Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/E1Hi2VvjMoFzBqHStHJAp_d1sjk.roa
File: E1Hi2VvjMoFzBqHStHJAp_d1sjk.roa (raw, json)
Hash identifier: WXSl30XMpn+IvbcsRJbx421j5P8pgd2gwGnite5OAn4=
Subject key identifier: 13:51:E2:D9:5B:E3:32:81:73:06:A1:D2:B4:72:40:A7:F7:75:B2:39
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C87
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/E1Hi2VvjMoFzBqHStHJAp_d1sjk.roa
Signing time: Sun 01 Sep 2024 11:38:10 +0000
ROA not before: Sun 01 Sep 2024 11:38:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:38:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1351E2D95BE332817306A1D2B47240A7F775B239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:a0:c4:8e:c5:ff:17:dd:68:f9:68:45:93:
4d:65:7c:1b:99:a5:fa:f6:19:cb:da:2d:42:8a:4d:
c6:16:1a:d5:48:1d:88:8b:87:15:d2:37:87:e9:06:
19:6b:0e:f7:b6:87:5f:f6:44:01:dd:33:19:3a:a5:
74:2f:6b:12:ca:24:1d:b6:4c:0d:0d:39:02:f6:10:
e9:f7:4d:eb:5a:c4:5f:dd:b3:ae:4f:6e:af:6b:33:
2b:fe:76:3e:9f:5e:be:0c:5a:10:6b:e0:c2:6e:e7:
20:3a:26:e0:ce:31:dd:f2:e7:8b:2b:54:9e:78:49:
a2:ca:f7:f8:3f:5f:f1:8f:8c:48:a6:72:b4:e6:ac:
3d:13:b4:bb:51:4a:3c:c7:70:11:dc:90:80:20:a5:
31:a4:eb:1e:3b:b0:6e:87:0c:d8:d0:ae:c3:24:d7:
ca:45:16:44:ae:55:7a:c2:61:00:82:0c:aa:d5:42:
0d:b5:7f:1c:fa:37:6a:3b:d5:fb:a3:45:42:20:4f:
55:40:04:07:72:44:3f:fb:bf:b4:f6:e6:a0:30:56:
4f:b4:c1:2e:84:a5:2c:d5:5a:59:c8:50:ea:4b:66:
49:c5:ec:eb:62:cb:d1:c7:c4:4b:63:08:15:94:e6:
19:95:51:62:16:a3:37:e7:5b:aa:e6:08:5e:cb:26:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:E2:D9:5B:E3:32:81:73:06:A1:D2:B4:72:40:A7:F7:75:B2:39
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/E1Hi2VvjMoFzBqHStHJAp_d1sjk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:ff:29:62:4f:b8:bb:28:52:c7:73:42:b7:77:26:c2:d8:b7:
ff:c4:62:6b:db:43:cb:10:06:fc:1f:26:3a:e1:1b:fe:ed:55:
a0:0e:b9:ff:52:c6:48:bf:38:9e:e5:11:6b:f5:36:5a:c8:b9:
ef:37:ed:5a:14:8f:e6:2e:7e:7c:b6:fb:17:9f:68:2d:9d:5d:
a4:0d:e8:89:e0:0c:88:eb:9e:4a:0d:bf:a5:0d:70:0c:a4:a6:
59:24:eb:91:e3:8e:3a:bd:32:a5:66:90:37:fd:b0:cb:4e:19:
f5:32:7a:3e:5e:27:3c:fd:0b:8d:c2:4f:d3:9f:e1:aa:6f:52:
c4:b5:41:75:0d:c3:cd:8b:23:b7:d5:dc:41:de:63:f6:57:e3:
40:4a:3c:0c:3d:0a:a7:03:b5:86:22:03:4c:8e:be:73:3b:f3:
6f:a9:32:cc:d6:28:9c:a0:00:6f:f9:1e:66:66:de:83:33:4d:
49:53:e8:43:80:e5:f5:fc:90:f1:72:f1:a1:24:80:0e:dd:a5:
ca:98:bf:78:c4:5e:ba:87:a4:d9:9b:0f:ac:2f:c3:79:6b:54:
d8:bf:74:38:83:61:4c:4d:58:b7:c0:41:83:c0:b8:bf:e9:c3:
d7:65:5c:78:a3:20:d4:48:cf:e7:a2:8b:28:dd:b9:dd:29:95:
6d:7c:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:43 2024 by rpki-client on console-fra.rpki-client.org