Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/TsZxiJJ4-Cii15-2TuB6cNUCk1U.roa
File: TsZxiJJ4-Cii15-2TuB6cNUCk1U.roa (raw, json)
Hash identifier: ZmSIbgV6huXMVaDlt1jKdMuM28YBIMNiwMz8hdWXPAg=
Subject key identifier: 4E:C6:71:88:92:78:F8:28:A2:D7:9F:B6:4E:E0:7A:70:D5:02:93:55
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C8B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/TsZxiJJ4-Cii15-2TuB6cNUCk1U.roa
Signing time: Sun 01 Sep 2024 11:38:37 +0000
ROA not before: Sun 01 Sep 2024 11:38:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:38:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4EC671889278F828A2D79FB64EE07A70D5029355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:a5:e8:10:56:25:98:ea:ef:a8:28:3e:63:
d9:b2:84:05:8c:fe:8d:12:92:57:0d:76:0d:f4:4f:
19:e0:1c:4a:c4:69:3b:e6:13:16:84:07:48:a5:4f:
42:c8:96:8d:95:cc:1d:62:c5:c5:1c:36:94:af:b3:
2a:d8:b0:61:bc:9f:b0:13:d5:23:bd:fd:ef:0d:31:
f2:4e:e4:20:d9:5d:c0:f3:da:83:e8:b4:94:86:b3:
e5:d8:8f:e9:71:f9:29:70:be:28:84:30:8d:e6:ce:
a6:f8:15:1b:1b:d5:7b:6a:56:49:69:a2:6c:39:7b:
fa:fb:19:5d:f1:1c:24:1f:6d:fc:8b:a4:c6:69:89:
85:97:1a:cf:4a:70:79:59:db:91:2a:6c:5e:b4:0b:
ed:26:2f:0a:16:6f:76:f6:8e:e3:7d:cb:7a:ab:f7:
88:f4:73:a5:65:a6:b5:a8:b6:3c:44:97:10:8f:62:
21:7c:2c:fd:7d:24:ac:f8:3e:56:e8:28:85:72:ce:
f9:e6:04:b4:36:1e:e7:86:da:b8:4e:b0:a2:1d:3f:
b9:aa:3c:fe:38:18:5e:8d:40:d3:e7:2e:db:a4:8e:
e4:44:2a:f5:b0:ba:31:0d:76:6a:26:40:fd:9a:93:
66:ac:4d:97:f1:f1:f4:a4:16:b4:53:89:21:2d:6c:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:71:88:92:78:F8:28:A2:D7:9F:B6:4E:E0:7A:70:D5:02:93:55
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/TsZxiJJ4-Cii15-2TuB6cNUCk1U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:23:fe:17:f8:b8:61:b1:05:97:12:a5:38:3a:ca:ea:67:d4:
d0:10:23:11:cb:26:ee:db:cd:a7:19:9c:fc:3b:d5:ea:12:2f:
0c:47:41:a1:f2:8d:3f:4f:4f:a1:9b:e6:29:27:11:17:7a:a2:
f3:df:ba:ff:48:78:3f:46:47:5b:af:cf:62:84:68:95:5c:e2:
f4:ed:60:f5:d2:98:c4:94:2b:00:10:5d:c7:d7:bd:7d:db:89:
54:0e:32:c0:21:f8:31:91:e2:3a:e8:47:26:9e:46:0a:95:1f:
b6:e6:4e:ce:cc:1a:d2:a9:87:b4:b1:a2:aa:73:97:8f:7f:fe:
3f:e5:35:94:30:83:90:04:50:49:49:ad:8b:8f:42:4e:3c:93:
55:f0:38:ce:bd:21:91:28:06:e3:56:1e:d8:7e:a6:2a:9b:86:
5a:1a:7f:02:a0:9c:9f:39:e6:92:42:00:82:ee:e1:95:0e:cf:
05:e3:db:3e:29:3b:4d:9e:b7:a0:e2:7d:0b:f7:a6:c3:3b:ec:
40:d3:b4:d9:f5:01:da:d6:8c:8b:25:cd:1a:a1:e7:15:08:1d:
00:b6:51:8a:87:97:54:ee:88:a9:d4:f5:e3:e7:e9:59:de:72:
bd:0f:de:6a:6d:b5:b1:aa:65:a1:5d:8d:f4:e5:ab:8d:c8:e0:
b6:c7:1c:d8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA5MDEx
MTM4MzdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRFQzY3MTg4OTI3OEY4
MjhBMkQ3OUZCNjRFRTA3QTcwRDUwMjkzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTCaXoEFYlmOrvqCg+Y9myhAWM/o0SklcNdg30TxngHErEaTvm
ExaEB0ilT0LIlo2VzB1ixcUcNpSvsyrYsGG8n7AT1SO9/e8NMfJO5CDZXcDz2oPo
tJSGs+XYj+lx+SlwviiEMI3mzqb4FRsb1XtqVklpomw5e/r7GV3xHCQfbfyLpMZp
iYWXGs9KcHlZ25EqbF60C+0mLwoWb3b2juN9y3qr94j0c6VlprWotjxElxCPYiF8
LP19JKz4PlboKIVyzvnmBLQ2HueG2rhOsKIdP7mqPP44GF6NQNPnLtukjuREKvWw
ujENdmomQP2ak2asTZfx8fSkFrRTiSEtbAjJAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUTsZxiJJ4+Cii15+2TuB6cNUCk1UwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1RzWnhpSko0LUNpaTE1
LTJUdUI2Y05VQ2sxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlVgwDQYJKoZIhvcNAQELBQADggEBADsj/hf4uGGxBZcSpTg6yupn1NAQIxHL
Ju7bzacZnPw71eoSLwxHQaHyjT9PT6Gb5iknERd6ovPfuv9IeD9GR1uvz2KEaJVc
4vTtYPXSmMSUKwAQXcfXvX3biVQOMsAh+DGR4jroRyaeRgqVH7bmTs7MGtKph7Sx
oqpzl49//j/lNZQwg5AEUElJrYuPQk48k1XwOM69IZEoBuNWHth+piqbhloafwKg
nJ855pJCAILu4ZUOzwXj2z4pO02et6DifQv3psM77EDTtNn1AdrWjIslzRqh5xUI
HQC2UYqHl1TuiKnU9ePn6Vnecr0P3mpttbGqZaFdjfTlq43I4LbHHNg=
-----END CERTIFICATE-----
Generated at Thu Sep 5 16:58:40 2024 by rpki-client on console-ams.rpki-client.org