Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ZjyaBtFuQSIKYTwfMPJJdC0g58k.roa
File: ZjyaBtFuQSIKYTwfMPJJdC0g58k.roa (raw, json)
Hash identifier: f55kbIxVS8DRszpGIWIBPMtMp+K2LpItmOUpv6DtQrs=
Subject key identifier: 66:3C:9A:06:D1:6E:41:22:0A:61:3C:1F:30:F2:49:74:2D:20:E7:C9
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C85
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZjyaBtFuQSIKYTwfMPJJdC0g58k.roa
Signing time: Sun 01 Sep 2024 11:37:55 +0000
ROA not before: Sun 01 Sep 2024 11:37:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:37:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=663C9A06D16E41220A613C1F30F249742D20E7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:49:c1:4c:92:71:8d:f0:8a:bc:34:80:38:
d2:3e:da:a0:8f:4a:14:6a:f8:1b:8e:96:49:cd:a0:
80:2f:f2:0f:06:8e:81:4d:21:d6:29:1d:dc:cc:59:
05:c1:55:b2:53:14:75:63:f2:ae:3c:d0:fc:ab:6d:
29:9e:1c:99:c2:bb:78:90:ba:74:00:0e:5f:77:df:
3b:3c:d1:87:fc:a2:79:82:93:ec:8b:9e:f9:32:0f:
06:02:e9:12:8e:3f:73:61:53:1e:eb:b9:97:a6:80:
61:91:47:9c:4b:3e:58:c4:45:e1:d3:56:34:18:79:
9f:e1:87:33:fb:19:23:90:a3:3e:44:05:a7:ba:4a:
b1:31:22:d0:5a:12:1f:b6:d3:cc:a3:b5:a8:a2:56:
2e:57:3c:6f:93:c6:9f:61:aa:53:0b:b1:c8:d0:15:
b5:32:4d:49:7e:7f:8e:5d:e2:36:cb:16:03:13:3e:
30:ba:30:e4:e5:10:62:b7:e5:8b:87:18:1a:ba:60:
49:04:81:6a:3a:90:f2:85:57:3d:c5:7c:87:26:cf:
19:ff:d9:30:fe:12:31:4d:de:8e:d6:3b:b5:8d:7c:
f2:96:71:f4:02:df:ec:75:53:17:b1:48:06:20:53:
61:82:ac:40:c4:d1:a8:86:bf:fc:07:63:37:e4:bb:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:9A:06:D1:6E:41:22:0A:61:3C:1F:30:F2:49:74:2D:20:E7:C9
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZjyaBtFuQSIKYTwfMPJJdC0g58k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:90:71:a9:38:9e:d4:7a:24:c5:bd:27:02:f6:d6:c0:8f:ce:
36:2e:76:a3:88:a1:75:0b:ee:87:f8:b6:0d:8c:18:cf:2b:9b:
dd:9f:d6:74:da:83:0f:29:64:89:df:4d:60:15:61:a8:8d:c2:
9c:8d:21:78:17:45:45:63:07:24:25:a8:42:4c:f7:4b:19:4e:
46:81:aa:ff:23:b4:af:fd:47:59:a2:29:02:8b:f4:85:41:0e:
77:2b:4e:7b:69:96:d0:e5:66:af:ee:fc:be:7d:7f:15:f8:55:
f3:87:b2:67:11:bd:19:a0:46:42:ed:14:7c:9c:70:06:d4:4a:
7e:11:45:94:01:96:0c:69:60:37:39:a9:ef:c3:60:fc:5d:43:
d8:99:e2:a3:45:1e:91:71:bd:2e:2c:7a:a6:6d:99:b5:16:bc:
14:65:3d:d2:e0:83:b3:c4:52:d5:cf:bb:d9:be:a1:45:a2:14:
80:9c:83:00:e1:ed:8e:58:b5:a1:e8:dd:07:82:42:2b:94:23:
89:b7:bd:f5:4b:76:49:03:0c:e7:a7:94:b6:73:04:68:3b:c4:
2c:e8:51:30:db:49:6f:21:b1:fc:b7:70:38:04:1b:63:2d:34:
a6:54:29:ae:93:1c:7f:cc:5c:65:d4:93:ef:c5:01:97:b5:b1:
c4:82:56:2c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDA5MDEx
MTM3NTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY2M0M5QTA2RDE2RTQx
MjIwQTYxM0MxRjMwRjI0OTc0MkQyMEU3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJgknBTJJxjfCKvDSAONI+2qCPShRq+BuOlknNoIAv8g8GjoFN
IdYpHdzMWQXBVbJTFHVj8q480PyrbSmeHJnCu3iQunQADl933zs80Yf8onmCk+yL
nvkyDwYC6RKOP3NhUx7ruZemgGGRR5xLPljEReHTVjQYeZ/hhzP7GSOQoz5EBae6
SrExItBaEh+208yjtaiiVi5XPG+Txp9hqlMLscjQFbUyTUl+f45d4jbLFgMTPjC6
MOTlEGK35YuHGBq6YEkEgWo6kPKFVz3FfIcmzxn/2TD+EjFN3o7WO7WNfPKWcfQC
3+x1UxexSAYgU2GCrEDE0aiGv/wHYzfkuxbdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZjyaBtFuQSIKYTwfMPJJdC0g58kwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1pqeWFCdEZ1UVNJS1lU
d2ZNUEpKZEMwZzU4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlUgwDQYJKoZIhvcNAQELBQADggEBAMqQcak4ntR6JMW9JwL21sCPzjYudqOI
oXUL7of4tg2MGM8rm92f1nTagw8pZInfTWAVYaiNwpyNIXgXRUVjByQlqEJM90sZ
TkaBqv8jtK/9R1miKQKL9IVBDncrTntpltDlZq/u/L59fxX4VfOHsmcRvRmgRkLt
FHyccAbUSn4RRZQBlgxpYDc5qe/DYPxdQ9iZ4qNFHpFxvS4seqZtmbUWvBRlPdLg
g7PEUtXPu9m+oUWiFICcgwDh7Y5YtaHo3QeCQiuUI4m3vfVLdkkDDOenlLZzBGg7
xCzoUTDbSW8hsfy3cDgEG2MtNKZUKa6THH/MXGXUk+/FAZe1scSCViw=
-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:43 2024 by rpki-client on console-fra.rpki-client.org