Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/TBLRaE0aYMvc_Q_ASPo68gxm2yY.roa
File: TBLRaE0aYMvc_Q_ASPo68gxm2yY.roa (raw, json)
Hash identifier: Es0m1KRPJYwVlyt+IiugXLCttOz9MzK2eVSUGYcoEfg=
Subject key identifier: 4C:12:D1:68:4D:1A:60:CB:DC:FD:0F:C0:48:FA:3A:F2:0C:66:DB:26
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D41
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/TBLRaE0aYMvc_Q_ASPo68gxm2yY.roa
Signing time: Thu 03 Oct 2024 14:50:34 +0000
ROA not before: Thu 03 Oct 2024 14:50:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:50:34 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C12D1684D1A60CBDCFD0FC048FA3AF20C66DB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:fb:48:c9:13:f9:72:fc:14:b0:f3:47:40:
fd:0b:f8:65:0f:4d:14:7e:86:6a:3a:bf:42:e1:0f:
ba:ab:6b:fa:16:a7:85:3f:b9:e7:e5:da:47:32:7f:
08:ca:4a:7c:bc:2e:e4:28:e5:fb:e5:48:36:b6:29:
0b:29:ed:b0:c1:0f:b1:24:85:67:6e:31:7b:8c:92:
0f:56:19:6a:db:d6:b2:8d:14:3b:b3:70:98:cd:c8:
a2:8e:3d:b7:14:dc:0b:08:b7:ce:53:a0:67:8b:2d:
a4:b8:8a:19:29:c0:e4:3f:7b:98:3a:1d:cb:4b:3f:
5f:dd:76:5b:ea:0c:b4:86:f2:fd:a7:87:67:04:20:
c9:8b:e7:63:a8:e8:7f:68:6b:e4:15:00:e6:9d:e3:
13:a7:67:c3:a9:0e:c9:2d:5f:03:70:ce:5b:0a:fe:
cd:84:02:3e:37:44:49:1f:33:b4:57:df:c2:e7:de:
a2:36:90:cd:4f:9e:72:f9:08:0a:9b:1c:fa:bc:b5:
fd:e3:a1:93:8e:ef:6f:23:bf:ef:95:e5:7d:08:a5:
0a:dc:ee:f5:1d:d2:1a:2e:9b:2e:59:c8:4c:d9:18:
ff:c6:05:22:27:46:63:b2:9b:5b:f9:84:42:fe:41:
68:37:5f:18:29:15:b8:eb:5d:cf:40:fb:4a:ea:a3:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:12:D1:68:4D:1A:60:CB:DC:FD:0F:C0:48:FA:3A:F2:0C:66:DB:26
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/TBLRaE0aYMvc_Q_ASPo68gxm2yY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:86:bf:82:c0:5a:d4:7e:6b:ee:ac:cc:d9:ca:2d:78:65:55:
08:87:f5:22:65:a2:3d:62:bf:14:00:a8:39:78:8c:0c:dc:55:
40:ed:d8:c1:a1:5a:99:b7:63:9e:af:90:2b:f8:5e:a7:a7:87:
4c:44:01:4e:b8:9c:4c:82:2d:19:3a:5f:88:97:2c:c2:d4:0e:
f9:bb:fe:b7:58:b0:59:01:25:fa:ad:98:e9:9c:66:4b:db:81:
87:33:80:da:1b:1b:00:42:08:c2:51:fe:e9:01:7e:9b:bf:fc:
a4:a2:bc:f4:eb:3a:26:66:00:bb:51:1f:15:39:d4:39:37:b9:
32:4e:30:42:88:e6:78:89:a8:73:f9:31:65:17:3b:46:ec:9a:
29:e1:99:4e:aa:f9:1a:43:76:f0:0a:72:92:5d:0c:c8:38:a3:
cd:37:e9:f0:e2:32:ef:5d:21:29:59:cb:ad:1b:a7:2a:b9:1e:
33:ca:4f:c1:dd:fe:02:72:df:9e:19:40:aa:5a:0f:70:cd:73:
be:2a:2b:f3:28:e5:7a:6b:e0:9b:51:74:4e:00:77:ca:12:68:
43:2d:f8:14:27:27:79:0e:a7:c7:6b:e6:23:71:79:34:d3:9c:
50:42:4c:70:af:8a:1f:90:a3:e6:09:7f:30:0b:2a:60:b4:96:
57:e4:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org