Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/l5Zx0C2VVyKbnVz9RRjVDn1pYvs.roa
File: l5Zx0C2VVyKbnVz9RRjVDn1pYvs.roa (raw, json)
Hash identifier: +aGR6ui+nMENEsqsLgKqpHwe6pXfDhcWOtsQokpNlFw=
Subject key identifier: 97:96:71:D0:2D:95:57:22:9B:9D:5C:FD:45:18:D5:0E:7D:69:62:FB
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 051B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/l5Zx0C2VVyKbnVz9RRjVDn1pYvs.roa
Signing time: Mon 25 Sep 2023 10:17:50 +0000
ROA not before: Mon 25 Sep 2023 10:17:50 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 62387
IP address blocks: 123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1307 (0x51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 25 10:17:50 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=979671D02D9557229B9D5CFD4518D50E7D6962FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:e1:78:fa:8d:12:a4:b5:af:04:6f:6f:ad:
0b:9a:ac:c2:1b:2f:09:73:09:0c:e2:50:d4:54:6e:
f9:9e:f3:19:48:8b:c6:48:3e:a4:26:9d:1f:ef:5c:
59:13:aa:5e:00:4f:ff:ba:0c:a1:c6:e8:0d:6f:24:
82:ef:38:59:48:06:bd:35:e6:b3:12:b0:92:b5:b2:
37:da:69:e0:27:a3:7b:dd:43:e6:74:40:d2:1a:93:
37:cb:59:cf:85:3b:fb:00:f9:03:28:23:73:e8:e2:
ac:46:fd:55:1b:71:91:4b:1a:f5:ba:ce:15:bf:f5:
8f:aa:98:d8:1b:9b:54:aa:13:31:f2:a2:e2:e5:04:
91:b8:ec:64:19:d8:24:90:91:3e:9a:fe:ae:a1:78:
7d:e7:7f:7c:51:58:b7:cc:1e:dd:01:cf:b8:d8:52:
aa:a2:ce:28:16:92:50:85:48:44:d6:37:a3:8f:28:
37:62:d3:4b:e3:af:b9:9f:a8:f0:ba:70:d6:e5:bf:
ac:f9:b8:ee:34:75:c4:3d:7c:01:c4:64:43:ca:9d:
13:f6:fb:cf:2d:0a:2b:b2:23:d6:89:db:f7:ff:34:
df:27:a4:1c:cb:f1:02:d2:4d:52:9c:65:01:d4:3d:
32:08:c8:08:e2:cf:ae:8d:12:b4:18:db:f2:72:30:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:71:D0:2D:95:57:22:9B:9D:5C:FD:45:18:D5:0E:7D:69:62:FB
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/l5Zx0C2VVyKbnVz9RRjVDn1pYvs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.76.0/22
123.98.84.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f2:68:c1:ce:8f:f5:c1:99:f5:db:45:6c:17:88:68:bb:ef:
6b:a5:52:bc:24:1a:52:cf:e1:0f:53:c9:e8:2c:66:30:ba:f8:
5b:7c:92:8b:87:36:4d:a7:c0:e8:f8:d3:f2:06:0b:3f:1c:b5:
8f:6f:25:82:fd:b1:48:f5:b0:a1:47:37:c5:46:61:42:88:b7:
92:75:e8:50:a2:10:69:02:c2:b7:62:85:74:36:08:b7:fb:f1:
e8:eb:f1:8a:6f:47:13:24:c5:e3:9c:0f:37:0f:20:a8:f2:b5:
cf:b0:31:4c:ec:b7:41:7b:86:eb:1f:91:e4:2b:d9:30:0e:ab:
8a:6a:db:9c:16:07:59:da:e5:06:b3:96:89:df:88:6d:7b:1c:
df:30:ab:9b:02:bc:9b:92:c7:27:e9:da:03:84:4e:22:ae:40:
38:b2:4d:3a:3a:b6:20:4b:d6:9e:69:0a:a6:68:c9:26:d8:29:
83:ff:f9:7c:2a:9a:13:3b:1b:9d:74:82:dc:a3:63:c3:b0:43:
ad:49:ff:69:e8:8c:ef:92:46:27:4b:18:68:55:ee:a8:1a:5d:
69:1a:68:f4:5e:f6:e7:c8:9f:b4:ae:3a:1e:d0:76:04:2f:ad:
8c:e1:e4:56:58:de:af:30:a0:e8:05:71:0f:44:6d:d3:1b:de:
9a:e8:92:07
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA5MjUx
MDE3NTBaFw0yNDA5MjQwMjExMjBaMDMxMTAvBgNVBAMTKDk3OTY3MUQwMkQ5NTU3
MjI5QjlENUNGRDQ1MThENTBFN0Q2OTYyRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhwuF4+o0SpLWvBG9vrQuarMIbLwlzCQziUNRUbvme8xlIi8ZI
PqQmnR/vXFkTql4AT/+6DKHG6A1vJILvOFlIBr015rMSsJK1sjfaaeAno3vdQ+Z0
QNIakzfLWc+FO/sA+QMoI3Po4qxG/VUbcZFLGvW6zhW/9Y+qmNgbm1SqEzHyouLl
BJG47GQZ2CSQkT6a/q6heH3nf3xRWLfMHt0Bz7jYUqqizigWklCFSETWN6OPKDdi
00vjr7mfqPC6cNblv6z5uO40dcQ9fAHEZEPKnRP2+88tCiuyI9aJ2/f/NN8npBzL
8QLSTVKcZQHUPTIIyAjiz66NErQY2/JyMEffAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUl5Zx0C2VVyKbnVz9RRjVDn1pYvswHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2w1WngwQzJWVnlLYm5W
ejlSUmpWRG4xcFl2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BAJ7YkwDBAJ7YlQwDQYJKoZIhvcNAQELBQADggEBAFnyaMHOj/XBmfXbRWwXiGi7
72ulUrwkGlLP4Q9TyegsZjC6+Ft8kouHNk2nwOj40/IGCz8ctY9vJYL9sUj1sKFH
N8VGYUKIt5J16FCiEGkCwrdihXQ2CLf78ejr8YpvRxMkxeOcDzcPIKjytc+wMUzs
t0F7husfkeQr2TAOq4pq25wWB1na5QazlonfiG17HN8wq5sCvJuSxyfp2gOETiKu
QDiyTTo6tiBL1p5pCqZoySbYKYP/+XwqmhM7G510gtyjY8OwQ61J/2nojO+SRidL
GGhV7qgaXWkaaPRe9ufIn7SuOh7QdgQvrYzh5FZY3q8woOgFcQ9EbdMb3prokgc=
-----END CERTIFICATE-----
Generated at Wed Oct 18 03:18:33 2023 by rpki-client on console-fra.rpki-client.org