Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/BXPvJyit5qxlN1jC2um-3N_ro5g.roa
File: BXPvJyit5qxlN1jC2um-3N_ro5g.roa (raw, json)
Hash identifier: 0M8cfSKl0GDAa2o2rBOwUhltoFi/GdtoWSPkxkAdQ9k=
Subject key identifier: 05:73:EF:27:28:AD:E6:AC:65:37:58:C2:DA:E9:BE:DC:DF:EB:A3:98
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 10BF
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/BXPvJyit5qxlN1jC2um-3N_ro5g.roa
Signing time: Sun 25 Jun 2023 09:02:46 +0000
ROA not before: Sun 25 Jun 2023 09:02:46 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 56282
IP address blocks: 211.155.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 May 2024 02:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jun 25 09:02:46 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0573EF2728ADE6AC653758C2DAE9BEDCDFEBA398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:5d:fc:39:e3:ab:94:4a:45:40:85:54:c6:
ad:49:9a:e7:d3:de:d8:e0:fb:4a:6b:f3:87:98:83:
fc:3e:bb:a8:76:a8:3e:07:5d:16:08:56:6e:ff:94:
24:26:5c:f7:d2:84:9e:10:de:f0:74:8f:9d:62:9e:
6b:fc:82:d6:e4:0d:c7:af:e8:21:3b:de:bd:81:9b:
dd:68:51:16:e5:a8:a8:1e:43:b0:74:b6:f7:23:26:
b1:b4:56:1c:d5:93:74:d6:89:77:05:58:5e:37:1a:
8f:83:38:6b:fc:7f:c6:39:c6:ad:83:1d:45:cc:28:
4d:1c:ce:15:0a:8d:f1:b0:b8:e2:e3:d2:29:ec:39:
14:a3:91:bc:ac:cd:99:d0:86:13:01:d3:b9:66:fe:
a6:65:ae:47:72:4c:43:d7:4c:5a:87:da:d2:02:ef:
73:a3:ef:34:4b:bc:d1:b8:e0:6e:de:35:ee:98:d4:
18:17:ee:0b:0d:7c:73:9f:18:c2:e3:77:26:68:48:
5e:4e:e2:ef:09:fe:0d:fd:a9:99:38:39:f0:19:a9:
2c:05:4e:23:03:fd:0e:65:bd:8e:f1:8d:5c:1f:df:
4f:9f:77:50:bc:22:1a:76:7c:9c:62:a5:47:ea:54:
1a:9b:b6:07:44:e3:5d:ec:a7:31:8c:a4:3f:7a:43:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:EF:27:28:AD:E6:AC:65:37:58:C2:DA:E9:BE:DC:DF:EB:A3:98
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/BXPvJyit5qxlN1jC2um-3N_ro5g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:52:1e:b8:01:4c:79:d6:12:16:d4:89:7d:a4:b5:10:03:13:
86:ac:8a:d9:94:6f:1c:16:77:c6:90:f9:4d:47:37:dc:f9:1a:
f5:3d:b2:64:8f:15:d5:48:35:5d:86:78:eb:d0:0f:4f:fa:a3:
88:59:d7:53:16:d9:e4:5b:18:e3:45:c0:cc:14:d3:e5:2e:5e:
61:81:72:03:65:18:97:1d:2d:7c:ce:ee:e8:7c:e5:4c:cc:2f:
3e:d5:cf:1c:c0:b6:af:bf:ca:e9:31:d8:aa:1c:bc:58:bb:d6:
85:82:be:aa:ed:c0:39:0d:06:a0:e5:22:3f:65:25:e3:5a:aa:
4d:97:e5:e0:10:db:0b:14:34:73:1d:08:db:c9:43:9c:da:68:
b3:e6:7a:c6:d7:9a:7d:89:eb:85:7f:06:3d:c7:a5:fe:1b:89:
ff:06:33:03:7d:9f:a4:8a:d5:23:35:39:8d:c8:ad:af:3b:15:
c2:c4:1b:dc:3b:75:bc:a2:4b:c1:77:d5:44:54:88:69:73:bf:
d7:35:6a:2e:da:66:29:49:ea:55:b6:0c:df:29:69:3c:57:71:
0a:ee:cb:c7:fe:c7:87:c9:cc:8e:3a:7e:6c:a9:2a:09:96:bc:
e8:93:19:ed:40:90:08:89:20:09:32:8c:a3:60:60:5e:bd:9e:
97:33:76:66
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF
NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yMzA2MjUw
OTAyNDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDA1NzNFRjI3MjhBREU2
QUM2NTM3NThDMkRBRTlCRURDREZFQkEzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDA138OeOrlEpFQIVUxq1JmufT3tjg+0pr84eYg/w+u6h2qD4H
XRYIVm7/lCQmXPfShJ4Q3vB0j51inmv8gtbkDcev6CE73r2Bm91oURblqKgeQ7B0
tvcjJrG0VhzVk3TWiXcFWF43Go+DOGv8f8Y5xq2DHUXMKE0czhUKjfGwuOLj0ins
ORSjkbyszZnQhhMB07lm/qZlrkdyTEPXTFqH2tIC73Oj7zRLvNG44G7eNe6Y1BgX
7gsNfHOfGMLjdyZoSF5O4u8J/g39qZk4OfAZqSwFTiMD/Q5lvY7xjVwf30+fd1C8
Ihp2fJxipUfqVBqbtgdE413spzGMpD96QwjtAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUBXPvJyit5qxlN1jC2um+3N/ro5gwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow
7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx
L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL0JYUHZKeWl0NXF4bE4x
akMydW0tM05fcm81Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTm1wwDQYJKoZIhvcNAQELBQADggEBAKJSHrgBTHnWEhbUiX2ktRADE4asitmU
bxwWd8aQ+U1HN9z5GvU9smSPFdVINV2GeOvQD0/6o4hZ11MW2eRbGONFwMwU0+Uu
XmGBcgNlGJcdLXzO7uh85UzMLz7VzxzAtq+/yukx2KocvFi71oWCvqrtwDkNBqDl
Ij9lJeNaqk2X5eAQ2wsUNHMdCNvJQ5zaaLPmesbXmn2J64V/Bj3Hpf4bif8GMwN9
n6SK1SM1OY3Ira87FcLEG9w7dbyiS8F31URUiGlzv9c1ai7aZilJ6lW2DN8paTxX
cQruy8f+x4fJzI46fmypKgmWvOiTGe1AkAiJIAkyjKNgYF69npczdmY=
-----END CERTIFICATE-----
Generated at Fri May 24 04:47:34 2024 by rpki-client on console-ams.rpki-client.org