Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/EuTAF5RGiS_HNPvLQa4DYGsO9e0.roa
File: EuTAF5RGiS_HNPvLQa4DYGsO9e0.roa (raw, json)
Hash identifier: T7PrO3IabFghdjpO0cyijabZrmzFGcfjq43KFZvIegU=
Subject key identifier: 12:E4:C0:17:94:46:89:2F:C7:34:FB:CB:41:AE:03:60:6B:0E:F5:ED
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C71
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EuTAF5RGiS_HNPvLQa4DYGsO9e0.roa
Signing time: Sun 01 Sep 2024 11:35:26 +0000
ROA not before: Sun 01 Sep 2024 11:35:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:35:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=12E4C0179446892FC734FBCB41AE03606B0EF5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:ec:8a:1d:7c:2c:01:53:2d:d9:45:24:f7:
8a:1c:b2:df:84:e8:a7:a9:43:60:94:77:9d:0a:33:
51:67:42:95:5f:33:ec:91:16:d4:22:d5:9f:7c:fd:
a5:c1:f6:9b:e8:41:c6:f6:23:34:2b:58:c6:7a:69:
ab:6b:c4:ec:5b:5f:83:de:e7:ae:42:6f:6a:ce:6f:
60:c8:40:7d:03:4a:f7:45:fa:bb:cc:21:37:47:cc:
47:80:dd:23:c2:b7:fe:3c:bc:6a:1e:6e:af:68:9c:
f6:90:ea:b8:1f:02:72:f2:81:d1:4c:bb:64:c8:54:
fe:70:01:67:eb:47:d0:c3:5c:71:16:20:ab:a6:0b:
f2:64:52:01:4a:79:2c:9f:2d:0c:e2:87:1b:f0:10:
56:32:f4:d1:3e:80:5a:67:2a:c9:d7:a8:a5:d5:ce:
b6:c8:7c:dd:aa:ca:bb:0b:3e:91:a1:a4:fc:cd:15:
d4:94:06:bc:b9:03:47:fe:72:87:81:08:ab:76:fd:
78:44:32:db:6f:59:44:e7:55:66:39:9f:dd:d5:20:
e9:03:b3:90:e3:5b:c0:05:71:0b:b0:72:6c:aa:e0:
84:c4:26:29:86:5a:91:b8:3c:34:23:7c:2d:f8:28:
13:f0:14:6d:7a:59:5b:c7:54:2e:9d:86:70:86:6c:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:C0:17:94:46:89:2F:C7:34:FB:CB:41:AE:03:60:6B:0E:F5:ED
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/EuTAF5RGiS_HNPvLQa4DYGsO9e0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:01:8e:1a:0e:0c:f6:95:ea:63:e0:31:f2:8c:bc:a2:6c:ce:
d1:16:0c:7a:d0:55:aa:e5:4c:8b:32:9c:cf:35:49:e3:6b:52:
5d:80:ed:5b:24:22:b7:67:c6:4a:33:45:7f:a7:23:78:64:1c:
40:61:08:0b:7c:e6:6b:19:bd:94:40:de:dc:c3:95:a5:b1:fc:
57:0b:c6:c8:52:70:dd:9e:15:00:e2:19:78:f6:15:df:41:39:
94:98:ed:c4:c4:c9:bc:e1:5c:8a:fb:28:15:22:be:82:9d:39:
2d:fe:87:4b:ca:d4:ef:a4:57:47:73:9d:0c:0e:20:8c:c6:fc:
76:d3:32:56:c4:ae:ca:3e:a8:fc:24:c4:09:81:5c:ce:39:2e:
bd:66:67:2d:a4:cc:34:23:07:4f:88:50:c3:77:4b:57:23:55:
b1:f7:24:83:ad:6d:6d:ce:fa:ca:a7:03:51:01:e1:7f:de:b2:
1b:0d:fe:dc:fa:c0:2d:bc:a5:b4:0b:58:d6:5c:96:37:1a:dc:
ab:c5:c2:e1:fb:e4:22:82:09:e8:45:8a:a9:61:ea:d3:04:6d:
36:07:d5:2f:8a:25:aa:3c:e7:ee:a8:01:47:ff:f6:d8:43:e9:
f0:3b:e0:9c:e5:7c:db:38:54:ec:c7:13:6f:7f:95:00:bc:75:
12:fb:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:43 2024 by rpki-client on console-fra.rpki-client.org