Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/c4GkKSEjVRJ-Jq4EvnmUALo97BM.roa
File: c4GkKSEjVRJ-Jq4EvnmUALo97BM.roa (raw, json)
Hash identifier: SKNfUCyt0pVtj6YXeGTC6Qjy6L7xRZfloSWZlmyWGyc=
Subject key identifier: 73:81:A4:29:21:23:55:12:7E:26:AE:04:BE:79:94:00:BA:3D:EC:13
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D6F
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/c4GkKSEjVRJ-Jq4EvnmUALo97BM.roa
Signing time: Thu 03 Oct 2024 15:06:37 +0000
ROA not before: Thu 03 Oct 2024 15:06:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3439 (0xd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:06:37 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7381A429212355127E26AE04BE799400BA3DEC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:88:72:23:a0:e7:68:8e:b3:83:36:e2:2d:
d7:16:a5:33:8a:7a:d4:45:e8:c1:a9:33:1c:4b:39:
c7:38:e2:26:c0:cd:72:7c:58:ae:99:eb:15:18:b0:
0e:c5:1b:48:3c:84:a1:60:92:b0:0a:80:3f:9d:aa:
62:8c:70:0d:6c:33:44:3f:86:a0:c1:96:e7:45:bd:
35:80:61:b4:20:a5:72:ac:d2:3f:f6:dd:9c:e4:c2:
bc:c3:bd:c7:18:9b:e2:85:f8:0f:f0:e2:5e:d8:0f:
bb:98:31:f9:d8:6a:3a:1f:73:e1:4f:db:65:7d:98:
11:71:43:7c:01:21:7a:a5:2f:20:42:7e:80:5e:c0:
6b:cc:32:e9:3f:d3:0e:33:fc:b7:a8:60:f3:e2:1f:
32:60:a1:3d:96:38:21:5c:a0:4e:13:9f:ab:f7:18:
37:7f:3b:46:ba:cf:7d:f7:22:96:d9:05:83:47:3e:
5a:81:b9:b2:aa:ee:9a:e0:4b:ff:15:18:a1:ee:35:
6e:1d:57:8e:ea:ae:44:b1:11:bb:e0:93:61:b9:04:
8c:68:d4:01:27:ff:f3:22:b5:c5:17:d1:e7:b6:c2:
0e:0b:ab:a7:3f:7b:1e:5b:1a:f9:76:d1:9e:6b:5b:
49:09:b3:f3:60:ff:e1:16:03:48:6a:ef:13:60:6f:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:A4:29:21:23:55:12:7E:26:AE:04:BE:79:94:00:BA:3D:EC:13
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/c4GkKSEjVRJ-Jq4EvnmUALo97BM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.76.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:4c:c6:31:0b:f8:38:94:a6:24:00:47:d8:c7:0b:e1:3b:6b:
49:53:b4:cf:b1:ee:3c:e5:0c:8a:63:71:19:27:fe:a7:fa:80:
1f:4b:bc:9c:f2:08:d3:9c:3e:89:ac:66:62:54:e2:b9:24:14:
a6:db:b5:22:60:32:ae:53:0a:1b:5b:4c:ec:b3:81:fd:5f:d5:
d0:77:03:35:f5:a5:c4:7e:83:ec:cf:31:13:97:f7:7c:52:4a:
7d:c6:e2:57:a1:3b:e3:22:af:38:89:62:e0:99:f1:8c:fd:61:
92:c3:90:4b:02:5c:fa:2d:33:a2:71:94:bb:d6:2a:48:77:b4:
de:f5:a8:0d:0e:df:40:79:78:b2:4e:aa:78:fb:3e:62:94:53:
0d:bd:5d:fd:77:0c:60:c9:4c:9e:d3:11:be:ae:47:36:d7:e8:
fa:52:2e:9e:5b:64:69:0b:c5:d6:63:bd:f5:38:b8:84:84:22:
a1:c3:0d:ed:e1:2d:a2:a6:d7:99:3f:7d:e4:a6:cd:02:fc:28:
43:e9:c7:9c:66:d0:bf:4d:5f:2f:3c:1d:16:ff:fc:d6:b6:c6:
11:86:35:f3:5e:f1:27:19:ed:ee:51:24:47:de:b3:ae:24:ed:
33:be:56:dc:36:c5:44:99:dd:15:98:81:59:c7:0a:41:87:9a:
66:9a:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org