Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/yBW9mO1xNEnbNDSVoKXyeVVsZCE.roa
File: yBW9mO1xNEnbNDSVoKXyeVVsZCE.roa (raw, json)
Hash identifier: gNUx4wPccImWRoRJnO2jkwuqMXnAb9rGLXf7tHl4szA=
Subject key identifier: C8:15:BD:98:ED:71:34:49:DB:34:34:95:A0:A5:F2:79:55:6C:64:21
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D65
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yBW9mO1xNEnbNDSVoKXyeVVsZCE.roa
Signing time: Thu 03 Oct 2024 15:05:23 +0000
ROA not before: Thu 03 Oct 2024 15:05:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3429 (0xd65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:05:23 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C815BD98ED713449DB343495A0A5F279556C6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:ae:05:63:e0:96:20:5a:de:09:80:f0:20:
a3:3e:ae:79:a6:8d:28:5d:22:d7:1f:4d:17:34:39:
1a:00:ac:10:60:38:5d:fa:84:85:14:38:43:70:9d:
f0:ae:a2:cc:80:5c:e6:37:8a:ad:93:3c:5a:dc:f0:
e9:e8:07:5f:fe:fc:4b:79:d2:ad:8e:72:8b:2a:fa:
b4:12:df:b8:ee:73:5b:97:1d:c8:48:c7:b4:80:f6:
ae:07:4e:d8:ff:3a:9b:03:7f:9d:d7:1c:71:6c:44:
1a:b4:ae:f8:48:5f:72:d8:13:4a:8a:b7:50:2b:2b:
c4:73:19:d4:19:16:ea:5a:69:af:51:be:97:8a:5d:
39:a9:03:ab:02:23:cf:c9:a9:43:b7:c4:df:ed:0d:
08:db:31:69:27:f2:7e:1f:a4:8d:79:fa:3d:61:e9:
52:40:45:64:b1:3b:2d:e3:6c:92:12:b7:68:7c:2d:
0e:18:b1:68:58:76:8f:4d:2e:8a:fc:1b:27:0c:5e:
46:91:80:72:07:8c:fd:79:71:67:8b:f2:11:ac:54:
31:19:2f:f1:ec:36:35:4e:f1:96:63:1d:46:f9:08:
d2:85:72:5c:04:47:b5:26:71:25:f4:8c:33:c6:5e:
5d:b9:fe:f0:fd:ab:9c:0b:e8:b9:2b:92:a1:61:5f:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:BD:98:ED:71:34:49:DB:34:34:95:A0:A5:F2:79:55:6C:64:21
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yBW9mO1xNEnbNDSVoKXyeVVsZCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.44.0/22
Signature Algorithm: sha256WithRSAEncryption
33:83:c8:d2:8b:46:a3:f6:cf:90:a2:ad:52:d0:e0:81:f4:7f:
74:79:ce:f7:86:15:b1:16:c4:38:d3:28:43:77:fa:f5:b5:3a:
ed:c9:92:16:af:0b:e3:0d:ed:b4:e7:86:92:e8:90:cc:a7:f0:
3c:7c:56:be:ca:ae:73:19:25:32:05:fc:7d:c5:a9:ae:80:8a:
fb:72:c6:40:2f:92:e0:c4:c8:3d:78:2c:7f:7e:69:a1:4a:46:
66:c9:a6:90:94:0e:a0:4f:d7:96:81:2d:07:fd:67:20:e3:67:
b0:19:6b:5d:cf:9d:64:ba:47:53:8c:ac:71:38:5a:91:ae:1b:
b9:0a:1a:97:5a:50:b7:fc:c3:d4:bc:8c:11:19:60:0c:6e:b3:
e8:fd:49:09:81:07:53:68:13:9d:c7:b4:4d:6d:b2:28:e8:08:
84:fd:1a:91:f8:52:04:e4:98:28:98:1d:ca:db:76:2a:f8:ce:
ad:53:74:ea:25:a0:ef:5f:b7:76:56:44:28:38:c3:ea:35:36:
e6:76:94:ee:ce:5e:8e:4c:0a:88:d5:ea:0d:c8:27:8c:aa:e4:
91:6f:71:7a:92:17:dc:b6:5b:da:66:a9:a8:06:8f:d7:56:a3:
e4:46:12:1c:b5:88:e6:c6:e7:81:dc:99:a3:f7:0f:1d:ec:26:
69:ae:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:10 2024 by rpki-client on console-ams.rpki-client.org