Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/rhwlmOpMR8nQNlGAnSghuIdWm94.roa
File: rhwlmOpMR8nQNlGAnSghuIdWm94.roa (raw, json)
Hash identifier: aPit8wEWXid01humrfxJ4hvSAN0pGMND5n5iKjIPAK8=
Subject key identifier: AE:1C:25:98:EA:4C:47:C9:D0:36:51:80:9D:28:21:B8:87:56:9B:DE
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 03E3
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/rhwlmOpMR8nQNlGAnSghuIdWm94.roa
Signing time: Fri 04 Aug 2023 04:43:18 +0000
ROA not before: Fri 04 Aug 2023 04:43:18 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 35913
IP address blocks: 123.98.68.0/22 maxlen: 24
123.98.76.0/22 maxlen: 24
123.98.84.0/22 maxlen: 24
123.98.108.0/22 maxlen: 24
123.98.120.0/22 maxlen: 24
210.79.104.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
211.149.36.0/22 maxlen: 24
211.149.44.0/22 maxlen: 24
211.149.56.0/22 maxlen: 24
211.149.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Aug 4 04:43:18 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=AE1C2598EA4C47C9D03651809D2821B887569BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:ba:b2:c1:51:fd:ed:2f:fb:a1:f1:4f:8a:
c3:5d:f5:5d:28:4e:6d:1d:84:c9:b7:51:3d:6a:6c:
b5:cb:7d:76:73:0e:ee:7a:70:ff:b8:ad:ae:dc:a1:
f2:76:74:db:e9:a6:fb:6c:e3:37:12:c7:1a:5b:7e:
3b:7b:f4:6f:03:56:54:37:e6:aa:ba:09:19:4f:83:
9e:90:31:02:7e:bd:64:36:50:9b:1c:59:35:48:e0:
17:9c:00:45:94:ca:bc:32:a3:3f:be:a4:eb:0a:59:
23:98:4d:d3:36:d9:bb:33:37:ff:03:69:b3:ff:01:
79:43:4e:ba:a6:4f:c2:2d:2b:cf:a1:ab:90:63:fe:
dd:07:4e:2d:b8:db:5f:6a:96:01:e0:06:aa:25:63:
3e:77:a5:8f:06:c1:98:2f:8b:47:07:d6:3a:36:95:
11:4e:6e:06:65:b3:73:19:c1:23:71:85:4e:a8:93:
f8:3a:e3:48:80:ab:30:c0:c5:17:eb:ed:2c:5a:4e:
ee:f3:00:40:35:0c:70:72:29:f5:6f:9b:1a:38:04:
c3:de:94:81:7a:92:20:0c:f3:7b:cd:35:91:d2:8d:
f9:ae:d4:a6:e3:7e:68:20:a7:27:f2:09:af:4c:ac:
2d:1a:25:c0:95:cd:8e:b7:ac:ff:78:2e:c6:c2:9c:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:25:98:EA:4C:47:C9:D0:36:51:80:9D:28:21:B8:87:56:9B:DE
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/rhwlmOpMR8nQNlGAnSghuIdWm94.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.68.0/22
123.98.76.0/22
123.98.84.0/22
123.98.108.0/22
123.98.120.0/22
210.79.104.0/22
210.79.124.0/22
211.149.36.0/22
211.149.44.0/22
211.149.56.0/22
211.149.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:49:aa:3f:e7:f8:1d:3c:44:62:ec:e0:b9:07:53:74:4f:18:
e4:36:4f:c4:77:4f:17:a7:a8:99:97:37:bc:40:6d:a2:e2:72:
b4:eb:93:0e:38:ad:d5:b0:6e:8a:f5:cd:c7:4b:8e:2d:e7:9a:
fa:d7:4d:b8:4b:8f:ee:2b:d9:e2:72:8d:96:d9:6a:de:e8:c6:
e6:82:b2:c4:da:e3:6b:54:2c:4d:84:b7:e4:28:53:e5:ee:1e:
3f:d7:e4:51:62:54:7a:3c:c2:2e:dd:79:0b:be:7f:8e:33:ab:
4e:ec:d4:7a:e1:57:46:29:ab:2f:ff:92:77:3c:f0:9e:24:71:
dd:b6:b4:fa:da:98:18:0b:7a:46:ff:56:ed:01:0f:e7:37:0d:
e6:2b:a0:25:4c:35:31:f8:91:5f:6c:d9:49:6c:e0:21:54:35:
a7:3f:3d:c0:84:c9:fd:7a:e0:7a:1e:7f:53:30:1c:7f:b7:07:
4d:1e:7d:a8:16:41:17:25:64:b9:0b:e1:7d:b1:79:84:e2:33:
07:08:3b:8e:8f:d6:36:37:47:a0:72:83:ad:87:0e:1d:f3:e7:
19:bd:af:50:d9:8e:c4:c9:57:2d:57:39:c8:5b:2b:bf:08:6c:
45:34:6d:8f:0d:3d:85:0c:8b:19:27:cf:8d:f1:00:c1:22:74:
5b:f4:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 03:55:34 2023 by rpki-client on console-fra.rpki-client.org