Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Yw1aF_4I0B8NdyHFcHeuaCfcAx8.roa
File: Yw1aF_4I0B8NdyHFcHeuaCfcAx8.roa (raw, json)
Hash identifier: QU40WhC/51CC21O6xSVE5kr0afsfAeRVno6lEZp4kRA=
Subject key identifier: 63:0D:5A:17:FE:08:D0:1F:0D:77:21:C5:70:77:AE:68:27:DC:03:1F
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0CF0
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Yw1aF_4I0B8NdyHFcHeuaCfcAx8.roa
Signing time: Wed 18 Sep 2024 06:28:19 +0000
ROA not before: Wed 18 Sep 2024 06:28:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 18 06:28:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=630D5A17FE08D01F0D7721C57077AE6827DC031F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:dd:d9:a2:71:ed:a5:c0:0c:1e:6b:65:50:
df:54:cf:ea:74:11:19:0f:3c:f8:29:f9:ca:4a:22:
4c:2b:af:6c:12:5a:f2:3b:a8:84:fe:e4:87:f3:c5:
f5:2d:61:5b:75:cc:e4:06:07:36:8f:44:e2:d4:83:
30:a6:ee:ff:7f:cd:71:6b:ee:c6:d9:62:e3:08:dd:
c4:76:c6:97:dd:ec:b3:57:11:4a:61:b4:35:c2:ed:
94:72:a9:56:f4:75:5b:f0:a6:20:4f:11:e2:e0:90:
a7:37:a0:f2:30:68:6a:b2:2f:69:85:e9:04:b6:b8:
e3:6d:e4:22:8d:46:cd:1c:b9:c0:cb:c8:7e:d4:47:
ac:c0:3c:e2:38:85:19:6d:ec:e0:09:8a:92:a7:c2:
ff:e3:12:ef:2d:e6:66:d0:84:09:cd:a9:43:e6:db:
d7:32:4b:79:20:07:35:cc:d8:a6:13:8e:92:da:01:
a1:ba:3a:93:2e:2c:20:82:19:c8:75:1c:ff:64:e8:
14:f9:01:27:3b:4f:3d:e5:15:c8:65:c0:e2:cc:a2:
4d:94:9e:e4:4f:9a:70:18:f3:5b:92:10:d8:2b:82:
30:59:74:f9:9f:ad:d4:e7:15:2d:d1:81:0d:74:a9:
47:43:94:7c:ef:1f:ca:1a:55:36:db:11:c4:a5:36:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:5A:17:FE:08:D0:1F:0D:77:21:C5:70:77:AE:68:27:DC:03:1F
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Yw1aF_4I0B8NdyHFcHeuaCfcAx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.32.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f0:22:55:dc:ea:9e:c0:1e:a8:7a:50:ab:79:53:cd:42:77:
04:b2:a2:60:3f:fc:ce:cd:0d:ea:03:00:9f:82:1e:70:30:f1:
f8:d6:bc:0c:39:23:4b:d9:44:a7:8d:e3:f3:e0:bf:9d:02:33:
cb:51:10:71:09:35:79:13:c5:35:fc:49:96:dd:35:e1:91:ef:
d7:77:32:51:d8:33:a8:58:90:c2:b9:ff:9d:42:95:b8:91:ec:
47:ea:89:b1:76:46:c0:79:e3:29:36:69:64:6c:97:ca:72:cb:
fa:7a:3d:ba:a9:65:a6:90:d3:8b:c5:7d:ee:86:f7:fe:6b:7b:
ca:3b:43:d6:24:23:75:a5:3f:67:63:bc:cc:ba:09:28:27:ca:
63:f2:dc:86:aa:8f:09:19:b8:06:45:88:e1:d7:cb:76:0b:80:
be:27:43:50:cb:a0:77:ce:de:a9:71:4b:9a:e9:75:09:04:46:
66:0f:7e:cc:43:01:3c:ce:1a:cb:45:e6:69:a7:a5:64:27:f6:
c1:e6:41:bd:b4:98:93:fb:5e:83:43:15:25:db:e3:31:29:35:
d0:0d:fa:e6:ef:62:f5:07:ea:89:34:dc:53:d4:a3:2c:f0:82:
8c:1b:be:85:d9:14:0e:c5:36:8e:18:f4:4a:a2:a8:5a:05:66:
13:65:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org