Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Dx1N2Yw9sLKllgFjx7XgbT73oGk.roa
File: Dx1N2Yw9sLKllgFjx7XgbT73oGk.roa (raw, json)
Hash identifier: BkWosDW4LxQ1ppCqf6cRXYnwfHYljkKQ3UcLk7NPpGE=
Subject key identifier: 0F:1D:4D:D9:8C:3D:B0:B2:A5:96:01:63:C7:B5:E0:6D:3E:F7:A0:69
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 04AA
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Dx1N2Yw9sLKllgFjx7XgbT73oGk.roa
Signing time: Fri 08 Sep 2023 16:01:31 +0000
ROA not before: Fri 08 Sep 2023 16:01:31 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/23 maxlen: 24
210.79.70.0/24 maxlen: 24
210.79.71.0/24 maxlen: 24
210.79.77.0/24 maxlen: 24
210.79.89.0/24 maxlen: 24
210.79.90.0/24 maxlen: 24
210.79.91.0/24 maxlen: 24
210.79.101.0/24 maxlen: 24
210.79.112.0/24 maxlen: 24
210.79.114.0/24 maxlen: 24
210.79.115.0/24 maxlen: 24
211.149.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 8 16:01:31 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=0F1D4DD98C3DB0B2A5960163C7B5E06D3EF7A069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:43:38:6e:1d:a4:15:50:d7:f3:60:cc:1f:
95:d7:b3:1d:3a:a8:19:c2:ed:9b:44:a6:37:2d:4d:
5b:ea:0c:8b:e1:7c:4d:f2:56:ef:f7:b8:6d:7d:73:
de:d6:4d:1a:b4:79:b1:02:01:96:a0:80:9c:30:12:
a9:3a:f6:f2:66:ca:1f:14:f9:81:45:34:09:0c:d6:
9b:2c:6d:71:d5:4d:8c:0c:cc:1a:31:68:d3:c4:ed:
64:e3:83:a3:c1:55:bd:63:5b:71:69:e8:99:59:4e:
37:36:a0:86:06:42:a6:85:99:74:9e:70:19:ae:84:
bb:a8:71:43:bd:84:c0:68:fb:b3:5c:8d:ef:81:d5:
57:2d:92:4c:2f:91:23:e8:b6:bc:52:83:e3:4a:98:
d3:14:f1:1b:64:eb:6e:f7:f9:6c:48:13:c2:0f:8b:
cb:19:ff:a4:e4:67:40:6e:9f:f6:7c:b6:e0:9f:a3:
bc:f6:64:cc:aa:3a:4b:3d:c3:89:e3:c2:c2:b8:48:
c5:6d:75:8e:b1:f6:01:60:6d:e9:67:bd:f7:b4:52:
f7:8b:1a:29:70:ab:1b:2b:ba:4e:df:26:22:2a:22:
70:22:f5:ed:1d:25:28:14:83:83:4c:6b:c6:85:f5:
ea:69:3e:e4:10:3a:5c:f0:d4:b2:86:67:29:7f:cd:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:4D:D9:8C:3D:B0:B2:A5:96:01:63:C7:B5:E0:6D:3E:F7:A0:69
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Dx1N2Yw9sLKllgFjx7XgbT73oGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0/22
210.79.77.0/24
210.79.89.0-210.79.91.255
210.79.101.0/24
210.79.112.0/24
210.79.114.0/23
211.149.32.0/22
Signature Algorithm: sha256WithRSAEncryption
