Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/RsidovZ2YavWeyHTNWP23JsPaRQ.roa
File: RsidovZ2YavWeyHTNWP23JsPaRQ.roa (raw, json)
Hash identifier: JhuUVEKtNKzcVJ4IetovD24T1nya/+QdCSaYgKhIYu4=
Subject key identifier: 46:C8:9D:A2:F6:76:61:AB:D6:7B:21:D3:35:63:F6:DC:9B:0F:69:14
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 05A9
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RsidovZ2YavWeyHTNWP23JsPaRQ.roa
Signing time: Wed 18 Oct 2023 02:54:09 +0000
ROA not before: Wed 18 Oct 2023 02:54:09 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 62387
IP address blocks: 123.98.0.0/22 maxlen: 24
123.98.12.0/22 maxlen: 24
123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1449 (0x5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 18 02:54:09 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=46C89DA2F67661ABD67B21D33563F6DC9B0F6914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:20:c1:bc:39:3f:05:b8:f2:9e:e4:f3:45:
95:a6:cf:21:1c:37:f8:bc:f7:88:db:b7:12:f7:2f:
0a:d1:60:6d:3e:1f:ea:fa:af:eb:7a:35:7d:71:c4:
4c:53:37:e0:63:fd:67:04:ca:7b:84:9b:f8:35:02:
ec:d6:01:60:51:de:d4:f4:ec:e4:82:d9:05:93:b9:
a0:bf:11:bf:db:6c:0d:b4:4c:86:0b:9d:bb:2e:90:
f3:68:52:01:d6:75:c4:ed:89:ba:03:fe:71:4b:5e:
61:ba:34:e9:63:e8:fb:be:7e:14:e2:b7:6b:2b:bf:
f3:02:60:f7:9f:f2:4c:d9:41:c2:40:a5:05:de:1d:
d4:fd:0e:11:f8:03:fa:d6:f3:04:90:3a:a7:ea:47:
07:77:be:ab:ac:9e:d8:76:c8:eb:3c:73:a9:47:8c:
5f:e1:5e:13:85:61:4d:4f:2c:a9:c9:9c:92:af:43:
23:a6:c9:8f:77:e0:53:a5:cd:ce:e3:15:a2:3c:2d:
a6:1b:a8:97:09:ba:af:1e:35:25:3f:83:3b:af:85:
db:03:13:cd:47:28:e8:c2:2e:e6:f9:9e:3d:cf:77:
84:31:9b:da:21:57:9b:ff:5a:ad:64:e0:a6:64:18:
d7:69:d5:f4:43:68:40:2a:79:7b:4f:4e:10:0e:54:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:9D:A2:F6:76:61:AB:D6:7B:21:D3:35:63:F6:DC:9B:0F:69:14
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/RsidovZ2YavWeyHTNWP23JsPaRQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.0.0/22
123.98.12.0/22
123.98.76.0/22
123.98.84.0/22
Signature Algorithm: sha256WithRSAEncryption
89:bc:da:96:0c:08:54:52:bb:43:7f:20:45:06:f0:f3:7e:19:
de:ae:5a:26:02:83:99:f1:fd:8f:dc:4d:f6:18:87:09:94:1b:
9a:90:cb:27:d9:d4:2c:39:41:bd:68:14:a1:39:5b:3f:b6:01:
f2:e7:34:21:7e:92:ff:0f:b6:7e:e2:09:2a:30:ec:35:97:fc:
8d:6a:a2:17:c4:09:9e:7c:19:2f:27:b6:e1:5f:f5:4b:67:5a:
0c:e9:c7:5d:55:20:e0:1e:aa:f3:91:c6:48:9b:d7:f7:c8:fb:
fc:4b:b0:da:94:53:84:35:2e:0e:3f:9c:fe:c7:8d:e0:9d:fe:
29:bc:39:5a:2e:65:4a:4f:f2:84:70:00:7f:01:b5:7e:49:2d:
ad:8c:cc:14:7e:27:27:44:99:7f:d3:81:57:d9:e3:b0:0b:2f:
41:6a:2e:cf:05:74:95:5c:99:bb:eb:38:8b:e7:2e:da:61:c2:
a0:9a:c5:fd:0c:cd:3f:e6:0c:69:c6:d3:96:e6:f9:22:89:b8:
c5:79:dc:6c:7f:b9:b4:77:c4:ec:c6:67:98:ad:74:65:7b:de:
5b:ce:9f:91:67:17:91:36:ba:c2:b6:35:68:8b:73:54:15:b4:
0e:0c:39:6d:fe:d3:39:26:35:2a:32:1d:44:6c:94:e0:cf:7a:
20:65:61:55
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICBakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzEwMTgw
MjU0MDlaFw0yNDEwMDgwMDE2MzNaMDMxMTAvBgNVBAMTKDQ2Qzg5REEyRjY3NjYx
QUJENjdCMjFEMzM1NjNGNkRDOUIwRjY5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2KCDBvDk/BbjynuTzRZWmzyEcN/i894jbtxL3LwrRYG0+H+r6
r+t6NX1xxExTN+Bj/WcEynuEm/g1AuzWAWBR3tT07OSC2QWTuaC/Eb/bbA20TIYL
nbsukPNoUgHWdcTtiboD/nFLXmG6NOlj6Pu+fhTit2srv/MCYPef8kzZQcJApQXe
HdT9DhH4A/rW8wSQOqfqRwd3vqusnth2yOs8c6lHjF/hXhOFYU1PLKnJnJKvQyOm
yY934FOlzc7jFaI8LaYbqJcJuq8eNSU/gzuvhdsDE81HKOjCLub5nj3Pd4Qxm9oh
V5v/Wq1k4KZkGNdp1fRDaEAqeXtPThAOVKgJAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQURsidovZ2YavWeyHTNWP23JsPaRQwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1JzaWRvdloyWWF2V2V5
SFROV1AyM0pzUGFSUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD
BAJ7YgADBAJ7YgwDBAJ7YkwDBAJ7YlQwDQYJKoZIhvcNAQELBQADggEBAIm82pYM
CFRSu0N/IEUG8PN+Gd6uWiYCg5nx/Y/cTfYYhwmUG5qQyyfZ1Cw5Qb1oFKE5Wz+2
AfLnNCF+kv8Ptn7iCSow7DWX/I1qohfECZ58GS8ntuFf9UtnWgzpx11VIOAeqvOR
xkib1/fI+/xLsNqUU4Q1Lg4/nP7HjeCd/im8OVouZUpP8oRwAH8BtX5JLa2MzBR+
JydEmX/TgVfZ47ALL0FqLs8FdJVcmbvrOIvnLtphwqCaxf0MzT/mDGnG05bm+SKJ
uMV53Gx/ubR3xOzGZ5itdGV73lvOn5FnF5E2usK2NWiLc1QVtA4MOW3+0zkmNSoy
HURslODPeiBlYVU=
Generated at Thu Oct 19 03:32:12 2023 by rpki-client on console-ams.rpki-client.org