Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/OM_k4T-T5Bkxew_EIPeTDbDez04.roa
File: OM_k4T-T5Bkxew_EIPeTDbDez04.roa (raw, json)
Hash identifier: e3tu1HKcWqsxkrU7MLFfLQK4b4rYad0EslQK4spaoh8=
Subject key identifier: 38:CF:E4:E1:3F:93:E4:19:31:7B:0F:C4:20:F7:93:0D:B0:DE:CF:4E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 04AE
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/OM_k4T-T5Bkxew_EIPeTDbDez04.roa
Signing time: Fri 08 Sep 2023 16:07:46 +0000
ROA not before: Fri 08 Sep 2023 16:07:46 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 35913
IP address blocks: 123.98.68.0/22 maxlen: 24
211.149.36.0/22 maxlen: 24
211.149.44.0/22 maxlen: 24
211.149.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 8 16:07:46 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=38CFE4E13F93E419317B0FC420F7930DB0DECF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:a7:1a:7f:33:b6:bc:11:a0:fc:8c:33:7c:
40:59:b0:95:ce:34:94:29:8e:05:2f:af:49:10:65:
19:3b:cf:bc:3b:1b:f5:09:bc:9b:b5:81:bb:07:2a:
f6:7d:17:85:d1:93:9c:ef:12:7f:14:3f:1a:ac:98:
61:9d:67:30:a6:92:63:77:69:88:5f:fc:1a:f1:9a:
c2:04:88:5b:49:3c:69:8c:5a:b2:9c:97:e1:ba:b5:
16:ae:25:2e:49:89:95:f1:82:e4:e5:79:d1:c8:45:
b0:3a:fe:7a:64:6e:43:be:55:c2:fb:c8:ba:b0:57:
13:4f:14:51:08:a1:e0:4a:e8:da:7f:88:bc:22:a2:
02:d9:5a:3d:55:b8:43:b9:4a:92:cc:ec:3b:fb:ae:
9c:c3:49:50:aa:d7:a7:82:ba:07:a9:63:47:e6:76:
8e:7e:53:cb:f6:e5:cb:ac:a8:1c:0b:bf:ff:ec:34:
fc:df:d8:9d:be:6a:91:23:24:ca:13:7e:d5:ee:52:
76:f0:0d:ab:31:f1:0c:0a:6b:54:dd:04:76:cb:23:
24:49:ce:79:38:e4:ec:67:e0:53:ca:71:c3:cd:18:
c5:9d:d7:c5:0a:8d:79:ec:a8:48:6d:a6:b2:d2:06:
43:b0:8d:5f:1d:d4:ab:a2:27:91:14:b1:5a:2e:a2:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:E4:E1:3F:93:E4:19:31:7B:0F:C4:20:F7:93:0D:B0:DE:CF:4E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/OM_k4T-T5Bkxew_EIPeTDbDez04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.68.0/22
211.149.36.0/22
211.149.44.0/22
211.149.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:70:d8:76:69:2a:17:29:b8:b2:db:d8:2a:1b:f9:bb:9f:57:
97:6f:fd:44:cc:e2:fa:70:86:8a:0d:08:98:85:d0:0c:3e:b4:
0d:89:b9:bc:c4:ac:90:96:75:4c:28:0c:56:c0:2e:a1:f3:6d:
80:2e:d8:17:83:25:97:b0:e8:b1:f5:a2:db:96:dd:e4:57:ab:
f4:95:3e:a7:13:7f:e1:d8:50:cf:8c:dc:26:89:28:55:66:a0:
54:62:72:62:6b:4d:19:06:e2:6a:23:f9:fe:fd:03:26:a3:13:
3e:94:2c:0a:f3:b3:a3:38:57:80:55:ad:02:ab:2f:43:ef:8f:
43:b2:fe:dd:1c:f4:16:12:08:f0:cc:4e:b5:02:e1:32:96:98:
c5:cc:1c:ca:cb:b0:8a:52:11:a1:8a:d0:53:a1:34:f2:b7:ff:
c7:d1:8f:49:b3:3c:fe:e8:f5:0c:b1:d8:dd:e9:ca:80:41:8c:
72:de:cc:9b:38:07:07:ef:c1:f9:70:e9:d0:6f:0a:32:bc:76:
9a:09:cd:cf:a9:8b:0f:a9:e8:4d:8f:58:d4:c1:24:b3:85:94:
af:ec:5e:ba:7b:c6:c8:56:d8:f7:22:aa:8f:eb:5f:ec:89:ce:
d8:41:6b:5f:e6:84:a5:a7:b1:ea:4f:9c:8f:16:29:20:76:87:
cb:bb:f4:65
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA5MDgx
NjA3NDZaFw0yNDA4MTAwNzQxMTNaMDMxMTAvBgNVBAMTKDM4Q0ZFNEUxM0Y5M0U0
MTkzMTdCMEZDNDIwRjc5MzBEQjBERUNGNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzP6cafzO2vBGg/IwzfEBZsJXONJQpjgUvr0kQZRk7z7w7G/UJ
vJu1gbsHKvZ9F4XRk5zvEn8UPxqsmGGdZzCmkmN3aYhf/BrxmsIEiFtJPGmMWrKc
l+G6tRauJS5JiZXxguTledHIRbA6/npkbkO+VcL7yLqwVxNPFFEIoeBK6Np/iLwi
ogLZWj1VuEO5SpLM7Dv7rpzDSVCq16eCugepY0fmdo5+U8v25cusqBwLv//sNPzf
2J2+apEjJMoTftXuUnbwDasx8QwKa1TdBHbLIyRJznk45Oxn4FPKccPNGMWd18UK
jXnsqEhtprLSBkOwjV8d1KuiJ5EUsVouonSjAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUOM/k4T+T5Bkxew/EIPeTDbDez04wHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL09NX2s0VC1UNUJreGV3
X0VJUGVURGJEZXowNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD
BAJ7YkQDBALTlSQDBALTlSwDBALTlVQwDQYJKoZIhvcNAQELBQADggEBALdw2HZp
KhcpuLLb2Cob+bufV5dv/UTM4vpwhooNCJiF0Aw+tA2JubzErJCWdUwoDFbALqHz
bYAu2BeDJZew6LH1otuW3eRXq/SVPqcTf+HYUM+M3CaJKFVmoFRicmJrTRkG4moj
+f79AyajEz6ULArzs6M4V4BVrQKrL0Pvj0Oy/t0c9BYSCPDMTrUC4TKWmMXMHMrL
sIpSEaGK0FOhNPK3/8fRj0mzPP7o9Qyx2N3pyoBBjHLezJs4Bwfvwflw6dBvCjK8
dpoJzc+piw+p6E2PWNTBJLOFlK/sXrp7xshW2Pciqo/rX+yJzthBa1/mhKWnsepP
nI8WKSB2h8u79GU=
-----END CERTIFICATE-----
Generated at Tue Sep 12 10:36:15 2023 by rpki-client on console-fra.rpki-client.org