Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/VsYoGcutUgA3iz_b7sDWjCPjfGg.roa
File: VsYoGcutUgA3iz_b7sDWjCPjfGg.roa (raw, json)
Hash identifier: C5hqEtQtVQIV1y/EKzn9wiAbgNQVZv8Xxrcw5IbbA0I=
Subject key identifier: 56:C6:28:19:CB:AD:52:00:37:8B:3F:DB:EE:C0:D6:8C:23:E3:7C:68
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D4F
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VsYoGcutUgA3iz_b7sDWjCPjfGg.roa
Signing time: Thu 03 Oct 2024 14:53:41 +0000
ROA not before: Thu 03 Oct 2024 14:53:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:53:41 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=56C62819CBAD5200378B3FDBEEC0D68C23E37C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:25:52:97:06:e9:f5:4b:df:d5:ab:39:45:
88:4a:1d:f7:e8:2a:45:80:2c:59:83:0c:e8:b9:d5:
0c:cd:08:78:f7:f1:d3:40:97:7b:d8:0e:4e:10:05:
1e:e2:76:c3:4d:8c:e2:af:56:fb:04:b2:98:fe:c7:
ac:47:46:dc:a5:7a:e1:aa:07:85:00:d6:f5:87:17:
ea:93:18:2e:e8:ea:61:c7:69:2e:82:d4:cc:4e:3f:
c6:de:35:07:82:a5:2d:69:e7:26:7a:3a:99:c3:ce:
b9:0a:a4:da:c3:0e:a8:e7:28:34:2c:4a:44:53:e5:
74:fc:3d:51:e5:81:20:44:af:ac:d5:97:0f:c3:cf:
e5:ee:5c:5d:cd:af:ef:1b:1e:4e:88:5f:dd:f3:e8:
4c:8f:c1:5e:75:92:65:99:c3:db:e2:16:3d:36:1d:
1f:e7:66:cd:18:6e:e7:a4:12:00:97:5b:1b:11:ce:
b6:1e:aa:bf:dd:32:3f:af:6e:68:71:9a:04:ab:66:
94:d8:1e:f6:f1:71:f1:e8:3b:e0:a6:77:29:db:dd:
2f:53:6a:7a:f0:c4:25:73:2e:e1:e8:01:9a:79:11:
fd:de:f3:6f:00:a6:4f:1f:d3:d1:15:ef:3a:bc:5e:
c0:89:c1:76:9a:87:04:89:88:4e:42:7a:13:f2:cf:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:28:19:CB:AD:52:00:37:8B:3F:DB:EE:C0:D6:8C:23:E3:7C:68
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/VsYoGcutUgA3iz_b7sDWjCPjfGg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.72.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:f6:dc:62:93:9b:c4:0f:c5:04:5b:ec:3d:78:39:bc:8f:24:
85:13:f5:01:6c:85:60:55:e8:bc:fb:be:c9:da:d3:5f:69:49:
db:3d:7d:c0:a7:b6:d5:9b:d3:b0:55:46:63:69:5c:64:31:09:
56:e0:90:c8:ea:da:51:6f:f0:15:e2:20:8a:d3:13:39:b7:69:
7c:fa:79:ea:fc:ff:e7:5a:6f:99:47:48:76:03:3b:8e:cd:1d:
e0:01:8d:f3:63:1c:bd:c4:a4:ed:16:49:44:f3:e7:ca:05:57:
fb:39:6b:92:44:c2:b0:35:bd:df:1b:35:14:9f:00:0b:af:7a:
de:f0:00:0c:88:66:32:70:25:36:89:74:20:c5:d9:63:a4:37:
96:b3:da:2c:c0:c2:15:69:27:c7:e3:54:57:1d:27:3b:a5:da:
99:60:09:e5:08:52:61:1f:90:b1:ed:71:7a:9f:8e:8b:8a:e6:
cd:36:e3:7e:c7:c7:2f:97:a8:7f:55:ec:e2:99:e0:b6:23:48:
bf:ce:46:63:1f:3d:ba:19:b6:38:b0:04:06:16:16:be:69:af:
3b:ca:ff:bf:fd:03:9c:0d:bd:7e:ac:28:a7:84:e8:71:6a:06:
11:58:9d:c8:65:c1:d9:2f:57:82:90:c5:4b:68:89:f0:a1:1f:
75:53:58:c2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDEwMDMx
NDUzNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU2QzYyODE5Q0JBRDUy
MDAzNzhCM0ZEQkVFQzBENjhDMjNFMzdDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHwiVSlwbp9Uvf1as5RYhKHffoKkWALFmDDOi51QzNCHj38dNA
l3vYDk4QBR7idsNNjOKvVvsEspj+x6xHRtyleuGqB4UA1vWHF+qTGC7o6mHHaS6C
1MxOP8beNQeCpS1p5yZ6OpnDzrkKpNrDDqjnKDQsSkRT5XT8PVHlgSBEr6zVlw/D
z+XuXF3Nr+8bHk6IX93z6EyPwV51kmWZw9viFj02HR/nZs0YbuekEgCXWxsRzrYe
qr/dMj+vbmhxmgSrZpTYHvbxcfHoO+Cmdynb3S9TanrwxCVzLuHoAZp5Ef3e828A
pk8f09EV7zq8XsCJwXaahwSJiE5CehPyzwPVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUVsYoGcutUgA3iz/b7sDWjCPjfGgwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1ZzWW9HY3V0VWdBM2l6
X2I3c0RXakNQamZHZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlUgwDQYJKoZIhvcNAQELBQADggEBAMn23GKTm8QPxQRb7D14ObyPJIUT9QFs
hWBV6Lz7vsna019pSds9fcCnttWb07BVRmNpXGQxCVbgkMjq2lFv8BXiIIrTEzm3
aXz6eer8/+dab5lHSHYDO47NHeABjfNjHL3EpO0WSUTz58oFV/s5a5JEwrA1vd8b
NRSfAAuvet7wAAyIZjJwJTaJdCDF2WOkN5az2izAwhVpJ8fjVFcdJzul2plgCeUI
UmEfkLHtcXqfjouK5s02437Hxy+XqH9V7OKZ4LYjSL/ORmMfPboZtjiwBAYWFr5p
rzvK/7/9A5wNvX6sKKeE6HFqBhFYnchlwdkvV4KQxUtoifChH3VTWMI=
-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org