Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ftsdCbwoTff6MJd8DiuNQ6mb020.roa
File: ftsdCbwoTff6MJd8DiuNQ6mb020.roa (raw, json)
Hash identifier: ekgFNtbw2qmtDO8xcy59AgmyejLupzCONnQcx6Se/kw=
Subject key identifier: 7E:DB:1D:09:BC:28:4D:F7:FA:30:97:7C:0E:2B:8D:43:A9:9B:D3:6D
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 083E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ftsdCbwoTff6MJd8DiuNQ6mb020.roa
Signing time: Fri 16 Feb 2024 10:43:12 +0000
ROA not before: Fri 16 Feb 2024 10:43:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.100.0/23 maxlen: 24
123.98.102.0/24 maxlen: 24
123.98.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 03:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 16 10:43:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7EDB1D09BC284DF7FA30977C0E2B8D43A99BD36D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:ee:09:40:3f:9b:a5:29:c1:aa:3b:4f:f2:
20:b3:4f:d9:7b:7f:dc:9b:fe:03:f2:42:72:a7:e3:
aa:93:84:a5:f8:1a:2e:42:08:52:d2:62:a4:bb:72:
5b:05:90:2a:49:c4:cc:ef:cc:6e:24:12:fb:82:c0:
20:c0:43:ac:78:e4:42:59:58:de:6f:e7:05:1d:3d:
16:a2:ec:2f:a5:c6:e0:a0:6f:dc:c6:f3:25:9d:da:
8c:c4:2d:d6:79:db:3b:30:18:61:11:26:6f:fa:92:
5d:42:f4:93:57:7c:5f:e7:02:98:1a:65:98:80:36:
6e:4f:7f:20:55:79:d8:82:18:78:c8:ba:ac:c3:a8:
a7:4b:2b:bf:c7:7a:1c:b8:be:47:31:b0:71:cb:88:
23:01:42:1f:0b:64:12:7d:9d:fa:38:8f:59:f6:ff:
46:2c:38:de:22:53:e2:d8:92:e4:84:d2:fc:9f:47:
60:6a:6f:00:e1:91:87:eb:59:0f:14:53:d1:0a:d0:
08:17:be:55:00:1f:d8:03:9e:ab:32:30:4a:cd:f0:
8b:f5:93:63:04:f2:2b:78:86:ce:38:bc:07:60:52:
1a:be:15:bc:2c:d8:c8:2d:c3:3e:30:b3:b5:13:6f:
e6:7d:22:3e:b6:08:a8:7b:ac:b7:f4:7d:1b:e0:78:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:1D:09:BC:28:4D:F7:FA:30:97:7C:0E:2B:8D:43:A9:9B:D3:6D
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ftsdCbwoTff6MJd8DiuNQ6mb020.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.100.0/22
Signature Algorithm: sha256WithRSAEncryption
44:6f:98:82:9b:03:68:69:1f:47:83:67:82:25:3f:b5:86:4a:
e8:6a:aa:de:59:b2:52:bb:9d:f3:d2:30:b5:80:8a:2a:7e:31:
6d:ca:ee:c5:7c:0f:b8:9b:f0:8c:98:e6:f4:9a:54:0a:cd:2d:
9d:b4:b5:3b:da:d2:2c:a3:2c:cc:55:4d:5a:04:b6:24:f1:59:
50:3b:fa:41:ea:ae:44:64:29:9e:41:cf:69:c5:ef:d2:70:66:
0a:36:de:c8:8a:15:d5:ae:0a:45:8c:e6:76:f4:50:99:c3:76:
24:45:42:62:e3:f1:b6:6b:7d:f4:56:76:ca:f8:a3:a3:68:af:
de:8b:61:6c:e9:ec:f5:bf:71:45:9d:a0:12:fa:b5:2c:c4:78:
42:d3:e4:a3:1c:9f:77:54:38:c8:8e:e7:0f:62:73:76:55:b2:
62:2d:50:52:8f:b7:f7:e2:14:b0:99:8b:fb:43:d4:53:95:b7:
d0:11:16:c4:4c:14:a2:d1:6e:29:fe:79:94:81:f0:cb:04:2a:
e2:7d:9b:44:ef:f7:9e:d3:13:ab:f5:0d:9c:1b:36:ba:22:af:
ba:8f:59:3a:6f:93:8b:14:39:3d:0c:94:0f:61:08:e1:92:68:
d1:e9:ba:a0:8b:ac:02:08:22:b5:94:11:d2:96:26:65:71:93:
9d:b0:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 04:23:29 2024 by rpki-client on console-fra.rpki-client.org