Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/5Gu67jDdq32SU2SFAF5FHWl3SSI.roa
File: 5Gu67jDdq32SU2SFAF5FHWl3SSI.roa (raw, json)
Hash identifier: VeS7yzhQvp5aFMAgpXMehO+b/XZxhDuPGwHE7/+DliY=
Subject key identifier: E4:6B:BA:EE:30:DD:AB:7D:92:53:64:85:00:5E:45:1D:69:77:49:22
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0858
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/5Gu67jDdq32SU2SFAF5FHWl3SSI.roa
Signing time: Wed 21 Feb 2024 02:39:53 +0000
ROA not before: Wed 21 Feb 2024 02:39:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 123.98.4.0/22 maxlen: 24
123.98.8.0/22 maxlen: 24
123.98.16.0/22 maxlen: 24
123.98.20.0/22 maxlen: 24
123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
211.149.80.0/22 maxlen: 24
211.149.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 09:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 21 02:39:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E46BBAEE30DDAB7D92536485005E451D69774922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:c3:10:a1:5b:5d:04:4f:6f:80:26:57:de:
d1:85:57:f5:36:b3:7a:e6:33:e7:7a:52:d3:6f:92:
7f:1b:79:a5:5d:b9:5c:0d:a1:2c:e6:96:e1:ec:a4:
06:91:53:3b:f6:e6:f4:c2:c9:72:24:e5:ff:ad:15:
0d:b9:55:9a:1d:ac:e6:33:c0:72:ff:0a:36:25:6d:
1d:23:fa:5f:55:1f:1c:3d:bd:c2:93:e1:1a:0a:25:
bb:f5:5d:16:82:9a:65:27:d7:90:0e:0d:51:d3:64:
75:a4:c9:fd:93:1f:11:ab:81:0a:43:f2:30:9e:3e:
82:76:a4:1e:f1:7c:e7:49:b8:60:c8:6d:cf:a3:51:
d8:cd:1f:48:3e:ff:e0:4b:d2:64:5f:e3:ce:2e:68:
8e:41:fb:6c:fa:f3:3f:eb:03:7a:b1:d5:94:b3:a3:
57:8a:35:f8:a2:89:ad:76:ad:4f:58:4c:c5:dd:b6:
f3:d9:1e:a5:3c:da:4b:14:c8:0e:e8:13:59:75:cd:
14:b5:a3:99:d9:50:c4:43:a1:6e:1f:9e:1d:80:fc:
a7:5a:53:7e:2e:dd:73:7e:35:c3:91:44:89:8a:7a:
08:92:42:2a:fb:7f:f5:2f:41:8d:38:41:46:5b:1a:
4a:63:a3:70:8a:cd:47:9d:c5:33:35:31:ac:91:bd:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:BA:EE:30:DD:AB:7D:92:53:64:85:00:5E:45:1D:69:77:49:22
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/5Gu67jDdq32SU2SFAF5FHWl3SSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.4.0-123.98.11.255
123.98.16.0/21
123.98.76.0/22
123.98.84.0/22
211.149.80.0/22
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
98:16:e4:5e:96:ca:73:e7:82:24:33:38:1e:75:ea:1d:e4:e1:
f4:5d:dd:a9:0f:05:a1:f9:a2:8d:7c:74:55:c6:ff:82:09:36:
37:17:1c:65:6e:06:da:20:be:8e:c9:2b:3f:12:70:62:19:9c:
db:bd:2c:d5:74:84:98:ca:88:cd:69:ce:3e:c0:d7:44:79:8c:
27:4f:82:e4:dd:5b:24:b1:35:8b:7a:39:73:ff:0d:12:34:fc:
13:0c:38:63:c5:4c:3a:6b:7e:d6:70:1b:32:83:86:82:6d:99:
d7:a1:0d:7b:da:0c:8d:4f:3c:05:ff:e0:f0:c6:63:ec:5d:5b:
47:ef:e5:0b:b7:2b:72:9a:7e:68:74:d4:97:07:e2:6f:9d:13:
cc:e3:43:da:90:70:7a:27:ee:4e:37:36:8c:e4:4b:69:55:52:
9b:43:a3:89:17:a2:b1:fa:8f:e5:1d:61:25:62:76:f3:43:2f:
f9:21:34:61:63:63:27:42:dc:c1:b7:1c:06:06:58:c1:9c:b9:
23:7a:9b:e8:5c:1e:82:8b:e6:04:79:8e:e5:71:21:04:27:76:
3f:23:65:29:b3:4a:d7:ca:e8:ca:75:41:d3:f1:e0:07:4c:2a:
32:71:47:62:ad:70:5e:a7:60:b0:20:22:4c:05:2f:78:75:f7:
6f:35:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 14:19:15 2024 by rpki-client on console-fra.rpki-client.org