Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/KM5qTf0PUkQOY_mQAO-ENR_W0P8.roa
File: KM5qTf0PUkQOY_mQAO-ENR_W0P8.roa (raw, json)
Hash identifier: N2JSbBL+JmTqwdrU7d0pG3V/W5JLjxMBlqF9K9gOeIw=
Subject key identifier: 28:CE:6A:4D:FD:0F:52:44:0E:63:F9:90:00:EF:84:35:1F:D6:D0:FF
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C7D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/KM5qTf0PUkQOY_mQAO-ENR_W0P8.roa
Signing time: Sun 01 Sep 2024 11:37:02 +0000
ROA not before: Sun 01 Sep 2024 11:37:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:37:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=28CE6A4DFD0F52440E63F99000EF84351FD6D0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:12:7c:c7:a9:80:55:4a:3c:d8:44:ae:a9:
42:7c:5b:1c:ec:f9:94:b1:7a:c5:d1:52:90:2c:ee:
fd:25:fb:1c:fd:e2:03:e4:7c:65:2b:8a:fb:f6:f1:
94:3b:eb:72:32:32:1c:e3:33:58:9e:5e:16:30:47:
f9:f3:0c:e0:4b:7c:bd:62:79:dd:e0:24:7b:70:20:
78:8d:4a:a5:a5:28:78:60:da:ed:5f:54:3a:ab:8e:
fa:c5:af:0f:12:49:d4:a5:62:dd:76:fe:23:3d:ff:
72:50:77:be:8c:24:c9:40:d6:a9:f3:64:71:6f:43:
f4:a0:21:f6:05:42:56:a3:c8:93:9f:34:bf:a6:d2:
da:d2:28:7e:37:92:53:b8:8b:74:ea:d8:c8:ca:86:
9e:b3:ca:79:72:21:75:ff:26:af:29:fa:1b:ac:4d:
f7:00:01:7e:23:31:21:28:46:29:dc:09:12:dc:e4:
05:c2:3c:d4:74:71:b4:48:2e:4c:c2:27:93:e9:82:
3b:a3:96:9d:88:61:d7:8f:1a:ca:e3:bc:fb:ef:8e:
23:75:04:9d:6b:40:cb:62:25:c2:d1:59:90:db:04:
f4:a3:14:1e:5c:e1:ba:bb:49:e9:8d:83:eb:c5:ef:
f9:fc:37:fa:c0:e8:e3:8c:dc:fc:58:b9:66:69:df:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:6A:4D:FD:0F:52:44:0E:63:F9:90:00:EF:84:35:1F:D6:D0:FF
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/KM5qTf0PUkQOY_mQAO-ENR_W0P8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.56.0/22
Signature Algorithm: sha256WithRSAEncryption
72:96:be:3b:4f:ad:cc:2d:45:14:2e:e9:4c:18:60:c3:c4:41:
fc:49:9f:3d:d4:67:85:7b:10:6b:96:27:63:81:f3:5e:e3:b3:
8b:64:77:30:88:93:5c:62:84:06:39:9e:19:dc:dd:6a:05:dd:
c7:30:ab:7b:f0:3b:25:19:87:78:20:b3:38:03:2a:c6:c4:88:
9b:d0:d8:47:d2:24:3e:8c:61:26:ac:a7:6c:78:b2:8b:5e:79:
04:55:08:c7:dd:c0:f1:bc:5e:ef:f9:fb:b9:66:7d:77:e7:d6:
c8:61:03:71:2e:8a:53:96:57:e4:bd:b0:89:66:64:b5:8e:57:
06:2f:c6:e6:5c:ae:1a:63:1e:e7:ab:ad:5f:5d:1a:39:62:8b:
83:31:e1:97:76:c7:b2:35:66:e7:47:48:ef:6e:9b:41:c1:6c:
fc:d5:31:49:98:35:d9:b0:79:b8:bc:11:94:77:d0:91:b2:b3:
37:e6:8b:b1:38:c7:07:a3:45:cd:05:05:34:f2:5b:19:86:73:
da:01:43:0c:93:d4:96:94:15:67:bb:88:2c:0b:dd:e6:4c:9e:
93:32:59:1d:d2:5d:91:d2:8c:c6:70:2a:af:7b:b9:55:8c:98:
42:97:df:a3:16:61:60:d0:69:ee:46:bc:1f:93:26:3d:35:7f:
db:3a:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 16:58:40 2024 by rpki-client on console-ams.rpki-client.org