Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/gDuOK66sEPgi-rQTJ0Au7Ujp8_s.roa
File: gDuOK66sEPgi-rQTJ0Au7Ujp8_s.roa (raw, json)
Hash identifier: whj2alFflLXHmcCJBUwawBKyo3wQMjzsGwLJb4asoX0=
Subject key identifier: 80:3B:8E:2B:AE:AC:10:F8:22:FA:B4:13:27:40:2E:ED:48:E9:F3:FB
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 05C5
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/gDuOK66sEPgi-rQTJ0Au7Ujp8_s.roa
Signing time: Sun 22 Oct 2023 12:30:55 +0000
ROA not before: Sun 22 Oct 2023 12:30:55 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 62387
IP address blocks: 123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
123.98.112.0/22 maxlen: 24
123.98.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 22 12:30:55 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=803B8E2BAEAC10F822FAB41327402EED48E9F3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:2c:66:2b:6d:5f:e5:b9:1c:68:83:b3:3c:
40:bd:54:f4:7f:a6:57:2e:f1:26:76:92:02:e7:06:
99:f6:49:9c:95:4c:51:6d:10:cd:83:6c:fa:32:8b:
b1:86:c9:ee:08:bc:3d:b0:0e:be:b6:a0:78:81:b5:
a8:af:24:82:b6:36:ee:bf:5a:e6:31:26:50:da:17:
73:ff:e9:73:bc:16:62:7b:ea:65:9c:51:a9:08:44:
6f:b6:74:d4:a5:10:54:a8:6f:e0:12:3f:67:b6:1e:
ee:64:2d:ef:95:20:bd:d3:50:1a:76:47:36:cc:3a:
c4:e3:8d:66:85:e6:3c:94:ce:dd:ea:fc:8a:cc:58:
8f:1a:61:57:52:1b:b2:d3:a0:42:f2:44:79:4e:5e:
8b:32:1a:f0:96:ee:a9:b8:19:38:e3:00:02:e3:7f:
2d:54:31:77:96:1f:dd:0d:5f:6f:01:fb:d4:e8:6c:
52:7e:05:9d:0d:31:ba:66:1d:f3:12:63:76:72:f5:
2b:4f:dc:99:9b:32:7e:0f:70:d3:e8:f1:ba:20:63:
60:82:1d:1f:9a:b5:4c:28:7f:25:df:27:ff:11:6b:
46:28:8a:df:33:18:7a:9a:f9:4b:2c:20:f5:7f:ac:
c0:83:f8:48:a4:15:5f:3e:78:61:5e:d5:fb:5f:4e:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:8E:2B:AE:AC:10:F8:22:FA:B4:13:27:40:2E:ED:48:E9:F3:FB
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/gDuOK66sEPgi-rQTJ0Au7Ujp8_s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.76.0/22
123.98.84.0/22
123.98.112.0/22
123.98.124.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:1a:6a:98:ce:d3:32:25:c1:d1:cf:99:60:55:c8:9e:72:4d:
15:6a:68:da:7b:8c:54:6f:89:5e:2e:25:da:97:7b:46:f8:6b:
83:78:94:45:76:4a:84:36:40:7f:ad:35:dc:b1:21:58:a9:8a:
ec:29:e8:ea:b5:78:3f:7f:95:63:38:ac:1f:d8:45:e7:77:53:
99:6d:8d:65:62:53:a3:63:1a:c6:0a:f7:47:45:4a:c2:23:cf:
3f:be:d4:41:e2:04:ae:87:32:02:c6:28:27:4b:7a:54:00:2d:
cb:0e:82:93:0c:d4:6e:b7:50:a8:dc:88:ee:b4:6f:92:18:38:
52:24:ab:23:70:aa:a9:69:c3:5f:89:38:05:c9:aa:bb:c6:8e:
41:87:98:21:1c:2d:67:89:f7:46:a2:99:82:e2:b6:1e:75:bf:
0c:3f:68:98:e5:27:33:54:c2:57:f4:a0:6c:d8:ca:74:e1:f4:
53:2f:9e:05:5e:5a:26:56:de:70:8b:a5:db:bc:6a:25:be:55:
30:db:50:ca:58:3a:92:3c:88:44:1f:0e:06:34:eb:04:d5:7e:
50:a9:fd:46:9b:c9:0f:b9:38:eb:a5:a8:63:64:67:c4:b7:3e:
e6:1a:74:ef:d4:d6:fe:88:f0:48:13:c8:f6:48:de:00:9a:8c:
a1:87:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 03:37:10 2023 by rpki-client on console-ams.rpki-client.org