Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/meiJXqKJbmVCt9Xz26V6XZQXXao.roa
File: meiJXqKJbmVCt9Xz26V6XZQXXao.roa (raw, json)
Hash identifier: QLVVm9FXoaEC37Aov/bNZLUMNVPigIFD1xTb1afyQv4=
Subject key identifier: 99:E8:89:5E:A2:89:6E:65:42:B7:D5:F3:DB:A5:7A:5D:94:17:5D:AA
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0C8D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/meiJXqKJbmVCt9Xz26V6XZQXXao.roa
Signing time: Sun 01 Sep 2024 11:38:49 +0000
ROA not before: Sun 01 Sep 2024 11:38:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 215784
IP address blocks: 211.149.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 13:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 1 11:38:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=99E8895EA2896E6542B7D5F3DBA57A5D94175DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:54:6e:e0:50:f4:81:5d:22:e8:a2:bd:ba:
43:82:d6:59:1c:5e:8e:cf:ee:b5:00:d0:62:c8:5f:
90:e2:c3:9f:10:0c:d9:62:32:d1:cc:d0:1c:be:d8:
f4:19:2f:02:d6:75:d6:36:c2:0b:69:db:9e:68:ed:
84:8f:b8:28:4f:1b:8e:8a:0a:5b:fc:4a:66:ad:12:
f5:c0:fb:a6:6e:47:78:c3:fe:24:f5:70:c7:9f:5d:
ed:d8:86:1a:18:71:ca:42:e3:2d:aa:c9:b4:95:a8:
86:ac:64:35:f7:36:bc:9b:80:08:aa:12:d2:19:b1:
4c:30:db:07:ff:69:75:f5:95:43:e7:75:4b:62:53:
7b:29:b6:16:4f:a7:7f:15:ba:8c:3c:5f:4f:82:42:
b2:d8:0f:cb:ab:7e:8f:96:1c:f1:55:ae:fe:30:2b:
4e:b2:4e:91:43:4d:26:bf:81:4b:67:90:17:f4:78:
4c:78:52:78:4f:e1:ce:5c:97:49:f9:8b:7a:88:f7:
44:c6:28:cb:2b:4d:af:3a:78:bb:95:67:98:07:0e:
d1:2a:86:b6:4d:c0:8a:f9:12:c2:9e:54:34:97:8a:
66:45:05:5f:ff:88:cb:25:82:53:28:7f:e3:fb:b6:
22:fe:53:c6:21:aa:5c:a3:e4:a2:c8:9e:2e:a2:51:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:89:5E:A2:89:6E:65:42:B7:D5:F3:DB:A5:7A:5D:94:17:5D:AA
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/meiJXqKJbmVCt9Xz26V6XZQXXao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ec:8e:cc:5c:81:c9:09:24:fe:1f:82:8e:31:bc:f7:82:4f:
22:2a:55:d0:2e:f7:31:92:be:f6:1a:bc:72:d2:38:7c:21:f7:
ee:9a:6d:16:d3:6f:64:7a:fb:ca:f0:c7:80:25:a4:93:72:9f:
cc:7f:4e:8f:7c:29:af:ee:62:08:52:37:2b:e7:9b:17:94:2c:
b0:ba:f7:ac:89:c7:02:19:45:d2:25:59:3e:90:e2:5f:a5:05:
6e:a6:2b:98:84:90:e0:b8:a9:85:3d:6f:4c:42:15:ee:26:51:
42:d2:a0:65:11:78:87:8b:6f:e6:66:7f:d1:b1:15:cc:45:9c:
4d:06:ca:7d:e5:9b:16:ac:d8:b5:d1:db:ed:21:56:6a:87:dc:
c2:09:3b:ef:24:ef:e8:f1:f4:c6:71:72:97:c5:a9:11:a4:85:
0f:64:ea:fb:6f:26:67:a1:0c:3f:68:2a:d3:3c:e7:de:d4:f6:
b1:67:cf:74:49:51:c3:ce:a8:31:00:28:ee:61:46:0e:59:73:
40:19:b8:da:23:c1:e0:05:ab:94:b8:68:88:58:ba:9b:db:0b:
1f:38:54:0a:ae:fc:14:91:4e:09:86:4f:78:fe:53:ee:a4:cc:
e2:8e:56:d5:60:37:58:92:7a:42:90:dc:6e:3b:11:1b:1d:ad:
bf:c3:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 14:38:43 2024 by rpki-client on console-fra.rpki-client.org