Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ft99LvQ3Sn_o1Z0rj5wSuPwRyUI.roa
File: ft99LvQ3Sn_o1Z0rj5wSuPwRyUI.roa (raw, json)
Hash identifier: FBN69bKbpWgkmL3CAYBAw7GG8MGUb2surcYti2g27k4=
Subject key identifier: 7E:DF:7D:2E:F4:37:4A:7F:E8:D5:9D:2B:8F:9C:12:B8:FC:11:C9:42
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C4B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ft99LvQ3Sn_o1Z0rj5wSuPwRyUI.roa
Signing time: Wed 28 Aug 2024 08:53:53 +0000
ROA not before: Wed 28 Aug 2024 08:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 123.98.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 08:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Aug 28 08:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7EDF7D2EF4374A7FE8D59D2B8F9C12B8FC11C942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:4c:52:62:1f:17:01:3a:7a:26:82:84:0b:
21:a2:eb:72:15:7a:29:74:31:f1:d5:81:a5:71:c0:
1f:f6:eb:2e:b0:b4:41:b3:fc:87:78:9e:6b:7c:4f:
44:30:d6:5b:4e:90:66:1f:86:a5:51:d5:a1:c5:b7:
5f:25:85:4f:78:9c:12:eb:5d:4e:0f:e0:b5:5f:ec:
93:36:2f:60:fe:2f:51:53:96:43:e3:3c:5f:38:37:
ea:26:e6:6a:67:04:3e:3d:9b:bc:84:de:67:f9:0d:
d5:53:bc:db:90:50:8f:3b:f0:4c:e1:b2:02:a4:7a:
0c:ba:52:9b:46:ed:79:47:f8:ea:6e:b6:2e:69:ca:
40:64:3d:1e:53:43:f4:0d:49:7b:04:4e:ed:ce:15:
e4:5e:3f:b2:9a:53:98:16:88:e3:9a:e7:f6:9c:16:
4d:3a:c2:63:f4:9a:7e:6b:0b:04:0c:96:9e:88:f7:
54:8b:15:81:6e:9f:61:24:17:d4:1f:5c:61:76:e5:
90:91:1c:8b:85:0f:07:b1:70:24:79:e4:59:2a:ba:
59:cc:de:32:5c:44:ad:c0:d2:bc:98:49:b3:83:c7:
d6:d3:87:ab:63:4f:eb:53:0b:cc:50:09:92:f4:39:
8f:59:2a:cb:44:61:25:d0:2b:ca:e1:11:fa:58:70:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DF:7D:2E:F4:37:4A:7F:E8:D5:9D:2B:8F:9C:12:B8:FC:11:C9:42
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ft99LvQ3Sn_o1Z0rj5wSuPwRyUI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.36.0/22
Signature Algorithm: sha256WithRSAEncryption
88:53:b5:f7:f3:0e:79:8f:68:04:1a:a2:52:b9:f5:a9:96:be:
4d:5d:e1:50:69:76:f1:00:fe:b7:f7:12:78:0f:72:41:1b:3b:
44:e1:7b:9a:b7:08:8f:2a:42:f5:59:6b:2b:49:1f:06:1e:a6:
43:4d:c2:a5:85:b9:21:08:85:08:4d:44:5c:ec:78:4c:55:4e:
74:d3:18:f6:f4:57:30:19:62:aa:d6:ed:71:f1:96:56:fb:62:
39:73:2d:0e:2b:d9:ab:84:90:ef:46:61:9e:34:e4:99:02:ae:
62:f0:1a:68:b5:94:fc:a6:f8:ab:31:d0:9e:7a:0d:cb:ca:4a:
7d:21:6d:7a:b1:cb:c2:25:59:fd:4f:ed:97:e9:47:b2:e0:fb:
f9:bb:02:d3:43:53:49:66:08:28:e8:07:5a:62:da:99:63:43:
16:ad:45:ea:e4:e9:a7:50:63:d1:d6:49:75:5b:85:02:93:78:
6d:d5:0f:2b:ef:11:b8:a1:27:f7:fa:3a:04:6f:94:b1:65:e7:
53:2d:fa:b4:ea:1c:8b:f3:f4:3a:c0:22:0d:5e:27:8b:41:1f:
14:57:64:08:27:bc:ae:f7:3e:ca:53:88:69:38:6f:2a:1c:62:
9d:40:26:a8:63:22:21:d0:72:1e:a2:f0:fc:f0:3f:64:04:70:
77:2a:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 10:05:55 2024 by rpki-client on console-fra.rpki-client.org