Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/nocU3yppve8x0Jv5SSHiPA-bmKA.roa
File: nocU3yppve8x0Jv5SSHiPA-bmKA.roa (raw, json)
Hash identifier: DmQ3vYBJNSnooaGAgvGdFrYT9S8qqJc0VQMR593ufT8=
Subject key identifier: 9E:87:14:DF:2A:69:BD:EF:31:D0:9B:F9:49:21:E2:3C:0F:9B:98:A0
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1004
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/nocU3yppve8x0Jv5SSHiPA-bmKA.roa
Signing time: Fri 19 May 2023 05:55:20 +0000
ROA not before: Fri 19 May 2023 05:55:20 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 23724
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4100 (0x1004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: May 19 05:55:20 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9E8714DF2A69BDEF31D09BF94921E23C0F9B98A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:0c:89:f3:04:46:fe:9c:9f:77:5e:30:c4:
b1:e0:ad:03:35:b3:3b:b6:6e:f1:a5:ee:72:61:6a:
ec:75:ca:fd:06:0d:aa:97:54:6b:5a:78:0e:90:59:
40:2a:b1:f7:d4:af:29:38:07:ef:ee:e2:e1:83:26:
82:8b:c0:c3:0c:76:8d:de:e7:66:cd:55:f1:e4:2e:
4f:99:52:d3:e6:4f:f0:e7:ce:4d:03:6c:a0:e9:7d:
97:b8:37:2b:75:82:ed:fd:bc:e4:48:35:bf:48:4c:
69:d6:a7:46:96:6b:94:f7:3e:a3:1a:d1:1f:c6:ba:
0a:92:d4:ee:41:d4:a3:07:d1:bf:2b:ae:e7:44:f8:
9e:56:50:bf:87:16:c1:74:b4:c3:35:c3:9c:71:6d:
a0:64:20:b9:fc:15:ee:10:b1:f6:54:72:50:b8:f9:
62:95:3f:0a:df:6d:a2:00:06:63:8f:57:49:52:03:
c7:c1:b8:d9:ce:96:9c:19:7c:47:00:44:7f:d4:50:
d5:6c:bc:17:76:ea:96:94:05:c3:90:89:57:02:d1:
15:4c:55:a5:23:76:96:b9:4a:70:ab:4d:c7:9a:55:
e8:b2:5f:1c:53:1b:1c:ae:2d:30:47:8f:4a:92:2f:
2a:91:04:3d:3a:ea:2f:72:c8:02:b3:c7:d9:c5:de:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:14:DF:2A:69:BD:EF:31:D0:9B:F9:49:21:E2:3C:0F:9B:98:A0
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/nocU3yppve8x0Jv5SSHiPA-bmKA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
40:36:b5:92:cc:ce:54:2f:21:e4:30:91:e3:3a:41:88:f4:c6:
c1:41:be:d6:da:7b:fd:0c:35:56:6d:65:91:bc:d0:4d:cd:71:
ae:98:30:73:49:af:e5:ae:11:72:db:e5:38:9e:01:bf:d3:0c:
47:05:c7:48:9f:82:26:28:31:6a:e6:51:77:cc:6a:80:83:94:
b4:dc:66:2b:39:12:9d:66:dd:9a:9e:1d:52:41:4b:bf:27:16:
39:53:ad:36:ff:74:86:5a:bb:d7:fa:01:4b:83:b3:79:1d:a0:
9a:fc:57:ea:76:66:c0:b6:ea:a5:cf:1d:94:fe:b2:98:ba:c1:
6d:2f:34:cc:a6:04:f8:3a:8c:80:09:ec:bc:46:6e:9d:53:1f:
e9:51:80:9e:77:23:58:f4:95:15:1a:63:7d:5d:8a:91:47:22:
f4:e8:d0:02:b1:5d:16:25:07:2d:bf:e9:0f:63:b3:b3:65:3e:
66:a8:22:a6:4e:b1:3b:c0:a4:9a:4a:f5:0e:f9:9c:74:d3:1e:
c1:e3:c3:91:14:6f:8c:0b:24:20:68:83:12:ac:d3:96:a7:86:
bf:d4:16:33:77:44:5e:18:2b:2f:d0:2b:f5:82:cf:d5:59:9d:
ca:c0:d9:fd:f9:8f:66:5f:4b:50:c7:7a:7b:62:1d:08:8f:41:
98:76:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org