Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/EoERZEjKuJLXz91mHmhpE6QlldU.roa
File: EoERZEjKuJLXz91mHmhpE6QlldU.roa (raw, json)
Hash identifier: Z1CqFb9tb3jWS1kpwoEU96Lwm3NpddWPYOMrNvgsBrI=
Subject key identifier: 12:81:11:64:48:CA:B8:92:D7:CF:DD:66:1E:68:69:13:A4:25:95:D5
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 03AF
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EoERZEjKuJLXz91mHmhpE6QlldU.roa
Signing time: Tue 25 Jul 2023 03:26:00 +0000
ROA not before: Tue 25 Jul 2023 03:26:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/23 maxlen: 24
210.79.77.0/24 maxlen: 24
210.79.90.0/24 maxlen: 24
210.79.112.0/24 maxlen: 24
210.79.114.0/24 maxlen: 24
211.149.32.0/22 maxlen: 24
211.149.40.0/22 maxlen: 24
211.149.48.0/22 maxlen: 24
211.149.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jul 25 03:26:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1281116448CAB892D7CFDD661E686913A42595D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:d0:7c:5d:30:dd:80:a5:83:d3:d9:80:21:
58:00:72:d2:03:11:f2:fb:33:fc:41:f3:13:97:68:
33:19:97:04:90:f1:f5:b9:59:be:38:d9:b3:87:56:
3b:66:69:ed:9d:c8:65:2c:ed:16:1b:79:e7:64:0a:
93:bf:a0:8d:ee:3b:84:f3:a7:15:2e:69:d6:9c:15:
17:14:f8:42:33:29:35:ce:fc:56:a4:eb:78:74:23:
51:a1:c2:3d:92:54:2e:7e:39:14:5f:49:9f:50:96:
f3:56:77:5c:f7:c5:56:79:8a:78:bc:99:6f:73:b3:
40:96:76:d6:d1:ba:ad:26:ab:8b:47:ac:bd:12:1b:
9e:bc:8f:cf:2a:07:4b:45:f1:a9:d9:40:68:8f:b1:
5d:d7:0d:4d:c9:28:aa:dd:5b:dc:7e:44:ca:f6:bf:
ed:2e:df:47:88:3e:6d:f8:93:e1:d1:b8:5c:68:0e:
84:38:9e:f0:d9:30:97:8d:03:4c:cd:b7:dc:5b:18:
7f:c7:3c:95:a9:41:5a:a6:22:b7:7a:b5:e5:7d:a3:
d0:aa:a0:16:ec:09:f1:24:39:15:4c:ca:8b:ed:8e:
f1:80:f3:11:d0:90:84:9a:77:05:13:d3:b0:63:56:
97:7b:c3:b3:90:5e:f3:7d:9c:eb:74:dc:d6:ee:bc:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:11:64:48:CA:B8:92:D7:CF:DD:66:1E:68:69:13:A4:25:95:D5
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EoERZEjKuJLXz91mHmhpE6QlldU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0/23
210.79.77.0/24
210.79.90.0/24
210.79.112.0/24
210.79.114.0/24
211.149.32.0/22
211.149.40.0/22
211.149.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:89:33:69:4e:07:49:bc:0f:d5:a7:3e:3f:c1:aa:0b:02:78:
fe:fc:0f:0b:45:cd:cf:a3:e6:cd:eb:87:c8:d2:0e:8f:25:e5:
44:e9:82:b4:24:f2:07:c4:5b:c4:f3:e3:79:4d:75:d1:53:d7:
1e:54:ec:79:e9:7e:a7:a5:fa:20:4a:84:e4:dc:83:61:35:85:
39:c8:4c:a8:d8:2f:bb:83:4b:2e:7f:5d:5f:9d:1a:a5:66:ae:
f2:b5:f6:66:eb:26:70:44:17:91:56:6b:68:03:9b:94:53:3d:
b7:03:7d:be:de:d7:63:ef:ad:b0:49:6b:22:3a:4c:87:0f:f9:
b3:fd:51:a9:e6:95:f5:0a:f8:bc:e5:63:a4:37:05:73:d4:53:
e1:a5:c5:4e:27:18:2c:20:02:f2:41:e8:a3:71:6b:c6:3f:6c:
32:a1:73:ae:89:3c:56:a3:1e:e1:48:1e:92:b0:f2:3e:59:6f:
c3:a9:08:52:e0:58:07:a8:a8:d7:de:ae:55:95:72:77:05:6c:
91:c1:56:b5:69:d4:2e:2f:ef:3a:da:ec:b9:04:af:26:52:ad:
66:e5:c8:c3:4a:ee:f2:51:4b:64:08:fd:29:f4:81:1f:ed:8c:
9c:24:bd:4e:95:89:f1:c0:81:4c:ab:4b:00:37:74:5d:13:d0:
02:21:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 10:51:16 2023 by rpki-client on console-ams.rpki-client.org