Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/GP9PGvWqO2kcJOx2z-LTBaE9hH4.roa
File: GP9PGvWqO2kcJOx2z-LTBaE9hH4.roa (raw, json)
Hash identifier: Vvoj4sdsVpJc+KYB8CGtuD0RAwtsSLEnXDFkuSIhWqM=
Subject key identifier: 18:FF:4F:1A:F5:AA:3B:69:1C:24:EC:76:CF:E2:D3:05:A1:3D:84:7E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 08A6
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GP9PGvWqO2kcJOx2z-LTBaE9hH4.roa
Signing time: Wed 06 Mar 2024 09:54:21 +0000
ROA not before: Wed 06 Mar 2024 09:54:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 123.98.4.0/22 maxlen: 24
123.98.8.0/22 maxlen: 24
123.98.16.0/22 maxlen: 24
123.98.20.0/22 maxlen: 24
123.98.24.0/22 maxlen: 24
123.98.36.0/22 maxlen: 24
123.98.52.0/22 maxlen: 24
123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
123.98.92.0/22 maxlen: 24
211.149.80.0/22 maxlen: 24
211.149.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 6 09:54:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=18FF4F1AF5AA3B691C24EC76CFE2D305A13D847E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:36:64:30:3e:57:56:08:04:d4:74:b2:9e:
2a:2a:23:ce:9a:a9:2d:45:2d:24:a5:ea:76:2c:26:
da:39:07:8e:28:50:ca:d7:10:bf:9e:6c:df:46:ed:
50:fb:19:ae:b6:58:c8:d2:e8:df:a6:af:ba:e6:a9:
f4:c3:82:7d:0a:5d:6a:28:f9:d3:11:90:cd:83:47:
bd:f7:06:48:d7:84:dc:b3:80:ca:c1:20:53:9b:15:
86:ba:9e:03:74:50:09:67:34:d3:a0:05:c1:52:35:
d5:f5:b4:50:f1:27:a9:ad:ea:81:8c:03:c6:bb:03:
f9:82:b1:9e:d8:9e:a6:d3:76:e3:e7:5c:14:07:a3:
bc:91:46:c6:c8:0d:4d:f4:22:26:e4:85:db:46:00:
91:82:62:4d:4c:1b:52:74:ec:a0:7f:5a:0e:84:a7:
41:54:e2:2a:2e:50:a0:4e:94:2f:7f:c6:98:7b:98:
aa:11:ef:81:e4:90:99:f0:b0:1f:78:c3:84:86:c2:
7d:cb:cc:ea:22:9c:e9:f4:b4:ce:0c:a9:c4:e0:00:
c6:9a:62:ac:7d:4c:23:73:4c:11:ba:45:a2:ce:dd:
b4:30:ae:1a:42:38:ef:49:68:ce:6f:cd:59:06:04:
dc:a8:cb:12:bc:1e:c1:f7:5a:c2:71:38:e5:33:e0:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:4F:1A:F5:AA:3B:69:1C:24:EC:76:CF:E2:D3:05:A1:3D:84:7E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GP9PGvWqO2kcJOx2z-LTBaE9hH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.4.0-123.98.11.255
123.98.16.0-123.98.27.255
123.98.36.0/22
123.98.52.0/22
123.98.76.0/22
123.98.84.0/22
123.98.92.0/22
211.149.80.0/22
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ba:73:33:e0:17:dd:2a:80:7b:b5:78:75:9c:2f:ac:71:b7:
97:17:94:81:a4:68:78:fb:b7:90:6b:fa:c7:4a:28:a5:17:ee:
e7:60:ed:52:67:4b:b3:a0:1b:47:c1:9d:f6:ee:73:ed:e6:62:
a2:0b:dc:29:ed:41:78:ac:b2:24:e2:1a:cd:65:88:ac:42:0e:
cd:61:78:48:46:e0:d7:78:a1:27:10:ec:f2:13:28:70:b8:f3:
f1:f0:1c:17:31:c7:36:d2:44:03:8a:4e:43:98:2c:8b:8d:7e:
1c:f0:17:66:84:4b:24:57:51:e2:5f:ee:f0:26:5b:1e:c4:d2:
5f:ea:bc:4a:85:33:e2:cb:50:ad:6d:0d:49:d9:57:4b:d7:93:
c0:4b:3e:b4:ee:22:67:80:b8:ce:69:b5:f7:fe:b3:c8:86:b6:
5f:84:95:52:10:bd:8d:1c:88:82:12:82:01:10:84:bc:dc:f3:
7a:88:5b:53:93:e5:22:34:44:76:85:51:de:8a:24:15:88:d7:
24:2f:4b:c0:d1:aa:8d:d2:f4:8c:30:d0:0f:4a:12:47:0a:33:
64:05:14:30:09:e1:1b:6c:24:a9:b1:53:05:24:6f:f5:ce:aa:
8a:b4:23:6e:b2:3b:40:2a:a8:30:10:91:fd:f3:75:46:63:fd:
9e:ec:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 06:29:16 2024 by rpki-client on console-ams.rpki-client.org