Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/relc_eKQwuFGJGJNUbkls08o5Ok.roa
File: relc_eKQwuFGJGJNUbkls08o5Ok.roa (raw, json)
Hash identifier: OgGo2PQVNLAkCaIV6gGleWjXjPP/vZUqQV1wkiujpBY=
Subject key identifier: AD:E9:5C:FD:E2:90:C2:E1:46:24:62:4D:51:B9:25:B3:4F:28:E4:E9
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D73
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/relc_eKQwuFGJGJNUbkls08o5Ok.roa
Signing time: Thu 03 Oct 2024 15:07:08 +0000
ROA not before: Thu 03 Oct 2024 15:07:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3443 (0xd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:07:08 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ADE95CFDE290C2E14624624D51B925B34F28E4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:96:0b:f5:b5:36:67:f5:91:01:da:80:ac:
ee:20:39:6d:5a:23:3b:d5:7f:52:37:75:7c:ab:e0:
60:cd:c6:13:41:79:69:41:e8:5f:87:0e:40:4e:01:
79:12:8b:6c:ed:43:1d:aa:70:53:d1:5f:69:cf:ff:
01:bc:f6:9e:f3:c1:85:c7:e1:0f:a1:06:6d:d0:35:
d5:54:f5:06:9f:12:c2:5b:64:46:b9:78:54:34:7a:
28:62:55:09:ff:0a:a4:80:5f:15:c0:1d:71:73:09:
1f:15:10:28:d7:36:bb:89:a4:b9:8b:00:ca:64:c4:
6a:ff:6b:11:06:2a:0b:5d:de:28:dd:f1:b7:6c:ce:
fa:90:70:96:10:4a:d2:35:46:b9:65:6b:0f:0a:76:
81:1d:67:b1:1c:76:49:d7:10:8c:e9:1b:3e:c9:69:
1f:12:f5:53:5d:da:92:bd:ab:64:e5:7d:5f:80:fe:
56:c5:6e:38:24:df:57:ed:7a:c4:51:c2:e4:0d:b5:
64:f1:f2:76:64:b9:d5:cd:c0:23:cb:42:c6:87:60:
b3:1e:c3:f5:d9:7a:c0:fc:b3:a0:e8:24:f3:60:20:
1e:b5:99:70:6b:36:8f:aa:72:54:fe:ee:97:3b:54:
71:11:af:e9:57:fe:f3:52:c3:48:ff:01:b0:f4:7a:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:5C:FD:E2:90:C2:E1:46:24:62:4D:51:B9:25:B3:4F:28:E4:E9
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/relc_eKQwuFGJGJNUbkls08o5Ok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:4c:b8:e9:2a:34:6f:57:dc:da:05:ce:e8:8c:06:21:26:4d:
5a:d8:43:60:e9:fd:94:32:fa:51:b3:6f:14:0c:6a:80:86:d0:
2d:df:52:b2:83:82:02:74:20:ec:e3:74:3f:08:e2:97:c3:d9:
db:ed:97:da:a4:bc:13:47:07:9a:86:3d:39:8d:c8:8d:57:bf:
cd:5b:e1:b3:bf:0e:76:e5:dc:03:0d:c7:2f:2d:fe:c3:21:bf:
5a:89:4e:a8:85:35:d7:35:61:9d:de:0e:a5:b4:e3:f9:0e:89:
76:09:d8:1a:cc:ea:a7:d3:06:76:a5:8c:21:66:4f:fc:34:fd:
ec:cd:14:4d:be:ef:93:f2:88:90:24:86:32:86:ad:15:bf:2b:
50:d7:d5:4a:f5:36:b0:2a:43:84:93:a8:77:74:bc:71:88:2d:
24:97:04:1c:54:56:a3:2c:3e:ea:a2:71:e7:74:ae:06:a7:19:
59:48:27:29:c9:9e:97:52:fd:ee:1d:0d:08:fa:93:40:9d:f5:
f3:58:9c:06:e9:10:62:9b:e9:64:58:27:83:54:17:2a:e3:fd:
4b:c8:31:12:42:0f:c8:bf:10:4c:46:a0:f5:27:23:13:ca:29:
c2:53:c8:57:f2:ce:8c:57:fa:6e:c6:25:a6:71:24:65:69:37:
47:06:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org