Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/oebBO3eykhg2sdkBCuMwFmzNlCc.roa
File: oebBO3eykhg2sdkBCuMwFmzNlCc.roa (raw, json)
Hash identifier: hc+9najj7l9op9kzG/W0P5MIG5UgkOnAeED5Bn4R5sc=
Subject key identifier: A1:E6:C1:3B:77:B2:92:18:36:B1:D9:01:0A:E3:30:16:6C:CD:94:27
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 066E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/oebBO3eykhg2sdkBCuMwFmzNlCc.roa
Signing time: Thu 23 Nov 2023 03:42:37 +0000
ROA not before: Thu 23 Nov 2023 03:42:37 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 62387
IP address blocks: 123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
211.149.80.0/22 maxlen: 24
211.149.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 13:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Nov 23 03:42:37 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=A1E6C13B77B2921836B1D9010AE330166CCD9427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:d6:99:d1:76:1d:b4:f0:25:25:74:c3:ec:
e7:32:e4:a1:46:55:91:1e:a1:cc:d8:74:72:58:86:
fa:b2:e2:0d:6c:44:2d:0f:93:94:ae:a5:ed:eb:a9:
7c:61:9e:b1:26:13:a3:a6:cb:31:d2:da:e5:18:00:
a9:c2:79:42:c2:78:f1:3b:fb:f4:da:c1:8a:f3:9f:
ae:ea:d2:ee:25:65:8e:fb:b0:7e:bf:4f:8a:6b:9b:
c8:be:35:01:93:d5:6c:00:c0:5d:e5:9d:45:b2:17:
8d:2b:50:ac:84:d3:ee:4f:fd:51:e3:8d:84:ba:62:
43:6c:03:d1:b7:1e:52:92:4c:34:a8:74:f4:a3:ee:
7d:81:c8:27:67:14:04:97:eb:e0:a0:ea:83:e9:43:
c2:8c:3a:ba:de:ff:1f:f8:52:f1:71:bd:b5:fc:09:
55:3a:cd:6b:fc:a6:b5:d0:e6:34:7a:07:83:e3:cd:
db:4a:7a:ab:b4:76:eb:28:f6:20:25:a5:fd:a7:c9:
6b:37:f3:da:75:8b:18:63:42:ef:68:7f:0e:33:5d:
5d:a7:dc:51:37:47:06:fb:1a:ca:b2:85:64:b7:de:
95:08:51:02:26:9d:2d:ef:27:23:c0:bb:68:60:a1:
22:15:1c:20:dc:45:21:d6:e4:0f:90:3a:1c:68:4d:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:C1:3B:77:B2:92:18:36:B1:D9:01:0A:E3:30:16:6C:CD:94:27
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/oebBO3eykhg2sdkBCuMwFmzNlCc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.76.0/22
123.98.84.0/22
211.149.76.0-211.149.83.255
211.149.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:01:a3:a9:4e:0e:ed:ca:65:31:3f:a3:f7:31:34:d8:8d:06:
57:69:4d:2d:fe:3b:1a:ca:d5:4f:c2:b4:b2:3b:b3:7b:26:56:
f3:66:24:52:cf:75:8e:f4:37:e7:1f:5b:b2:6b:b2:91:c7:06:
c0:11:e5:31:e9:82:da:0a:6a:23:93:a2:8b:df:ea:ca:0b:0b:
dc:05:dd:cc:5f:dd:d7:a3:da:7d:81:34:d3:eb:a0:d3:ee:31:
95:5c:27:fc:5f:a4:df:2c:f4:b5:91:83:41:e4:27:5e:85:41:
2c:ce:9e:ab:c4:7a:71:69:e6:77:e5:a5:7a:42:3e:82:97:16:
ff:53:12:04:9d:6d:b1:71:64:be:b1:78:5e:3a:48:ea:c1:3f:
8d:65:92:3d:2e:4f:6b:27:90:fe:7f:84:51:b0:7e:43:de:5e:
aa:09:46:34:9e:33:61:12:55:8e:70:4f:de:83:f1:f9:51:ea:
6d:a3:63:3a:bf:13:88:6f:22:f7:4f:9c:64:6a:04:08:e5:aa:
41:52:4b:3a:d9:b9:cc:63:10:b2:3d:6c:a9:7f:7f:1a:a4:75:
91:b4:89:9d:69:f7:31:d2:b6:18:d8:f3:f9:ec:e5:d3:3d:08:
ba:5c:65:6a:4d:79:d5:72:df:7f:2e:f7:0d:3e:cf:f7:ad:44:
67:b6:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 16:15:07 2024 by rpki-client on console-ams.rpki-client.org