Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/z37jxg-b06zaFoB99YuJrQpns2o.roa
File: z37jxg-b06zaFoB99YuJrQpns2o.roa (raw, json)
Hash identifier: EL5GcPC15qU3bz/WJ+BqLMWxwNCnMmuL/dQgtZkhDKU=
Subject key identifier: CF:7E:E3:C6:0F:9B:D3:AC:DA:16:80:7D:F5:8B:89:AD:0A:67:B3:6A
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D57
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/z37jxg-b06zaFoB99YuJrQpns2o.roa
Signing time: Thu 03 Oct 2024 15:03:40 +0000
ROA not before: Thu 03 Oct 2024 15:03:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 04:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3415 (0xd57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:03:40 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CF7EE3C60F9BD3ACDA16807DF58B89AD0A67B36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:0b:d4:26:c5:f7:04:07:c2:e9:47:23:00:
8e:84:18:88:b4:be:ae:3d:78:0c:81:87:a3:53:ab:
7f:57:fd:bc:7b:c9:91:f3:0a:59:95:09:f9:65:07:
18:da:6e:78:43:90:ee:63:09:1d:93:8b:60:77:20:
96:d2:9b:d9:a8:83:2b:84:9c:5e:ae:db:d8:a7:c5:
50:38:9e:57:4e:cf:41:30:f5:fb:4d:89:5b:72:76:
b1:e7:b1:7c:27:45:85:71:ae:6d:4c:58:05:7d:b9:
68:39:97:91:a8:2d:3f:c1:b8:cc:28:77:fb:34:cb:
84:f3:1f:86:5c:fb:3b:54:60:3b:f3:d9:d9:68:4d:
1b:6f:1c:ee:39:5e:f4:de:ca:c5:3b:33:15:94:fd:
81:2a:8d:63:d3:16:45:60:0d:dd:98:9f:08:76:34:
bd:43:bf:be:99:c1:78:92:66:cf:cd:8e:95:6c:4a:
ad:9a:c3:d2:8c:00:37:f1:60:c6:6e:87:25:4c:43:
fc:f6:ee:62:f6:23:71:29:1d:e7:f8:f2:0c:0d:14:
15:e1:db:26:3b:55:5c:e7:8f:24:b8:59:0b:1f:3d:
dc:ad:17:49:7c:9a:c9:fc:f6:92:68:84:ea:88:bd:
c5:c6:0d:f8:de:b2:44:1b:af:24:a2:1b:95:0f:33:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:E3:C6:0F:9B:D3:AC:DA:16:80:7D:F5:8B:89:AD:0A:67:B3:6A
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/z37jxg-b06zaFoB99YuJrQpns2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.8.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8d:b1:fa:b9:3c:92:0a:14:83:f2:2c:1f:b9:17:9d:e0:81:
f2:75:10:c6:ad:2b:56:1a:fb:a9:1a:a3:3d:e0:89:5c:b0:17:
0b:bf:86:d4:bd:4d:99:fd:e8:5a:a0:a4:18:45:fd:e2:db:ad:
7d:24:d7:0b:65:57:6f:8f:35:5a:b2:1f:37:42:05:d7:97:66:
64:9f:6e:8a:a7:ac:e6:69:50:07:3a:9f:8a:bd:52:92:65:41:
d3:c4:e8:8c:8e:49:cf:18:d4:3b:b1:9c:61:61:99:0e:fc:16:
8f:af:e2:69:8b:01:47:2a:68:62:9d:5f:c2:48:f9:08:21:23:
e0:e0:9c:2c:65:61:26:3a:b9:6b:95:f6:7c:d3:53:43:57:2d:
fa:3c:ec:50:ed:ba:bb:4c:5d:ed:4c:80:74:2c:56:4d:d1:fd:
5e:6d:ed:13:2d:9b:da:e9:73:4e:c1:9b:d1:70:eb:c8:db:37:
0c:8a:19:da:91:0b:aa:14:25:e0:ce:0f:c4:1d:08:3c:bc:2e:
a3:ef:ac:29:bf:41:bb:ca:91:83:56:6d:3b:27:3c:ac:58:27:
83:d0:a3:53:d4:5c:48:f7:fc:d2:c6:3c:ce:cb:51:1a:e5:54:
60:ac:3d:ce:4c:29:db:e2:c1:2c:9a:a6:01:4f:c4:10:1d:c3:
14:fc:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org