Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/RBJNzR-kiMMwv8eavN-9imGAFuc.roa
File: RBJNzR-kiMMwv8eavN-9imGAFuc.roa (raw, json)
Hash identifier: EXAjmuz9hQWpSezEMJpsjjDeq4w2Vtprup8UzCKAoWs=
Subject key identifier: 44:12:4D:CD:1F:A4:88:C3:30:BF:C7:9A:BC:DF:BD:8A:61:80:16:E7
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C7F
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RBJNzR-kiMMwv8eavN-9imGAFuc.roa
Signing time: Sun 01 Sep 2024 11:37:17 +0000
ROA not before: Sun 01 Sep 2024 11:37:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3199 (0xc7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:37:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=44124DCD1FA488C330BFC79ABCDFBD8A618016E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:75:34:9a:9e:32:b7:4b:b5:62:1a:2c:bb:
1e:68:84:23:41:3e:3f:73:ed:7e:10:1f:38:c0:2d:
8d:ab:04:3f:39:23:2b:75:4a:81:30:76:16:34:3e:
60:c3:2e:23:6b:e3:4f:05:ab:19:98:62:e6:d0:31:
3d:2b:6f:1b:7a:1b:7d:40:d6:09:88:ef:37:cd:06:
21:63:f6:97:3e:06:91:c9:6e:5d:79:d2:e0:18:a9:
23:a2:3b:92:61:d7:0c:91:6d:49:58:84:89:b7:80:
4d:b1:81:d4:10:cd:f3:b4:d8:31:87:ed:69:3c:b2:
2b:a0:c9:d4:8b:2e:d4:e0:ee:59:cb:03:3f:c4:36:
a2:34:d3:ed:4c:ad:e4:77:c7:4d:33:33:62:56:cb:
27:f9:af:61:c1:18:72:b3:87:00:bd:48:f9:80:d0:
78:77:02:e1:a9:89:85:90:42:2c:ab:e8:bc:d4:36:
3e:45:84:84:bc:ab:c8:8b:78:57:66:53:5e:9e:2b:
fe:a6:8d:d1:3e:94:05:71:f0:fd:db:45:6b:85:00:
2f:72:00:4d:a0:35:6d:86:f3:71:15:9e:9d:d8:1d:
19:8c:4d:ef:de:60:47:3e:06:09:9f:b1:a9:c8:a0:
26:f7:33:31:0a:ca:3b:b0:fb:5c:af:bf:05:4c:3b:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:4D:CD:1F:A4:88:C3:30:BF:C7:9A:BC:DF:BD:8A:61:80:16:E7
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RBJNzR-kiMMwv8eavN-9imGAFuc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
78:2d:8b:39:a0:27:23:15:c3:8f:2d:05:2a:ff:25:43:50:70:
b0:6c:f9:d4:40:95:e0:a1:54:fc:59:c9:30:a2:40:32:e2:2a:
d0:26:6c:e9:de:96:b0:0c:4b:be:ed:7d:59:e9:1b:27:b0:bc:
9d:e5:bb:93:29:cf:b1:6a:e9:9f:0d:57:71:7f:8a:e6:33:5b:
1c:ba:03:bd:90:c6:e0:2a:51:ef:68:5f:18:42:ea:31:e1:e4:
ff:04:93:d4:9d:61:c7:a4:ab:b1:30:ce:20:93:73:55:27:46:
41:00:4b:38:e8:2c:cb:94:c6:05:d2:f6:e8:43:94:2e:61:e2:
b2:80:73:5b:d7:78:2c:9a:a8:1f:7e:28:c9:59:86:10:f0:6d:
b5:6b:82:05:0b:e6:88:90:81:13:c7:f9:b7:bb:45:76:c0:27:
cb:4e:0c:c1:36:33:2a:b0:78:8e:f4:81:83:1e:e1:14:50:9d:
fd:6d:c5:cd:37:6f:8f:ba:f9:00:34:c6:89:01:33:8c:d5:c1:
61:a9:09:d3:b6:61:8b:4e:2e:c0:78:d2:7f:51:6b:9e:35:74:
57:56:67:00:43:d0:6c:b5:74:d8:38:c9:fb:b3:1f:51:c3:45:
4d:7e:45:d8:75:09:03:21:3e:f8:cd:2f:98:02:96:f7:6d:05:
64:aa:01:f6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA5MDEx
MTM3MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0MTI0RENEMUZBNDg4
QzMzMEJGQzc5QUJDREZCRDhBNjE4MDE2RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXi3U0mp4yt0u1Yhosux5ohCNBPj9z7X4QHzjALY2rBD85Iyt1
SoEwdhY0PmDDLiNr408FqxmYYubQMT0rbxt6G31A1gmI7zfNBiFj9pc+BpHJbl15
0uAYqSOiO5Jh1wyRbUlYhIm3gE2xgdQQzfO02DGH7Wk8siugydSLLtTg7lnLAz/E
NqI00+1MreR3x00zM2JWyyf5r2HBGHKzhwC9SPmA0Hh3AuGpiYWQQiyr6LzUNj5F
hIS8q8iLeFdmU16eK/6mjdE+lAVx8P3bRWuFAC9yAE2gNW2G83EVnp3YHRmMTe/e
YEc+BgmfsanIoCb3MzEKyjuw+1yvvwVMOz+VAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQURBJNzR+kiMMwv8eavN+9imGAFucwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1JCSk56Ui1raU1Nd3Y4
ZWF2Ti05aW1HQUZ1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlTwwDQYJKoZIhvcNAQELBQADggEBAHgtizmgJyMVw48tBSr/JUNQcLBs+dRA
leChVPxZyTCiQDLiKtAmbOnelrAMS77tfVnpGyewvJ3lu5Mpz7Fq6Z8NV3F/iuYz
Wxy6A72QxuAqUe9oXxhC6jHh5P8Ek9SdYcekq7EwziCTc1UnRkEASzjoLMuUxgXS
9uhDlC5h4rKAc1vXeCyaqB9+KMlZhhDwbbVrggUL5oiQgRPH+be7RXbAJ8tODME2
MyqweI70gYMe4RRQnf1txc03b4+6+QA0xokBM4zVwWGpCdO2YYtOLsB40n9Ra541
dFdWZwBD0Gy1dNg4yfuzH1HDRU1+Rdh1CQMhPvjNL5gClvdtBWSqAfY=
-----END CERTIFICATE-----
Generated at Thu Sep 5 16:58:40 2024 by rpki-client on console-ams.rpki-client.org