Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/u_cSQXfmp80mH13lRPokdVT0dKs.roa
File: u_cSQXfmp80mH13lRPokdVT0dKs.roa (raw, json)
Hash identifier: 9T1foCtE8S/Nc+l96hxmvniRaBN8idOc9qyZXMzWBX4=
Subject key identifier: BB:F7:12:41:77:E6:A7:CD:26:1F:5D:E5:44:FA:24:75:54:F4:74:AB
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0567
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/u_cSQXfmp80mH13lRPokdVT0dKs.roa
Signing time: Fri 06 Oct 2023 01:21:03 +0000
ROA not before: Fri 06 Oct 2023 01:21:03 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 6 01:21:03 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=BBF7124177E6A7CD261F5DE544FA247554F474AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:4b:e8:31:72:c1:e3:77:fa:45:0c:bd:84:
86:f4:2a:a4:9f:1a:80:72:0c:e5:19:4b:1f:dc:d5:
0f:ef:95:19:2c:c5:4b:ac:c9:de:b1:e1:18:2a:ce:
ca:32:ed:f0:88:c1:15:34:15:b2:1e:52:07:76:9c:
35:a7:e1:d0:6e:03:73:86:0b:cf:58:15:55:06:15:
5a:0a:bf:19:80:97:8f:20:e9:50:d5:33:b2:6b:75:
cd:12:7e:95:56:a7:11:c9:3d:f9:48:29:0a:db:85:
6e:61:7a:c6:f2:62:da:3e:51:25:fe:e8:a7:34:77:
ec:b3:fd:20:c2:ac:8e:2b:22:2e:d5:18:c6:f5:8f:
58:b1:19:4d:df:47:a3:b8:b1:1c:55:c2:87:b4:da:
42:6a:07:76:e1:6f:ba:9f:66:71:c4:93:dc:b1:f9:
f8:f8:18:fa:0d:bd:5e:89:c6:c0:55:64:0a:c1:14:
97:3c:b3:09:52:f2:b1:29:3f:49:a8:cb:0f:59:df:
56:f3:67:6c:69:54:49:4a:2c:33:18:ba:8a:d3:0c:
9d:14:af:e8:01:f5:1f:45:3a:5c:1f:c1:93:ef:e5:
e7:44:41:35:2a:5c:53:d6:d8:f6:0c:c1:6d:84:f3:
f5:92:ba:c2:d2:de:4b:3c:3a:5b:ec:c3:41:10:7c:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:12:41:77:E6:A7:CD:26:1F:5D:E5:44:FA:24:75:54:F4:74:AB
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/u_cSQXfmp80mH13lRPokdVT0dKs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
Signature Algorithm: sha256WithRSAEncryption
25:50:53:f4:35:3e:88:56:c0:6b:5c:20:c8:37:7f:eb:53:5c:
b0:a9:6e:c0:83:c2:61:ae:43:79:cb:31:87:7a:f8:0c:71:16:
65:d4:81:28:a5:85:8b:12:89:f2:f5:d7:be:d8:18:16:7d:86:
c4:bd:02:6a:a1:e4:29:af:f1:be:64:a8:fb:ef:7f:0e:bf:c2:
1a:ca:8f:23:a6:ec:3b:a1:b4:1c:25:91:2c:e0:09:bc:7d:a5:
42:eb:4a:89:25:ad:fc:5f:15:2e:64:a1:ea:55:28:40:06:10:
95:b3:25:6d:0c:97:b2:d9:d9:44:37:78:3b:cc:fe:90:04:8b:
4d:6a:61:b4:c2:bf:ab:58:8d:dd:63:28:21:23:43:ea:be:a5:
a5:a9:70:9a:f2:f3:63:e7:51:88:6a:c4:9e:6f:02:29:52:ee:
2f:e1:bc:f6:a0:89:da:2a:b1:36:23:e8:2d:84:f5:26:52:fa:
a0:db:df:28:9d:70:3f:01:89:c0:8b:76:5b:65:46:8e:21:ca:
93:58:9b:0f:c6:89:d2:10:5c:e1:98:0b:6a:2e:3f:e0:3c:dc:
d8:bc:74:40:e4:e1:8c:18:23:68:ed:8d:b3:91:98:78:76:51:
d3:06:9a:c0:14:60:c2:e0:87:c5:ea:64:ba:a6:97:18:ef:e9:
82:28:d6:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 12 04:37:03 2023 by rpki-client on console-fra.rpki-client.org