Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/MUqCLB98oXwCOUuP1hjbFkVAP_U.roa
File: MUqCLB98oXwCOUuP1hjbFkVAP_U.roa (raw, json)
Hash identifier: /S1CiEGF+eEjM2yRe0ZbtcDHO6oEUOOK6hSNtTUCfCs=
Subject key identifier: 31:4A:82:2C:1F:7C:A1:7C:02:39:4B:8F:D6:18:DB:16:45:40:3F:F5
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C79
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MUqCLB98oXwCOUuP1hjbFkVAP_U.roa
Signing time: Sun 01 Sep 2024 11:36:36 +0000
ROA not before: Sun 01 Sep 2024 11:36:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:36:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=314A822C1F7CA17C02394B8FD618DB1645403FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:cc:a4:36:10:77:c3:7b:cd:f3:d4:d5:ce:
5d:38:d6:81:4e:55:97:bd:a1:f7:77:f7:e6:67:c6:
bb:00:15:62:2c:2a:58:22:82:03:66:0f:35:89:a2:
81:fb:19:af:3b:b6:35:45:7b:62:09:d7:c0:30:78:
9a:f2:21:fa:85:ca:0d:da:fc:f2:52:63:b9:10:57:
7a:3e:50:09:e7:55:e0:65:94:5c:cc:38:8b:1a:80:
14:9a:c1:e0:5b:73:1f:e5:ac:16:f8:39:e0:d4:8f:
80:8c:92:ba:60:04:92:5b:b9:40:98:7c:59:a8:a9:
80:1f:99:bf:09:19:b1:b6:42:b9:51:03:4c:bf:19:
6e:f1:9a:e2:c7:d6:ac:5e:8e:e0:fc:4d:59:14:42:
d4:b3:80:9f:bf:26:c7:85:9f:1e:03:e0:b2:49:2a:
c4:e5:c6:47:d3:dc:cf:40:e6:5d:ea:6c:97:51:ef:
e6:b9:c1:52:e4:d7:b8:a2:3a:a4:5b:52:b6:ae:9b:
fa:14:ef:13:48:c7:9d:b5:5c:e4:75:d8:39:c5:0e:
2a:16:5b:1c:b3:c8:ec:71:d0:6e:90:27:79:5b:73:
53:76:65:e1:cf:85:a6:f6:d2:ba:71:9b:96:99:94:
e0:ad:19:5a:12:85:ca:67:6c:76:ec:df:c5:f8:96:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:82:2C:1F:7C:A1:7C:02:39:4B:8F:D6:18:DB:16:45:40:3F:F5
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MUqCLB98oXwCOUuP1hjbFkVAP_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.48.0/22
Signature Algorithm: sha256WithRSAEncryption
64:fe:23:1c:ab:95:f5:1c:0a:86:15:74:f2:aa:62:19:ad:86:
e3:9e:b9:6f:6d:ab:46:25:02:e2:3e:19:92:28:9a:85:02:be:
2c:f4:da:69:be:21:81:b6:0e:ee:6a:2f:34:1c:75:bc:02:a4:
5f:62:c1:ed:eb:1b:6a:3f:8b:0a:d4:e2:6c:96:f2:a2:be:b8:
93:49:b6:ad:56:30:6a:03:6c:26:3c:60:1b:58:47:2a:8d:4e:
b6:fa:6b:28:c2:de:12:da:5c:1d:41:be:d1:81:53:e8:9b:83:
f2:64:f1:7f:cb:c9:fd:69:3d:03:4c:4b:b5:4c:c8:f3:1c:16:
94:cd:81:62:9d:d3:2e:ff:ab:1a:7f:e2:e3:c7:75:75:da:f2:
b0:85:a9:c9:f5:e4:34:15:f4:e6:32:9f:98:b2:ac:d9:7e:51:
e9:76:fd:c2:cb:13:d1:f6:76:b9:a8:79:d9:e3:e8:fc:70:f5:
a6:5f:27:af:39:bd:29:df:ad:cd:26:6c:65:7e:97:08:e9:49:
1d:05:dd:2a:a2:36:e3:79:b8:4a:69:72:d4:d1:85:3a:9a:5c:
4c:86:1e:73:3b:60:2a:69:44:77:2a:7d:58:bf:68:b5:a3:49:
1d:ae:6b:0e:1d:c4:49:d6:42:1b:ab:0a:a5:99:25:e6:f1:86:
e0:b4:6a:f2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA5MDEx
MTM2MzZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMxNEE4MjJDMUY3Q0Ex
N0MwMjM5NEI4RkQ2MThEQjE2NDU0MDNGRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7+sykNhB3w3vN89TVzl041oFOVZe9ofd39+ZnxrsAFWIsKlgi
ggNmDzWJooH7Ga87tjVFe2IJ18AweJryIfqFyg3a/PJSY7kQV3o+UAnnVeBllFzM
OIsagBSaweBbcx/lrBb4OeDUj4CMkrpgBJJbuUCYfFmoqYAfmb8JGbG2QrlRA0y/
GW7xmuLH1qxejuD8TVkUQtSzgJ+/JseFnx4D4LJJKsTlxkfT3M9A5l3qbJdR7+a5
wVLk17iiOqRbUraum/oU7xNIx521XOR12DnFDioWWxyzyOxx0G6QJ3lbc1N2ZeHP
hab20rpxm5aZlOCtGVoShcpnbHbs38X4llf/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUMUqCLB98oXwCOUuP1hjbFkVAP/UwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL01VcUNMQjk4b1h3Q09V
dVAxaGpiRmtWQVBfVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlTAwDQYJKoZIhvcNAQELBQADggEBAGT+IxyrlfUcCoYVdPKqYhmthuOeuW9t
q0YlAuI+GZIomoUCviz02mm+IYG2Du5qLzQcdbwCpF9iwe3rG2o/iwrU4myW8qK+
uJNJtq1WMGoDbCY8YBtYRyqNTrb6ayjC3hLaXB1BvtGBU+ibg/Jk8X/Lyf1pPQNM
S7VMyPMcFpTNgWKd0y7/qxp/4uPHdXXa8rCFqcn15DQV9OYyn5iyrNl+Uel2/cLL
E9H2drmoednj6Pxw9aZfJ685vSnfrc0mbGV+lwjpSR0F3SqiNuN5uEppctTRhTqa
XEyGHnM7YCppRHcqfVi/aLWjSR2uaw4dxEnWQhurCqWZJebxhuC0avI=
-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:43 2024 by rpki-client on console-fra.rpki-client.org