04:6a:20:98:a9:de:dd:d3:e3:d1:39:cd:8e:57:3a:ab:31:63:
96:33:0d:42:b4:ed:95:40:ec:52:94:36:a4:f9:03:55:b5:a3:
c6:b9:ac:c9:8d:70:17:cd:cc:ec:12:b3:99:ed:d5:6f:5f:ab:
e9:4b:91:c7:bd:84:f0:57:0c:df:73:30:f9:bb:53:33:cf:17:
8c:1c:22:e3:73:2b:fa:b5:80:62:e5:62:ef:6d:4b:0c:0c:bf:
43:e4:17:48:a0:78:b2:1a:06:16:0e:27:b3:c5:a3:20:6a:76:
ff:21:2f:98:54:74:24:a5:f1:60:eb:da:53:2d:0a:ed:2d:55:
f1:da:b5:ce:64:96:a7:36:98:19:95:3f:f7:50:43:a0:13:39:
c7:32:1d:33:e8:36:7e:6f:f9:dc:5c:32:01:4f:56:9c:ee:dd:
88:b5:75:2b:ca:aa:cd:a4:64:bf:9b:6a:c0:77:6a:6f:02:a2:
63:b3:25:ce:8f:03:50:9d:11:ec:b8:62:ce:d0:11:b7:f8:cb:
a7:a3:66:df:c5:00:1f:65:12:7c:12:d0:bb:b6:db:49:e8:10:
14:8d:12:8b:5d:d5:25:4d:db:62:c9:f3:94:8a:7a:0a:8b:e1:
42:fa:53:04:24:5f:de:b9:2a:30:06:23:34:49:a3:a4:d3:90:
9f:72:7a:29
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgICBKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA5MDgx
NjAxMzFaFw0yNDA4MTAwNzQxMTNaMDMxMTAvBgNVBAMTKDBGMUQ0REQ5OEMzREIw
QjJBNTk2MDE2M0M3QjVFMDZEM0VGN0EwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOdEM4bh2kFVDX82DMH5XXsx06qBnC7ZtEpjctTVvqDIvhfE3y
Vu/3uG19c97WTRq0ebECAZaggJwwEqk69vJmyh8U+YFFNAkM1pssbXHVTYwMzBox
aNPE7WTjg6PBVb1jW3Fp6JlZTjc2oIYGQqaFmXSecBmuhLuocUO9hMBo+7Ncje+B
1VctkkwvkSPotrxSg+NKmNMU8Rtk6273+WxIE8IPi8sZ/6TkZ0Bun/Z8tuCfo7z2
ZMyqOks9w4njwsK4SMVtdY6x9gFgbelnvfe0UveLGilwqxsruk7fJiIqInAi9e0d
JSgUg4NMa8aF9eppPuQQOlzw1LKGZyl/zerlAgMBAAGjggI1MIICMTAdBgNVHQ4E
FgQUDx1N2Yw9sLKllgFjx7XgbT73oGkwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL0R4MU4yWXc5c0xLbGxn
Rmp4N1hnYlQ3M29Hay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEoD
BAJ7YkADBAJ7YkgDBAJ7YlADBAJ7YmQDBALST0QDBADST00wDAMEANJPWQMEAtJP
WAMEANJPZQMEANJPcAMEAdJPcgMEAtOVIDANBgkqhkiG9w0BAQsFAAOCAQEABGog
mKne3dPj0TnNjlc6qzFjljMNQrTtlUDsUpQ2pPkDVbWjxrmsyY1wF83M7BKzme3V
b1+r6UuRx72E8FcM33Mw+btTM88XjBwi43Mr+rWAYuVi721LDAy/Q+QXSKB4shoG
Fg4ns8WjIGp2/yEvmFR0JKXxYOvaUy0K7S1V8dq1zmSWpzaYGZU/91BDoBM5xzId
M+g2fm/53FwyAU9WnO7diLV1K8qqzaRkv5tqwHdqbwKiY7Mlzo8DUJ0R7LhiztAR
t/jLp6Nm38UAH2USfBLQu7bbSegQFI0Si13VJU3bYsnzlIp6CovhQvpTBCRf3rkq
MAYjNEmjpNOQn3J6KQ==
-----END CERTIFICATE-----
Generated at Mon Sep 11 13:40:40 2023 by rpki-client on console-ams.rpki-client.org