Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/VLMAU9BwuW0Q3T1w1z8V_KZby58.roa
File: VLMAU9BwuW0Q3T1w1z8V_KZby58.roa (raw, json)
Hash identifier: sqi2DheZ9xFUDI1mf+IR1t786WeTn8uV/UWmKBD7eGA=
Subject key identifier: 54:B3:00:53:D0:70:B9:6D:10:DD:3D:70:D7:3F:15:FC:A6:5B:CB:9F
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 0700
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/VLMAU9BwuW0Q3T1w1z8V_KZby58.roa
Signing time: Fri 10 Feb 2023 02:44:50 +0000
ROA not before: Fri 10 Feb 2023 02:44:50 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 37963
IP address blocks: 112.124.0.0/14 maxlen: 14
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Feb 10 02:44:50 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=54B30053D070B96D10DD3D70D73F15FCA65BCB9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:d6:31:79:b9:06:77:5b:fe:52:47:05:cb:
50:9d:91:d2:93:16:72:68:1b:80:9b:a1:ab:f2:e7:
5f:07:d9:ed:b8:16:b3:4c:4c:8c:e3:8b:26:66:29:
0f:2b:d6:3e:d4:78:21:4f:71:22:42:61:b6:9b:10:
85:16:13:07:ea:2a:eb:93:39:8a:d8:9f:cc:87:f2:
01:8e:c5:33:26:9c:e8:33:b0:d9:be:66:e4:a5:b7:
30:04:b5:05:1c:c3:2c:03:7a:97:c7:b4:cb:28:d9:
4c:19:23:00:5a:f0:85:55:4a:ec:78:95:5d:cf:ca:
56:c7:83:ea:ef:a1:c9:0b:77:22:4f:76:83:88:ed:
f0:ca:6d:dc:8a:c7:6f:b7:69:68:b2:67:f4:c5:3d:
fc:75:20:47:cd:32:95:d5:33:bd:fc:2f:db:7d:46:
ea:83:db:74:02:68:5f:a4:82:7c:7c:de:67:c1:3a:
11:6d:42:50:3c:04:f3:44:7e:72:45:cf:66:89:76:
01:7e:ba:a1:1c:53:4b:62:d3:a2:23:8d:c9:99:73:
e4:df:9d:6e:00:3c:af:13:4a:cb:69:b9:27:e2:aa:
fa:b3:3b:67:e0:a9:14:a0:89:89:41:0e:79:b3:ee:
4d:b7:58:9f:2b:54:89:c9:89:a8:87:fc:13:bd:56:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:00:53:D0:70:B9:6D:10:DD:3D:70:D7:3F:15:FC:A6:5B:CB:9F
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/VLMAU9BwuW0Q3T1w1z8V_KZby58.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
69:29:11:7a:77:e6:2e:d2:b7:fa:c6:61:b7:d6:82:b1:5f:04:
32:e3:6a:28:b0:5f:89:3a:1f:bd:61:4e:bc:e0:8b:c3:d3:98:
de:75:ab:ad:42:b4:dd:61:60:10:b4:aa:6f:86:a5:bc:79:f2:
ea:2d:01:69:1e:7a:9a:93:c5:b4:f0:92:ee:20:11:0e:b7:0a:
cf:9f:30:3f:07:b2:70:4c:d6:4a:28:34:53:24:bc:60:2e:48:
7b:1e:0b:38:00:7c:1b:a9:55:30:42:6a:41:a9:79:7b:ff:f9:
de:d3:32:4f:79:35:9e:79:1c:01:8a:eb:1a:b8:05:16:a9:c1:
24:05:cb:4a:ce:9d:28:b0:6d:22:86:62:19:62:a2:ed:25:59:
97:34:81:72:b4:9d:d7:fd:36:a2:75:17:81:b9:a1:88:a7:0c:
80:5a:a3:3e:77:ff:7a:23:e5:76:01:9d:8c:f4:c2:41:23:4c:
66:8e:c1:92:98:52:3a:af:14:46:1e:6c:d3:b9:ba:df:37:55:
db:1f:56:ec:27:02:6d:04:bb:b3:cb:35:b9:00:53:6d:e8:65:
ae:8b:33:2c:b8:8b:12:89:70:58:b7:b5:ef:3f:49:d2:af:0a:
15:11:88:3f:8c:32:7b:4c:59:e7:02:76:ae:5d:8a:71:94:c8:
ab:73:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:02 2024 by rpki-client on console-ams.rpki-client.org