Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/o6T8fL_RGfEVbJN6wu0a3ZxefuY.roa
File: o6T8fL_RGfEVbJN6wu0a3ZxefuY.roa (raw, json)
Hash identifier: 3FPdhlqYYSiGz7pkwJ4lr9pEyHuyvvduGx53eGiL65E=
Subject key identifier: A3:A4:FC:7C:BF:D1:19:F1:15:6C:93:7A:C2:ED:1A:DD:9C:5E:7E:E6
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 1006
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/o6T8fL_RGfEVbJN6wu0a3ZxefuY.roa
Signing time: Fri 19 May 2023 05:55:21 +0000
ROA not before: Fri 19 May 2023 05:55:21 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 56282
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4102 (0x1006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: May 19 05:55:21 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=A3A4FC7CBFD119F1156C937AC2ED1ADD9C5E7EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:9f:87:cc:6a:12:6b:3c:0f:36:be:35:f2:
75:0b:f0:a0:af:19:03:81:d7:42:04:85:46:5a:cf:
96:52:7d:21:9b:71:9a:42:de:40:1a:a9:3a:fe:f7:
90:54:ba:f7:ec:9d:82:77:88:4e:2a:bd:8c:cb:68:
1b:dc:12:28:38:6e:04:c5:55:24:4d:28:34:03:4b:
7c:82:3b:34:59:28:25:49:a5:45:f8:97:9f:9c:c5:
f3:7d:48:0c:cf:f4:80:04:bb:87:a9:5a:ae:d8:20:
d6:b8:24:7e:f8:2c:68:d2:ac:9f:da:f6:e7:05:3a:
3f:16:31:b8:e1:db:d2:59:78:e7:8a:67:83:e8:b5:
8f:31:24:16:4e:fe:a5:ef:20:bc:ca:1a:94:5b:70:
08:1c:dc:8f:45:11:e3:5f:a2:af:4a:42:53:af:bd:
10:33:31:fd:5c:29:25:f3:3d:20:2d:18:b5:c7:ca:
31:05:24:f7:f2:6d:0a:0f:d0:08:63:ef:cd:50:0f:
11:36:69:79:b8:ef:f8:98:b7:ec:83:c8:f4:cd:30:
64:68:87:1c:30:8c:56:6d:25:a8:16:91:68:07:ce:
b2:0b:30:ae:00:f4:81:90:d7:7f:ea:4a:04:aa:16:
0a:41:3d:bb:71:67:b8:b5:da:6d:48:29:35:5c:63:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A4:FC:7C:BF:D1:19:F1:15:6C:93:7A:C2:ED:1A:DD:9C:5E:7E:E6
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/o6T8fL_RGfEVbJN6wu0a3ZxefuY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
34:50:67:31:aa:59:09:0b:f0:22:d1:5f:dd:59:d6:df:9e:d5:
60:36:1c:f9:b9:4a:c2:95:59:f5:07:4f:4a:71:4b:94:d4:14:
31:d2:f7:5e:86:9f:a4:34:11:da:28:81:1e:cd:67:6c:bd:e8:
85:6a:00:11:13:59:91:24:d8:1f:f0:b6:3c:56:8e:1b:69:bd:
65:99:14:a9:dd:d5:d9:4a:66:d9:d5:33:f9:73:b1:5d:ab:7f:
c2:03:25:47:18:a1:91:7c:55:9f:e4:70:ee:ec:58:cb:dc:02:
1f:02:b5:e1:0a:db:4c:85:a8:21:66:da:b9:23:79:58:ea:13:
30:bf:8f:ab:ed:bc:dd:46:05:b7:6b:21:76:96:ce:05:5f:10:
9e:e6:dd:a5:e3:43:a6:ef:7c:de:95:a9:20:f6:c2:27:ce:0d:
35:a9:5d:77:99:fb:6e:cd:42:e5:6f:f4:9e:f9:5b:f9:39:73:
7c:e8:36:2a:92:60:7e:e2:6c:3f:52:92:ec:8c:c1:a5:06:f7:
98:15:07:5b:23:70:64:3e:c5:23:81:3c:2e:29:0c:29:f5:e2:
a6:c0:76:da:7a:29:0d:c3:36:6e:52:1f:b7:87:ad:df:18:11:
66:f3:d2:2f:bc:93:92:8f:2d:36:f2:80:b5:85:58:50:b9:a4:
24:40:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org