Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/W6Y9EAQ5JSNUbk6b1iimVhZsSTI.roa
File: W6Y9EAQ5JSNUbk6b1iimVhZsSTI.roa (raw, json)
Hash identifier: 69ia1X+/aeTIjBP30Px1ZKjzQHQrrApMALNNfroTM2E=
Subject key identifier: 5B:A6:3D:10:04:39:25:23:54:6E:4E:9B:D6:28:A6:56:16:6C:49:32
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D53
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/W6Y9EAQ5JSNUbk6b1iimVhZsSTI.roa
Signing time: Thu 03 Oct 2024 15:01:40 +0000
ROA not before: Thu 03 Oct 2024 15:01:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:01:40 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5BA63D1004392523546E4E9BD628A656166C4932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:7c:4a:40:1f:1a:1d:dd:82:69:ff:6b:18:
92:24:6e:e7:9b:b8:05:c2:b1:8d:46:4c:8e:6e:ff:
f1:20:af:d7:7c:c3:4c:2a:3c:9a:81:ab:49:17:56:
e4:fc:3b:94:83:78:a6:64:3e:8b:03:82:21:bf:4a:
da:55:11:5d:1c:34:d6:d3:d0:49:a3:f0:70:e7:f9:
68:71:c5:51:b8:7c:fd:b2:1f:b8:a7:f9:6a:c6:6b:
74:70:bd:ed:61:f2:b8:28:b1:7a:8f:40:98:d2:99:
c8:62:f7:9c:a9:1e:e6:6e:a1:93:f1:fd:62:b0:0a:
12:2d:3a:8b:44:2a:33:50:5e:41:a3:f3:4f:f4:14:
3e:cd:b3:7f:bb:d0:de:04:57:e8:a0:a3:22:3e:e0:
72:0a:87:ad:1f:03:41:97:c7:65:e5:91:e8:b1:4d:
36:d4:2e:ae:d0:29:78:b7:88:08:a7:3b:36:47:d3:
f2:de:35:ae:5d:2d:27:48:f5:93:29:fe:dd:d9:ea:
58:a0:be:5c:fb:fe:f6:20:6c:99:7b:00:4d:e4:f6:
e4:f5:0a:47:5d:75:55:0e:84:03:a7:7d:c0:18:d8:
4a:f7:47:d0:03:76:f2:30:36:db:af:65:6f:cc:88:
63:a1:ea:06:de:c5:2e:44:af:5f:b2:2a:c6:7b:31:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:3D:10:04:39:25:23:54:6E:4E:9B:D6:28:A6:56:16:6C:49:32
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/W6Y9EAQ5JSNUbk6b1iimVhZsSTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:a6:a7:9a:cb:10:a8:00:92:2a:5d:86:6f:57:5a:a7:07:4a:
db:6d:13:81:68:7b:ee:14:34:77:10:fb:68:57:58:32:fd:ed:
3c:dc:22:64:15:34:e8:47:bb:ff:c1:95:2f:99:2a:bd:bf:e7:
ac:f5:52:51:52:8b:fb:de:30:a5:a0:0b:54:5a:db:a8:5b:4a:
d6:ab:ea:a3:09:ca:33:ee:f4:7b:12:f8:70:16:e7:c9:dc:8c:
68:50:43:ec:b8:36:6a:d0:59:5f:a3:92:94:d1:7d:f6:0b:d4:
2d:15:0d:26:28:5e:99:1d:d7:6b:dc:c3:82:b8:bd:60:9d:28:
62:91:21:bd:7b:5a:5a:21:6d:d0:35:64:88:7b:4c:9d:40:07:
91:d0:61:1d:bb:21:15:e1:af:3c:bd:ea:68:22:1e:04:c5:fc:
88:fe:a4:8f:95:1e:11:7e:a2:1f:58:f0:97:f1:07:ba:cf:ff:
b3:93:2a:92:03:b9:0a:b1:00:fa:d6:cd:c4:b9:07:02:a7:66:
c5:4a:86:57:4b:c8:f2:73:a6:41:47:e4:4e:b6:77:3c:4d:5c:
c8:2f:cf:94:9e:94:74:3b:59:63:3e:f5:e3:2a:63:7f:eb:c8:
37:93:77:fb:bd:aa:5e:90:b3:42:8f:4b:bf:18:64:0b:a4:d7:
32:31:0d:6a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDEwMDMx
NTAxNDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVCQTYzRDEwMDQzOTI1
MjM1NDZFNEU5QkQ2MjhBNjU2MTY2QzQ5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi/HxKQB8aHd2Caf9rGJIkbuebuAXCsY1GTI5u//Egr9d8w0wq
PJqBq0kXVuT8O5SDeKZkPosDgiG/StpVEV0cNNbT0Emj8HDn+WhxxVG4fP2yH7in
+WrGa3Rwve1h8rgosXqPQJjSmchi95ypHuZuoZPx/WKwChItOotEKjNQXkGj80/0
FD7Ns3+70N4EV+igoyI+4HIKh60fA0GXx2XlkeixTTbULq7QKXi3iAinOzZH0/Le
Na5dLSdI9ZMp/t3Z6ligvlz7/vYgbJl7AE3k9uT1CkdddVUOhAOnfcAY2Er3R9AD
dvIwNtuvZW/MiGOh6gbexS5Er1+yKsZ7MYQXAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUW6Y9EAQ5JSNUbk6b1iimVhZsSTIwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1c2WTlFQVE1SlNOVWJr
NmIxaWltVmhac1NUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ7YgAwDQYJKoZIhvcNAQELBQADggEBAJ6mp5rLEKgAkipdhm9XWqcHStttE4Fo
e+4UNHcQ+2hXWDL97TzcImQVNOhHu//BlS+ZKr2/56z1UlFSi/veMKWgC1Ra26hb
Star6qMJyjPu9HsS+HAW58ncjGhQQ+y4NmrQWV+jkpTRffYL1C0VDSYoXpkd12vc
w4K4vWCdKGKRIb17WlohbdA1ZIh7TJ1AB5HQYR27IRXhrzy96mgiHgTF/Ij+pI+V
HhF+oh9Y8JfxB7rP/7OTKpIDuQqxAPrWzcS5BwKnZsVKhldLyPJzpkFH5E62dzxN
XMgvz5SelHQ7WWM+9eMqY3/ryDeTd/u9ql6Qs0KPS78YZAuk1zIxDWo=
-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org