Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/6e9ilCN6qYtw2ZrUgaMNM84s3QY.roa
File: 6e9ilCN6qYtw2ZrUgaMNM84s3QY.roa (raw, json)
Hash identifier: q4E90l9Q4HSxqT6IO9C/hxutv+6oROEMBrk5CA3ouMc=
Subject key identifier: E9:EF:62:94:23:7A:A9:8B:70:D9:9A:D4:81:A3:0D:33:CE:2C:DD:06
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D5B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6e9ilCN6qYtw2ZrUgaMNM84s3QY.roa
Signing time: Thu 03 Oct 2024 15:04:06 +0000
ROA not before: Thu 03 Oct 2024 15:04:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3419 (0xd5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:04:06 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E9EF6294237AA98B70D99AD481A30D33CE2CDD06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:a2:aa:74:5e:ad:86:84:29:ee:e0:4f:80:
09:8f:76:96:bf:24:5c:b1:e0:b4:73:6a:e0:e9:1f:
47:93:40:96:87:97:ae:f4:93:2e:05:27:33:37:f0:
66:00:d2:e7:9e:1d:0e:27:8c:21:df:23:4e:ef:de:
d2:cf:4d:a5:53:2a:bb:d1:1e:f1:d4:68:34:8a:bc:
35:cb:34:d7:0a:7c:e6:3c:9f:eb:69:a6:a2:2f:7a:
f5:eb:1c:fe:97:9f:16:b1:d5:20:3e:48:77:b9:f5:
b2:b6:c1:ad:be:d9:aa:23:9e:86:df:f6:63:a3:b7:
18:55:46:5f:46:ee:bf:3f:29:50:21:f4:03:93:51:
12:1f:b6:19:56:18:5f:c1:82:71:7c:23:05:5d:a5:
b9:98:49:7e:6b:fb:fe:60:97:17:28:44:a8:55:92:
cf:e7:7d:03:e1:7b:b2:24:5f:f7:41:9e:7a:b1:27:
9b:a8:7a:96:c0:4a:b7:7b:4c:14:a2:57:41:f2:b5:
52:93:6c:6c:a9:4b:03:36:74:ac:fe:9b:d0:70:b0:
a5:fc:df:88:53:91:bc:a1:82:d2:14:17:11:a4:46:
50:f2:a5:37:cb:60:f4:3e:fa:f7:54:86:48:f9:98:
1d:bd:d7:35:30:2d:0a:e7:e9:3b:fa:95:e9:28:63:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:62:94:23:7A:A9:8B:70:D9:9A:D4:81:A3:0D:33:CE:2C:DD:06
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6e9ilCN6qYtw2ZrUgaMNM84s3QY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:07:44:34:2a:1d:cb:9f:bb:e1:c4:ae:ee:f9:d9:6d:b6:eb:
57:32:d6:ba:01:25:2b:b9:16:0b:ea:2c:d9:af:91:f5:c3:ce:
a7:cd:6c:2e:1b:c6:f2:92:39:b3:20:21:5c:98:e7:57:20:78:
d3:8b:32:62:64:86:ea:8b:08:2e:d1:cd:12:e0:71:1a:ed:a6:
75:b0:8d:46:e5:19:42:da:a7:84:c3:9e:30:4a:5e:21:41:c0:
9a:d4:76:7b:82:f7:c1:ad:3e:43:4a:44:b4:58:83:c4:da:5f:
8a:db:5e:cb:1c:1f:b0:7f:9e:74:88:51:bf:15:7b:cb:87:a2:
24:5f:c7:64:6a:69:71:4d:d6:f2:88:76:e4:07:d7:07:75:7e:
d4:d8:30:c4:7f:97:44:a0:db:47:44:53:59:49:fa:6e:ae:62:
45:e6:a1:a6:e5:66:ff:1f:ed:5d:27:4b:89:32:36:c2:8b:1d:
56:6a:96:4c:ad:84:54:f0:4f:e0:b9:30:8a:aa:dc:16:ad:12:
39:07:ee:0c:f3:5a:13:f5:93:3e:5b:56:4d:ea:93:fc:fd:21:
68:db:68:20:1a:50:9c:c0:0e:b2:78:fc:c1:42:4f:13:1c:af:
70:0d:15:de:92:b2:d2:e6:27:5f:9e:96:92:e0:43:f2:1c:ff:
69:29:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org