Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Qn6kFfr0Yqc_ZfM1qm0tX914jrM.roa
File: Qn6kFfr0Yqc_ZfM1qm0tX914jrM.roa (raw, json)
Hash identifier: qVTK1fx+NRwqMjo7Iko1zIdLg8vyG54P75+M4O18cZA=
Subject key identifier: 42:7E:A4:15:FA:F4:62:A7:3F:65:F3:35:AA:6D:2D:5F:DD:78:8E:B3
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 052B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Qn6kFfr0Yqc_ZfM1qm0tX914jrM.roa
Signing time: Wed 27 Sep 2023 03:19:04 +0000
ROA not before: Wed 27 Sep 2023 03:19:03 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/23 maxlen: 24
210.79.77.0/24 maxlen: 24
210.79.90.0/24 maxlen: 24
210.79.112.0/24 maxlen: 24
210.79.114.0/24 maxlen: 24
210.79.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 27 03:19:03 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=427EA415FAF462A73F65F335AA6D2D5FDD788EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:71:24:ed:de:84:d7:76:b6:68:fa:38:1c:
52:f1:c1:77:59:c2:40:a7:e0:ef:1b:cf:d2:b3:64:
f6:43:b2:03:ad:fb:2c:3a:f4:17:e1:c2:3e:5e:8c:
ce:84:ef:f4:97:38:c0:0c:ec:da:0a:fd:ce:5b:b3:
b2:1d:ee:e3:78:db:fb:72:cb:6c:00:df:11:89:87:
1c:c9:c9:c7:0c:19:09:53:17:d7:7a:80:33:65:08:
eb:f2:27:5d:4f:49:dc:74:7c:4e:92:6b:9c:fa:c2:
60:b1:1a:76:16:20:5d:15:78:fd:cc:5b:e8:6c:4e:
48:5a:3a:b5:5d:39:08:3c:3d:7e:d9:68:0d:e2:a2:
a3:17:e7:c2:c8:89:57:5e:45:a7:11:19:72:3d:1e:
7d:35:14:cf:40:60:59:37:35:c1:cb:97:0d:c0:0c:
28:62:9a:93:44:e3:13:ec:57:f6:60:3a:d6:dc:67:
ae:3b:9e:6d:22:a7:f7:0a:6f:05:40:ea:8e:35:d4:
5e:11:9b:24:0d:71:05:cc:92:d6:c6:e1:57:84:aa:
a0:94:89:6b:ed:65:38:0d:02:cf:66:dd:e3:8d:7b:
40:63:20:87:13:a4:fb:86:ca:e1:c1:a7:a1:6a:37:
22:dc:19:71:89:dc:2b:c0:c9:65:e2:1f:be:a0:62:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7E:A4:15:FA:F4:62:A7:3F:65:F3:35:AA:6D:2D:5F:DD:78:8E:B3
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Qn6kFfr0Yqc_ZfM1qm0tX914jrM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0/23
210.79.77.0/24
210.79.90.0/24
210.79.112.0/24
210.79.114.0/23
Signature Algorithm: sha256WithRSAEncryption
31:60:c7:18:f2:42:04:56:a7:59:d5:67:6b:b9:c2:fa:86:ed:
92:6d:ee:84:72:2b:9d:61:d2:d8:4e:57:ee:c1:4c:dd:59:47:
13:72:5a:51:08:43:a3:1f:fc:b6:b8:e0:f2:ad:b9:ff:77:96:
7b:54:ef:ac:ec:2c:97:3a:a0:0d:0b:45:9c:5b:66:df:0e:2b:
5c:74:2b:61:67:55:e8:2a:e4:26:f8:7f:46:5c:83:e9:32:02:
8d:4d:70:11:95:dd:b4:59:a7:ec:7d:38:e6:ae:3c:dd:d6:d7:
43:5b:5b:e2:a3:da:74:e7:84:e1:e1:d8:1e:78:45:8f:b8:8f:
30:8e:2b:0d:9f:36:63:f4:2e:3a:52:58:c9:47:b8:39:5c:14:
de:38:77:44:29:c9:09:d5:b9:1e:be:9a:a3:4b:f8:a9:74:d6:
67:53:30:e6:a3:4f:e8:a1:2d:47:5a:f0:8e:59:c7:f2:88:e9:
88:5a:93:68:1d:77:b8:83:27:d8:ca:11:06:e1:13:6d:6e:08:
ad:ed:f6:d8:40:a2:71:ee:e2:92:bb:a1:21:70:74:7e:46:5f:
2d:1f:b6:97:5d:bc:95:9e:1e:96:06:35:5a:8c:2d:9d:44:d6:
db:0f:17:b4:66:5b:bc:32:15:48:db:b9:a5:e2:16:df:e0:56:
75:c5:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 05:04:30 2023 by rpki-client on console-ams.rpki-client.org