Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Y_5YgXIb-5JNUYo4dPWyda-zkXk.roa
File: Y_5YgXIb-5JNUYo4dPWyda-zkXk.roa (raw, json)
Hash identifier: 9flsxP8T7cJK0XTgPx7FKZGkZ2Fvvto3ZScsk73BgeA=
Subject key identifier: 63:FE:58:81:72:1B:FB:92:4D:51:8A:38:74:F5:B2:75:AF:B3:91:79
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0B24
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y_5YgXIb-5JNUYo4dPWyda-zkXk.roa
Signing time: Tue 02 Jul 2024 14:09:12 +0000
ROA not before: Tue 02 Jul 2024 14:09:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 119.59.196.0/22 maxlen: 24
119.59.200.0/22 maxlen: 24
119.59.212.0/22 maxlen: 24
119.59.224.0/22 maxlen: 24
119.59.228.0/22 maxlen: 24
119.59.232.0/22 maxlen: 24
119.59.240.0/22 maxlen: 24
119.59.244.0/22 maxlen: 24
119.59.248.0/22 maxlen: 24
119.59.252.0/22 maxlen: 24
123.98.24.0/22 maxlen: 24
123.98.36.0/22 maxlen: 24
123.98.52.0/22 maxlen: 24
123.98.92.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 08:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jul 2 14:09:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63FE5881721BFB924D518A3874F5B275AFB39179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:52:32:37:40:0c:db:e7:d8:38:80:bb:31:
c2:8f:36:9f:79:7a:85:3e:94:80:5d:7b:c1:d6:93:
b3:c1:18:7d:85:ae:ea:19:2f:63:16:bf:0a:db:f5:
55:15:5e:15:20:5f:73:ba:37:72:c9:4c:7f:03:61:
de:76:0c:62:ca:04:b2:05:59:fb:df:2f:98:49:1e:
3e:7c:d0:67:a2:ba:ba:ad:e4:3a:80:65:3b:60:57:
a8:28:38:bd:7e:0c:9b:59:bb:f0:95:85:c1:9b:90:
89:d4:1c:ec:f9:11:45:61:30:e3:b3:08:1b:f1:e3:
10:1a:20:ec:c7:e6:0d:4e:a4:ca:1b:60:36:df:0c:
6c:c3:f4:74:f6:f2:19:31:35:cd:19:91:0c:d3:bf:
e9:6f:a7:65:2b:41:30:94:36:b1:37:16:de:43:4f:
16:ab:ba:e0:d5:2d:6b:9f:42:34:72:ba:a3:66:b5:
3b:84:2f:a8:b2:98:60:f1:4f:80:5a:ed:f0:92:2a:
32:35:e7:a5:5d:57:3b:07:05:77:08:87:b9:5b:40:
fc:0f:66:8f:5a:b6:32:32:6e:22:94:cc:86:25:ed:
4e:90:70:91:6d:58:c6:80:56:1a:ce:b5:96:b0:94:
d1:38:a0:85:e0:d7:51:51:e4:b1:7a:17:c4:44:16:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:58:81:72:1B:FB:92:4D:51:8A:38:74:F5:B2:75:AF:B3:91:79
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y_5YgXIb-5JNUYo4dPWyda-zkXk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.196.0-119.59.203.255
119.59.212.0/22
119.59.224.0-119.59.235.255
119.59.240.0/20
123.98.24.0/22
123.98.36.0/22
123.98.52.0/22
123.98.92.0/22
211.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:cb:9d:c5:97:a7:e7:9c:47:28:68:3f:b1:65:2e:c5:9e:1e:
fb:e9:db:35:9c:2a:8e:ff:12:71:c7:80:dd:70:00:68:79:4c:
72:d8:cc:af:e5:bf:fa:a5:1d:46:39:9d:9e:23:61:97:17:cc:
3b:d5:ba:19:41:26:6d:de:7a:f9:dd:26:c0:b7:db:a8:06:2f:
6f:70:07:b8:63:e6:42:40:8e:9f:0c:78:d9:7c:02:36:8b:75:
52:2d:d8:f9:ba:67:5c:9f:9d:01:1c:bf:11:2e:3d:14:7d:7b:
d8:df:65:97:de:7a:ff:b9:2f:00:f2:a5:39:7f:58:36:d4:56:
8d:77:44:31:ab:cf:80:0b:a5:02:f4:ba:4e:98:d7:2f:32:7e:
1f:1f:66:16:5d:fc:ed:2f:35:45:ef:54:63:6d:6c:35:29:18:
c0:c1:66:8a:28:b8:90:ce:4d:b7:e0:4a:7e:1b:16:12:95:cc:
21:6c:07:be:75:3b:ff:62:57:de:9c:c6:ee:4d:cb:86:b8:cd:
ea:a8:5f:1e:57:d8:c8:f3:6b:42:fb:34:18:44:28:21:39:a7:
f8:b4:fe:51:12:0a:f3:6d:8c:73:82:e1:8a:f2:22:ae:fe:e3:
64:53:93:d0:3b:c0:ad:cf:d5:c7:40:d3:1d:28:f6:b1:bd:04:
38:a6:77:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 11:56:58 2024 by rpki-client on console-fra.rpki-client.org