pGwqvu7u4nvw1rlJ5IxBLMHO790M9GGC6vhd
XNUIYcrLZgtabb7j76zH4tVktPN+yBPxKHRipClZzhT1Wpow8yBezTjxhiqbdhNB
0JK4k0OB28U7eKfpn5mFQsUqJcYzvHHZ+dUrbXsZGVthXWtLSu3PXFzL1QN/I5yt
VntH70m5ZOkSqkpp9kXcbo4Ey0gwdX/m7tAItLow5BixTxol7CTlkQ==
-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org