Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/GdDtmFFFKK_uqu_CiZygGAaqS3U.roa
File: GdDtmFFFKK_uqu_CiZygGAaqS3U.roa (raw, json)
Hash identifier: J0aH5uSmJdBv5DxA2rZaRnZd1UHmwuOWCglwZPrhVEI=
Subject key identifier: 19:D0:ED:98:51:45:28:AF:EE:AA:EF:C2:89:9C:A0:18:06:AA:4B:75
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C77
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GdDtmFFFKK_uqu_CiZygGAaqS3U.roa
Signing time: Sun 01 Sep 2024 11:36:24 +0000
ROA not before: Sun 01 Sep 2024 11:36:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:36:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=19D0ED98514528AFEEAAEFC2899CA01806AA4B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:91:29:58:84:5d:9c:b4:fc:fb:0b:ad:93:
8b:45:23:e7:37:73:75:1e:7c:9e:12:47:89:7d:1f:
31:15:65:22:a5:d1:4c:f8:62:c0:c2:5e:33:ab:32:
70:b7:18:2e:8c:a6:57:51:fc:86:c6:6f:f4:9b:8d:
8b:23:87:d3:60:ec:fb:f7:2f:17:a5:77:c3:a7:a5:
bc:b8:fb:db:46:91:0d:83:95:a0:dc:a6:d4:40:2c:
91:6f:f9:dc:0f:1c:cd:a7:8a:24:ab:2d:22:65:74:
f7:ab:d4:e3:06:d7:01:2b:1a:d4:a0:8c:ae:12:d4:
70:af:5c:44:05:1b:79:bd:3f:68:6b:d8:33:b3:99:
9b:e9:38:9f:02:54:43:ec:8b:58:3b:de:68:04:a1:
bc:58:ae:e3:09:04:6b:16:da:f2:dc:2d:81:8f:ef:
51:62:1f:a6:2a:b9:e5:a0:d4:52:d4:4f:69:09:e7:
59:92:05:d7:af:4a:ee:32:f0:e5:04:4b:c5:ed:eb:
bd:c8:1c:09:7a:e5:42:d3:81:2c:42:5c:c7:8b:a2:
08:83:0d:62:97:a9:49:4a:ea:23:e4:ed:f1:84:cb:
a2:64:2c:19:36:83:1c:a7:20:e4:92:00:f4:47:e3:
f2:97:31:98:a2:55:d1:1d:ad:e3:5c:0a:3b:42:00:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:ED:98:51:45:28:AF:EE:AA:EF:C2:89:9C:A0:18:06:AA:4B:75
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/GdDtmFFFKK_uqu_CiZygGAaqS3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.44.0/22
Signature Algorithm: sha256WithRSAEncryption
25:d1:0d:f5:06:88:4d:01:57:cd:ae:65:aa:66:6b:62:96:68:
a6:a4:ba:b5:89:b7:5a:67:e2:d3:a5:16:db:24:83:0d:46:9e:
55:4f:b0:49:f7:7b:d4:17:8f:58:e9:5a:0b:98:69:5d:b8:0a:
e1:39:57:ad:93:81:74:60:6d:65:72:38:ba:3c:43:a1:97:07:
20:4e:03:93:48:f6:bd:42:b3:fd:ce:af:af:3d:45:57:ec:dd:
20:f5:94:50:37:22:44:79:18:bd:b2:a0:71:2c:bc:27:af:83:
67:e0:b9:25:9d:f0:04:5b:00:e6:fd:a2:fb:fd:7c:48:85:08:
63:bb:68:e2:e9:a6:96:92:bb:fc:af:7e:f4:5e:b5:c9:b3:5f:
46:b6:b4:ad:dc:d5:08:1a:7e:89:0b:c8:17:ee:b3:35:db:54:
63:31:cd:5a:94:94:c8:f9:c0:a0:40:ac:9c:75:ea:19:56:9d:
19:b0:ad:f1:28:eb:ae:11:83:74:5f:17:84:03:da:f9:2a:64:
94:2d:61:89:82:50:57:7d:94:25:40:1e:a0:c6:4d:58:fe:32:
aa:9e:e5:12:a2:02:ab:e7:0b:9b:7b:a0:e5:3f:4d:47:bf:06:
0e:1d:5f:43:48:0d:5c:a9:52:de:80:56:c2:0c:8a:d0:dc:65:
c4:5b:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 16:58:40 2024 by rpki-client on console-ams.rpki-client.org