Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ahtITkzkyabrKEn1S7t056rSFKg.roa
File: ahtITkzkyabrKEn1S7t056rSFKg.roa (raw, json)
Hash identifier: NURjxMYmPyOmfGevj/TOonDSJc2ijLfPjC8qaYeRsdM=
Subject key identifier: 6A:1B:48:4E:4C:E4:C9:A6:EB:28:49:F5:4B:BB:74:E7:AA:D2:14:A8
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D51
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ahtITkzkyabrKEn1S7t056rSFKg.roa
Signing time: Thu 03 Oct 2024 14:54:02 +0000
ROA not before: Thu 03 Oct 2024 14:54:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3409 (0xd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:54:02 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6A1B484E4CE4C9A6EB2849F54BBB74E7AAD214A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:e6:70:c1:9c:7e:28:b2:4e:8c:6c:96:3a:
f7:22:82:e2:5a:b3:ff:44:04:d4:e7:52:33:ee:08:
1a:96:2a:d6:f9:b3:b9:f7:b6:cd:6f:7d:e6:7c:da:
ac:3c:fb:e1:5b:00:b6:d9:bb:96:1a:ca:3c:33:f8:
a8:23:64:23:60:0d:d7:90:c2:cc:22:21:e6:95:06:
55:87:45:0f:e4:dd:df:22:a0:48:87:9e:ea:f4:35:
f8:d0:36:20:a8:33:b6:a8:e9:52:bd:13:95:48:65:
7d:61:6d:17:c6:c9:65:5f:96:f0:3a:fa:16:c4:16:
90:5c:e0:08:ee:d0:47:f5:d9:c1:15:68:fb:2f:d3:
ea:af:b3:d6:81:ac:61:b1:c9:bc:0e:de:c2:6e:4c:
68:8d:1a:de:76:81:8f:80:43:56:04:88:79:f1:e6:
a6:40:44:bf:56:65:0c:28:85:61:fb:aa:6f:86:14:
c6:66:b9:9c:d4:29:c8:b2:e4:19:f5:d4:42:78:30:
26:55:63:b6:fe:5b:c2:f7:0e:63:93:38:de:0a:63:
36:c1:d0:2a:34:a0:d5:be:58:10:7c:54:5c:4c:cf:
bc:ae:81:78:ee:db:0d:ad:92:ae:42:c3:47:84:87:
a9:36:9d:4c:1d:6a:1c:48:ce:0c:0f:37:ca:7e:a8:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:48:4E:4C:E4:C9:A6:EB:28:49:F5:4B:BB:74:E7:AA:D2:14:A8
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ahtITkzkyabrKEn1S7t056rSFKg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a2:8a:ce:12:d1:d2:06:61:fe:25:41:2d:d2:d3:07:c0:f1:
9d:b0:56:b1:e3:2e:1f:c1:c5:e4:69:b7:f7:ae:52:55:83:94:
ec:e6:73:4d:87:f6:9a:b8:d8:b6:30:ea:7c:fb:13:0e:04:1a:
30:a7:f0:37:42:fb:96:7b:1a:b3:8a:3e:77:3a:67:20:ee:7d:
60:fa:0d:07:f4:b9:0b:67:79:46:bd:e7:28:6e:45:ba:2d:83:
06:7b:37:30:34:9b:b4:e8:61:58:34:89:80:bd:d4:36:a8:c9:
40:b6:b4:fe:f7:2c:2a:15:c2:ae:c1:6a:f8:9a:12:ee:14:10:
de:3f:cb:32:b8:43:1b:a3:66:41:a8:7a:8b:2e:42:9c:60:52:
07:e3:86:cb:c5:43:5f:32:34:b9:29:24:6f:1d:0f:7d:ce:07:
43:20:1c:4a:19:00:39:39:ab:3a:2d:23:51:33:9d:0f:72:66:
91:8b:fa:25:e2:88:d9:e0:f6:c6:d4:31:a9:f0:b4:8d:9a:af:
78:81:df:0e:84:39:29:92:97:f4:48:c7:b8:6e:41:d2:16:b1:
68:80:0f:79:a6:64:90:46:66:b7:4e:f7:b8:fa:60:ee:3d:a0:
4f:d7:da:59:2e:c7:27:47:4d:15:d0:95:bc:92:82:4a:d7:85:
a4:be:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:09 2024 by rpki-client on console-ams.rpki-client.org