Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/i-oAIjVsgZ-2Pa0z1qRynvV47ek.roa
File: i-oAIjVsgZ-2Pa0z1qRynvV47ek.roa (raw, json)
Hash identifier: aNMmO/+2ZTrSVCdwuQESatqVYWYe//QISw6Nf9RUcfw=
Subject key identifier: 8B:EA:00:22:35:6C:81:9F:B6:3D:AD:33:D6:A4:72:9E:F5:78:ED:E9
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 04A1
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/i-oAIjVsgZ-2Pa0z1qRynvV47ek.roa
Signing time: Thu 07 Sep 2023 03:25:27 +0000
ROA not before: Thu 07 Sep 2023 03:25:27 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 35913
IP address blocks: 123.98.68.0/22 maxlen: 24
123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
211.149.36.0/22 maxlen: 24
211.149.44.0/22 maxlen: 24
211.149.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185 (0x4a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 7 03:25:27 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=8BEA0022356C819FB63DAD33D6A4729EF578EDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:97:23:04:c7:86:fa:22:c9:7d:c3:b5:cd:
f6:32:7b:f6:35:46:69:51:46:ba:85:40:c7:f5:39:
40:d4:fc:5f:e1:68:ca:4c:2f:39:1a:0e:6e:13:dc:
1e:44:f1:f7:e9:c1:04:09:d7:17:ae:73:d5:40:8c:
82:e6:c4:4f:67:90:f8:49:41:08:a4:1a:5a:ba:a5:
fe:93:8e:7c:6f:46:8a:7b:dd:14:c7:db:88:b1:9e:
45:d7:e3:10:a4:63:3f:22:cb:b2:b0:26:c7:19:d1:
92:72:ad:93:1a:f0:10:28:e7:82:bc:09:b1:a5:85:
fb:b2:21:d5:d2:0a:b2:64:8a:76:9d:38:12:e4:35:
c7:99:59:84:f0:d9:ec:f7:17:25:e2:57:27:87:72:
2f:f6:70:e1:39:9c:ab:30:f4:bc:56:51:bf:87:00:
01:83:e1:a9:51:4c:c7:b9:13:6c:d1:df:ba:91:09:
60:02:10:a3:49:9a:3b:bc:b3:45:02:ef:ef:11:45:
5f:e6:78:e5:6a:8e:20:18:78:9b:13:9c:c8:82:4f:
67:26:21:98:fe:54:fb:a4:24:39:cf:72:d3:54:66:
3d:16:df:b8:f4:c8:b8:60:22:27:0c:0a:cc:17:f5:
ab:bc:41:6e:c7:5b:45:d8:5f:5a:84:10:18:b8:2f:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:00:22:35:6C:81:9F:B6:3D:AD:33:D6:A4:72:9E:F5:78:ED:E9
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/i-oAIjVsgZ-2Pa0z1qRynvV47ek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.68.0/22
123.98.76.0/22
123.98.84.0/22
211.149.36.0/22
211.149.44.0/22
211.149.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:24:05:88:db:49:87:e0:72:ff:3c:75:a3:86:fb:1f:9b:7e:
52:42:c9:b9:d3:ca:19:6b:3b:a6:02:a9:15:bb:92:2e:8b:1c:
c5:42:5a:0e:ae:f5:d1:c3:e0:4d:84:4a:fd:7d:14:2a:58:c2:
40:08:6d:3d:c0:12:e7:64:d3:7e:a7:4f:ba:70:1b:d0:ac:40:
f5:08:da:e9:86:a6:2e:59:b5:40:1a:25:7b:7b:29:39:dd:10:
36:3c:e4:d1:66:ff:fb:17:2b:0d:f9:1b:26:92:b4:b5:63:ea:
7a:10:c8:2f:19:47:21:1d:76:ad:36:8c:f3:e3:eb:a5:67:99:
cd:3c:c6:9d:0b:d2:05:6e:e4:c8:10:61:d1:66:40:d9:10:84:
f4:31:f7:0e:7e:ea:a7:5c:19:87:ce:52:c1:b0:3d:cc:60:35:
ee:41:ce:b0:d2:5f:f3:60:ca:dc:2c:31:7b:48:33:eb:0e:7d:
3d:fc:e9:87:aa:fa:36:17:df:bf:79:c5:cf:d8:af:a5:40:e4:
e6:68:e0:96:68:08:f7:45:f2:69:0c:a4:18:85:a0:28:33:33:
13:7a:60:d6:2a:ec:2b:7f:b0:2d:c3:4c:08:2e:97:93:f1:b1:
3a:21:b1:e4:d2:7e:11:3c:02:60:0e:44:80:2b:55:18:af:1a:
a6:f2:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 16:40:55 2023 by rpki-client on console-fra.rpki-client.org