Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/MSopdI0x7wAHzLjpKS0D_apy3w4.roa
File: MSopdI0x7wAHzLjpKS0D_apy3w4.roa (raw, json)
Hash identifier: wbv26JrG+A5XrphrrSspjDwGQ3V/hRwTrmco0pMSdNs=
Subject key identifier: 31:2A:29:74:8D:31:EF:00:07:CC:B8:E9:29:2D:03:FD:AA:72:DF:0E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 063E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MSopdI0x7wAHzLjpKS0D_apy3w4.roa
Signing time: Tue 14 Nov 2023 03:04:05 +0000
ROA not before: Tue 14 Nov 2023 03:04:05 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 62387
IP address blocks: 123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
123.98.112.0/22 maxlen: 24
123.98.124.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
211.149.80.0/22 maxlen: 24
211.149.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Nov 14 03:04:05 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=312A29748D31EF0007CCB8E9292D03FDAA72DF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:21:dd:fa:44:8a:9b:3b:2f:cf:a1:cf:e6:
7b:fc:68:56:ef:04:d5:70:ab:fb:5e:87:e2:67:bc:
2c:d1:7d:1c:b6:26:56:47:dd:d2:b6:50:a5:87:8c:
c9:ae:cd:c1:71:c2:ae:ad:cc:08:8e:c6:29:f8:a5:
05:dd:6a:ab:1f:f1:ed:b4:96:34:7c:58:fe:d7:b0:
ce:d7:de:6d:d4:a8:87:ab:b4:db:c3:ba:60:b0:17:
77:2b:ce:4c:a5:42:74:91:b5:d2:6e:18:c4:e6:c2:
ef:f0:e7:eb:60:0a:a9:f2:69:31:76:15:43:a8:3d:
fb:c9:d7:e6:ea:fe:ee:03:cf:70:48:3b:ec:04:11:
49:0b:8b:2e:6f:be:bb:29:81:02:2b:4f:45:29:1b:
7e:54:6a:64:02:8b:cf:d4:89:ac:ea:cc:d0:fc:00:
13:56:8d:08:d1:30:c3:a2:2a:3a:4b:7e:0a:40:6e:
73:6f:cb:1b:ea:2d:25:3d:3b:b2:6b:89:4b:14:4e:
73:11:87:63:70:33:8f:2f:41:17:e8:65:50:ef:57:
fd:10:d8:09:c3:1b:34:6b:a3:b9:1f:a7:88:5a:d0:
e6:72:a2:a5:f2:a9:47:4d:11:10:26:31:36:33:40:
67:0e:5c:56:f3:d6:bf:be:e5:86:ad:20:28:1e:c3:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:29:74:8D:31:EF:00:07:CC:B8:E9:29:2D:03:FD:AA:72:DF:0E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MSopdI0x7wAHzLjpKS0D_apy3w4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.76.0/22
123.98.84.0/22
123.98.112.0/22
123.98.124.0/22
211.149.76.0-211.149.83.255
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
63:73:66:40:f1:aa:d5:0f:26:61:08:01:9c:e4:a5:08:ce:b1:
c7:52:aa:96:6d:fa:f0:ca:3f:a3:b5:bb:cc:4c:4f:bb:30:a1:
d8:2d:46:b7:ef:12:97:66:f2:f4:5f:c6:41:6a:7c:9f:ac:88:
0e:eb:6f:69:8f:89:89:86:1b:1d:61:03:d6:b8:15:18:d3:46:
b9:96:aa:9b:9d:4f:6b:49:12:ef:36:fd:9a:91:00:b8:22:fb:
f4:1f:b4:55:4b:ec:08:b2:bf:b9:c5:af:4b:ab:3a:a1:d0:fa:
a6:ea:cb:a9:95:74:57:cb:60:07:15:2d:10:0c:c8:64:f9:4b:
83:25:f8:f9:21:0a:a1:32:9a:59:2b:8c:d6:4f:1d:37:94:7b:
fc:0a:c9:67:07:a4:42:29:48:3c:e8:ca:43:c9:39:20:79:b5:
cd:98:ba:94:36:8c:a4:8f:c9:45:6f:37:b4:0c:19:31:04:d7:
0d:3b:ca:ae:7c:2a:43:40:7b:c7:c3:2a:a6:0e:eb:04:fd:ab:
b1:5b:e4:eb:37:1c:d2:88:9b:35:86:72:79:c1:db:fd:b6:af:
7c:fa:9c:dc:05:6b:25:d5:65:8e:33:f4:f9:27:bc:9d:fb:7f:
53:33:3b:11:71:d2:11:ba:61:a4:24:7f:7e:b5:ee:bd:86:31:
e2:53:e3:92
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 23 04:16:40 2023 by rpki-client on console-fra.rpki-client.org