Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/EMp5TUkfo8yNvKCffhG_3vlZCYU.roa
File: EMp5TUkfo8yNvKCffhG_3vlZCYU.roa (raw, json)
Hash identifier: A1wXeXqlYQIti3kpn1YWZTeMEEUgnhKp78CtlN2ydb0=
Subject key identifier: 10:CA:79:4D:49:1F:A3:CC:8D:BC:A0:9F:7E:11:BF:DE:F9:59:09:85
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D55
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EMp5TUkfo8yNvKCffhG_3vlZCYU.roa
Signing time: Thu 03 Oct 2024 15:03:26 +0000
ROA not before: Thu 03 Oct 2024 15:03:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:03:26 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=10CA794D491FA3CC8DBCA09F7E11BFDEF9590985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:42:3f:60:0d:ab:45:f2:ed:36:7f:42:fa:
14:c8:e1:51:ed:7e:35:76:5b:9c:2f:db:91:07:98:
7e:33:73:bc:4c:24:22:d2:58:2b:d2:c8:8e:69:eb:
e9:3e:7a:d6:42:92:b9:db:dd:91:5d:a8:8d:14:23:
9f:69:8d:8d:a1:7a:5e:4a:24:31:a5:2a:6f:e2:2b:
6d:16:f2:3b:d3:a4:29:aa:4f:88:1e:c0:28:44:13:
30:1f:97:6c:ab:a9:33:65:fc:97:3a:92:4f:55:1d:
19:48:2d:a4:d8:a4:4e:67:33:0e:68:40:14:7e:cd:
e7:8b:ab:96:b9:41:a1:45:25:4d:55:84:99:26:a7:
5e:e7:f9:0a:a0:3e:ce:e5:a8:66:99:a8:3f:af:1b:
ee:52:f2:aa:b3:34:03:03:d1:52:34:b9:a1:73:29:
7e:28:21:c2:e0:22:ab:f0:5d:62:3c:75:26:21:62:
e3:89:62:94:3d:a1:02:66:8d:f6:fd:b6:0a:9a:8d:
ee:6a:e2:c0:78:c0:18:26:07:66:50:87:68:5b:7f:
75:1b:53:42:3f:56:7f:19:3a:72:3f:c2:3d:f5:8b:
64:35:dc:05:ad:86:f9:08:ee:51:78:35:70:cf:88:
07:f1:d1:e6:50:fc:9e:81:ad:16:34:52:48:ea:04:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:79:4D:49:1F:A3:CC:8D:BC:A0:9F:7E:11:BF:DE:F9:59:09:85
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EMp5TUkfo8yNvKCffhG_3vlZCYU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:f0:c6:da:d7:dc:8a:b0:dd:53:f5:b2:c8:b3:12:5b:dd:93:
ef:2f:75:bf:ed:ee:34:e3:dd:6f:3e:13:c8:14:fc:99:93:44:
51:aa:14:21:80:89:34:c4:7f:a7:c5:84:8a:9c:60:fd:95:b3:
e2:f0:77:08:d1:88:5d:ac:14:29:f6:59:a1:b0:79:a2:9b:c0:
c0:04:f1:4f:2a:8b:75:74:51:d2:e8:44:ca:74:9b:4e:77:33:
12:98:70:32:7a:d3:92:cb:38:86:32:d4:c1:03:8e:46:98:4e:
81:5f:f5:9e:e5:a2:0b:8d:43:4a:9a:6b:51:5f:74:e5:d4:37:
66:0c:65:c3:19:6f:88:aa:b2:88:c7:c7:ed:dd:b7:ba:21:08:
46:41:19:56:de:38:ad:52:4b:0d:53:f4:d7:12:73:86:00:1f:
c8:74:2c:85:2d:33:fc:20:51:d6:b2:95:35:24:3f:bd:e3:a6:
80:e4:e1:f5:0c:89:21:3a:01:b5:48:b0:47:b7:be:8c:3f:a7:
13:7b:2f:f1:86:a5:33:15:03:c8:8f:75:6f:7a:1d:a0:57:dc:
17:03:fc:06:c6:a7:fc:00:eb:de:0c:4c:74:59:66:40:b8:49:
5d:ae:41:d6:d9:5e:58:fe:03:10:e9:4a:22:57:6b:41:2c:1d:
13:ee:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org