Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/_Le4VHuDMVgS6FvSDEVVCnawdHE.roa
File: _Le4VHuDMVgS6FvSDEVVCnawdHE.roa (raw, json)
Hash identifier: Qg/zGtkYp4ZulHBAHCtdiVOaC5GNOPE/AbBnW84Tb7c=
Subject key identifier: FC:B7:B8:54:7B:83:31:58:12:E8:5B:D2:0C:45:55:0A:76:B0:74:71
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 047D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/_Le4VHuDMVgS6FvSDEVVCnawdHE.roa
Signing time: Fri 01 Sep 2023 06:03:51 +0000
ROA not before: Fri 01 Sep 2023 06:03:51 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/23 maxlen: 24
210.79.70.0/24 maxlen: 24
210.79.71.0/24 maxlen: 24
210.79.77.0/24 maxlen: 24
210.79.89.0/24 maxlen: 24
210.79.90.0/24 maxlen: 24
210.79.91.0/24 maxlen: 24
210.79.101.0/24 maxlen: 24
210.79.112.0/24 maxlen: 24
210.79.114.0/24 maxlen: 24
210.79.115.0/24 maxlen: 24
211.149.32.0/22 maxlen: 24
211.149.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 06:03:51 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=FCB7B8547B83315812E85BD20C45550A76B07471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:9d:0b:d3:2f:30:b5:0a:a3:be:b0:e9:4e:
91:ae:8a:18:b5:98:a1:e2:01:6f:b1:e6:24:68:ed:
b9:80:55:a7:ab:cf:7e:3d:87:de:e6:32:7e:8e:7a:
58:bb:b4:c6:fe:70:27:58:26:1c:42:f3:9c:dc:fe:
bf:ee:52:ed:a2:09:20:75:02:11:c5:3b:59:25:a7:
40:30:6b:59:42:f1:03:31:31:d0:ae:88:d3:ba:3c:
60:a2:bd:d5:76:6e:af:d1:6f:7f:e2:a1:c5:9f:e4:
94:cd:77:31:d9:e8:8c:95:99:1c:9c:e6:5f:04:1e:
05:dd:9c:85:d5:72:74:91:cc:f4:04:fa:8d:99:cd:
d8:ec:d0:b2:bf:9a:a0:dd:2a:3d:f6:29:84:da:dc:
e4:db:d0:ae:8d:c0:95:56:b3:b3:2f:94:6a:41:1b:
7d:82:ca:fd:8b:7f:15:45:1c:82:fc:3d:0f:20:9e:
c0:53:fb:8d:b3:a2:49:22:42:03:77:28:cf:0c:74:
f1:7f:a5:b9:6c:8c:dc:d3:f1:da:41:6a:bf:4c:b3:
4b:91:c3:f7:7e:96:d5:60:a7:97:01:1b:5f:b9:96:
fe:25:33:dc:42:c4:e4:b1:0b:16:8c:2e:92:cf:d7:
ab:39:52:43:9a:b8:2f:f1:9f:74:54:ba:96:7a:6d:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:B8:54:7B:83:31:58:12:E8:5B:D2:0C:45:55:0A:76:B0:74:71
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/_Le4VHuDMVgS6FvSDEVVCnawdHE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0/22
210.79.77.0/24
210.79.89.0-210.79.91.255
210.79.101.0/24
210.79.112.0/24
210.79.114.0/23
211.149.32.0/22
211.149.48.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:84:86:08:8c:a9:cc:e0:34:04:23:64:7b:1a:14:e1:c6:ae:
94:9b:30:61:9b:1b:10:f6:e5:40:08:3c:73:67:d0:75:cb:8a:
57:ca:ae:84:dd:35:60:5b:d3:60:a3:9f:3b:02:4b:b3:16:61:
2c:07:b4:99:29:c4:83:36:09:1e:b6:23:69:a8:34:8c:95:92:
c7:dc:e8:e5:6b:c1:ff:f1:45:6a:2e:38:e9:6c:57:88:72:ab:
9f:ce:16:1d:a1:80:9f:c0:0c:ac:8d:f3:42:2b:d0:14:7f:ed:
cf:f1:b7:23:95:ff:eb:fe:c6:3a:74:aa:ce:ef:bd:f1:80:89:
c0:19:33:61:94:f8:db:a1:57:49:4a:e8:db:68:75:eb:28:5a:
96:8f:d2:2c:ec:85:53:c1:30:ae:77:0c:0f:4f:49:8f:f3:2e:
38:ff:07:27:4f:bc:09:3b:4d:68:9b:91:1b:e9:14:d6:c1:00:
de:28:83:15:75:d8:ba:91:9e:b3:14:2b:0d:6c:e7:c6:3f:65:
e5:cb:9e:aa:45:7a:d1:69:ba:4a:08:fd:0f:56:a9:d4:eb:96:
79:e0:44:d5:ff:54:f7:65:7f:4e:f1:1f:f5:ce:17:4d:27:03:
be:9d:fb:5c:e4:00:4a:aa:96:5a:5e:dd:3a:bf:75:b2:cd:67:
bd:d6:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 16:43:44 2023 by rpki-client on console-ams.rpki-client.org