Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ngs-i9UGFP6FK9y_D-369sqs5UM.roa
File: ngs-i9UGFP6FK9y_D-369sqs5UM.roa (raw, json)
Hash identifier: tsjqBDGyrYrT2eGIJgTTmN08+bCg59F4KRKI4yk/KF0=
Subject key identifier: 9E:0B:3E:8B:D5:06:14:FE:85:2B:DC:BF:0F:ED:FA:F6:CA:AC:E5:43
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 055A
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ngs-i9UGFP6FK9y_D-369sqs5UM.roa
Signing time: Wed 04 Oct 2023 04:37:11 +0000
ROA not before: Wed 04 Oct 2023 04:37:11 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
210.79.112.0/24 maxlen: 24
210.79.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 4 04:37:11 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=9E0B3E8BD50614FE852BDCBF0FEDFAF6CAACE543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:4f:03:93:b4:48:c3:ca:5a:ff:4a:8a:a7:
98:64:7d:4f:ba:3f:24:d0:69:76:93:4b:15:ab:31:
b0:2b:4b:ec:38:91:68:b6:b4:12:bc:e4:d1:b1:43:
f6:71:5b:0d:be:b9:79:e8:57:40:23:bc:d0:49:c5:
89:46:c7:a5:47:b4:77:d8:40:6f:f6:c6:ec:42:63:
dc:33:56:cb:18:32:79:db:1d:4f:fb:dc:0a:02:94:
97:4d:e3:8d:de:39:24:a4:34:3c:aa:de:36:2f:ba:
4f:04:0a:2c:b4:eb:51:9f:a4:e7:7d:4d:63:21:db:
0b:f6:e2:b4:91:ee:18:82:9b:4d:c2:45:c6:07:03:
96:df:6e:fb:d0:a6:34:b3:fb:45:87:72:36:ee:d7:
90:90:18:fa:9b:5d:f9:ed:49:9a:ab:2f:29:f6:4a:
6d:c9:a3:e0:94:e4:a2:1a:6d:16:ed:8b:37:1d:cd:
7b:a8:65:cb:8a:35:c3:0d:28:d9:5e:6d:fb:b0:eb:
52:5c:23:d9:43:69:58:4d:34:2e:4c:99:7f:af:62:
0f:57:28:b9:7a:a4:b1:f1:7c:b7:c3:f4:94:8b:a0:
35:3d:41:53:54:54:10:05:b0:16:8f:c5:d6:85:05:
02:00:3f:52:5a:aa:9c:0a:56:c9:d5:d8:11:d1:1f:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:3E:8B:D5:06:14:FE:85:2B:DC:BF:0F:ED:FA:F6:CA:AC:E5:43
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ngs-i9UGFP6FK9y_D-369sqs5UM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
210.79.112.0/24
210.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
18:12:01:1b:5a:ca:9f:44:8d:8b:f5:40:93:f6:7b:15:98:8d:
d6:0d:bb:8a:02:34:8b:13:81:01:65:bf:ee:48:b5:2d:e2:63:
7c:e1:40:ae:7d:a2:0a:83:20:2d:52:2f:3a:3e:bf:ba:7e:ee:
e7:54:5c:f3:a4:a3:0e:8d:e2:c4:21:6f:8e:7f:74:7c:55:5e:
b7:9c:d7:92:e2:81:e1:9a:06:c1:31:26:8b:28:93:41:b4:18:
e2:b0:1f:98:79:1b:19:cc:5e:f0:f2:d8:a2:60:dc:41:cb:bb:
31:e7:03:4f:fb:d8:21:0a:e4:50:a7:d2:91:bc:25:c5:81:21:
ef:66:9e:1e:e6:bc:91:59:44:96:94:f1:60:41:2c:8e:7f:05:
25:ea:7c:57:34:04:f6:36:a3:e5:72:66:3c:e0:78:1d:55:02:
38:34:9f:c7:c2:a4:3c:ee:0e:63:26:31:51:1e:24:54:08:dc:
a6:b9:5c:65:30:c5:cb:10:d7:1a:be:54:7d:ca:cb:a0:d8:6f:
12:dc:3e:42:fd:f5:c4:f6:42:e1:68:ef:16:ec:94:ea:16:b2:
5e:be:21:fe:5e:fe:cd:99:24:19:17:2d:df:62:0e:ce:c5:bb:
fe:4f:ed:f3:d9:5f:53:2a:61:4e:4e:52:45:77:42:c7:27:37:
eb:b8:81:e5
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICBVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzEwMDQw
NDM3MTFaFw0yNDA5MjQwMjExMjBaMDMxMTAvBgNVBAMTKDlFMEIzRThCRDUwNjE0
RkU4NTJCRENCRjBGRURGQUY2Q0FBQ0U1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq0k8Dk7RIw8pa/0qKp5hkfU+6PyTQaXaTSxWrMbArS+w4kWi2
tBK85NGxQ/ZxWw2+uXnoV0AjvNBJxYlGx6VHtHfYQG/2xuxCY9wzVssYMnnbHU/7
3AoClJdN443eOSSkNDyq3jYvuk8ECiy061GfpOd9TWMh2wv24rSR7hiCm03CRcYH
A5bfbvvQpjSz+0WHcjbu15CQGPqbXfntSZqrLyn2Sm3Jo+CU5KIabRbtizcdzXuo
ZcuKNcMNKNlebfuw61JcI9lDaVhNNC5MmX+vYg9XKLl6pLHxfLfD9JSLoDU9QVNU
VBAFsBaPxdaFBQIAP1JaqpwKVsnV2BHRHxmVAgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUngs+i9UGFP6FK9y/D+369sqs5UMwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL25ncy1pOVVHRlA2Rks5
eV9ELTM2OXNxczVVTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD
BAJ7YkADBAJ7YkgDBADST3ADBADST3IwDQYJKoZIhvcNAQELBQADggEBABgSARta
yp9EjYv1QJP2exWYjdYNu4oCNIsTgQFlv+5ItS3iY3zhQK59ogqDIC1SLzo+v7p+
7udUXPOkow6N4sQhb45/dHxVXrec15LigeGaBsExJosok0G0GOKwH5h5GxnMXvDy
2KJg3EHLuzHnA0/72CEK5FCn0pG8JcWBIe9mnh7mvJFZRJaU8WBBLI5/BSXqfFc0
BPY2o+VyZjzgeB1VAjg0n8fCpDzuDmMmMVEeJFQI3Ka5XGUwxcsQ1xq+VH3Ky6DY
bxLcPkL99cT2QuFo7xbslOoWsl6+If5e/s2ZJBkXLd9iDs7Fu/5P7fPZX1MqYU5O
UkV3QscnN+u4geU=
-----END CERTIFICATE-----
Generated at Fri Oct 6 01:58:08 2023 by rpki-client on console-fra.rpki-client.org