Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/SWexlz3YqDBiE2fF_vEK5hqnDdo.roa
File: SWexlz3YqDBiE2fF_vEK5hqnDdo.roa (raw, json)
Hash identifier: L8RH0IayeuPmaiMKCVt5Uq7hU//bWnvAaRYtGhp1uBQ=
Subject key identifier: 49:67:B1:97:3D:D8:A8:30:62:13:67:C5:FE:F1:0A:E6:1A:A7:0D:DA
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D59
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/SWexlz3YqDBiE2fF_vEK5hqnDdo.roa
Signing time: Thu 03 Oct 2024 15:03:54 +0000
ROA not before: Thu 03 Oct 2024 15:03:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:03:54 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4967B1973DD8A830621367C5FEF10AE61AA70DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:96:11:a2:dd:c2:b7:c0:72:f2:05:42:ad:
f1:4a:96:11:fb:57:e1:13:c3:68:0f:80:f1:f9:4c:
8a:34:59:1d:11:78:f8:0b:e3:9b:d2:5b:f6:d3:b6:
37:68:63:7c:4d:3e:88:5b:47:5f:85:83:07:91:69:
2c:85:53:25:9a:74:e3:d9:eb:e4:26:d4:26:c9:29:
a0:62:18:d7:c4:0b:80:5f:84:fc:a9:8b:2b:69:84:
54:b5:5d:33:2f:52:5b:91:c9:9d:fc:92:b3:60:01:
15:8b:8c:f7:c2:84:7d:cf:06:e0:c7:0f:6f:44:6b:
8e:78:cf:1b:3c:2b:18:23:0b:cf:c3:d7:5f:07:4e:
24:36:b4:27:91:6f:05:0c:1d:8c:34:e2:e1:94:90:
9a:81:d3:f2:4f:1a:51:2c:90:e6:12:41:de:b4:c1:
68:fe:54:c1:ae:2c:c8:d8:11:1b:6b:1d:6b:ac:dc:
93:77:8c:f2:e3:0e:c2:44:d9:ea:0b:6a:21:c6:95:
3e:f7:56:66:12:09:31:7b:5f:8e:61:34:6e:6a:30:
be:42:db:ea:f1:28:c1:00:25:dc:a1:1d:c9:b1:18:
1b:9f:a0:36:08:c0:f1:c2:e3:84:48:22:2d:07:3d:
08:6c:0b:2b:f2:91:80:4d:d6:12:8c:93:b9:a5:c3:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:67:B1:97:3D:D8:A8:30:62:13:67:C5:FE:F1:0A:E6:1A:A7:0D:DA
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/SWexlz3YqDBiE2fF_vEK5hqnDdo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:12:36:a1:2b:ec:bd:d3:41:d8:7f:af:d8:e1:d5:5e:40:eb:
ac:34:5a:ea:de:39:b6:7a:90:49:5d:5f:08:c6:0d:dc:b1:85:
21:d7:0e:e8:e2:30:20:32:18:6e:c6:5f:35:08:e2:11:7f:c5:
4b:35:19:8c:6a:51:cd:b7:14:b7:27:d1:2e:d4:87:7e:11:ba:
01:7b:4b:ae:5b:72:f4:e2:2b:6c:26:af:ee:91:5d:cc:62:32:
b9:68:d5:7c:dd:61:6f:35:e8:cb:34:89:44:7b:2c:10:6c:ee:
8a:c8:52:d8:72:2f:df:10:9b:aa:2d:2c:b7:d7:69:8f:99:ff:
f7:f4:ba:9b:06:09:44:16:f9:ac:2b:76:24:d7:e6:99:f5:c3:
1c:aa:cd:47:1f:38:ad:d9:4a:13:eb:67:66:d2:78:84:63:92:
3c:6c:cf:ae:23:83:54:7f:13:0f:01:78:17:ef:c5:cf:71:9c:
d9:61:26:3d:12:47:60:d5:14:a7:2a:4a:cb:40:aa:b8:01:c6:
01:27:ff:7c:24:4d:97:a1:07:56:49:a8:c6:e0:63:f7:68:ce:
0e:9e:af:9e:b6:4a:b8:76:9b:3b:8d:4d:76:77:61:bd:e3:28:
f5:b7:61:ab:a4:d5:dc:0a:df:b0:90:a0:41:d0:53:33:29:8c:
91:bd:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org