Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/T0t8fkwciDBU-NZhIaowjSjG-Lc.roa
File: T0t8fkwciDBU-NZhIaowjSjG-Lc.roa (raw, json)
Hash identifier: bSMF5VxzLTjLFkwa0+d6VcJoJx4AJT2Z2urTFyopQmc=
Subject key identifier: 4F:4B:7C:7E:4C:1C:88:30:54:F8:D6:61:21:AA:30:8D:28:C6:F8:B7
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 77
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T0t8fkwciDBU-NZhIaowjSjG-Lc.roa
Signing time: Thu 03 Nov 2022 04:55:44 +0000
ROA not before: Thu 03 Nov 2022 04:55:44 +0000
ROA not after: Wed 11 Oct 2023 01:28:10 +0000
asID: 23853
IP address blocks: 211.147.79.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Nov 3 04:55:44 2022 GMT
Not After : Oct 11 01:28:10 2023 GMT
Subject: CN=4F4B7C7E4C1C883054F8D66121AA308D28C6F8B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:8c:0d:63:73:a7:29:48:62:a1:bb:b8:b8:
b5:b7:19:6a:de:18:2f:87:4e:e8:76:03:79:01:35:
77:ce:2f:35:69:15:91:e9:62:65:57:06:a1:cb:54:
f8:86:fc:5c:6d:94:a5:c4:ea:b8:56:fc:9d:0f:df:
e2:69:5c:9f:ca:bb:06:56:90:c5:ab:59:42:f8:45:
51:ad:77:48:4a:00:ee:40:12:98:85:92:b7:8d:2e:
a1:94:f9:eb:12:2d:04:ee:4f:5f:30:72:85:ca:cd:
86:e2:9b:91:95:1f:64:aa:12:06:3d:e6:de:8f:17:
46:53:98:18:55:78:b0:98:5b:c8:c8:77:ad:97:fd:
1d:ed:b0:2b:02:5e:b5:74:e3:44:a4:d9:44:c7:95:
77:ec:35:7c:00:d6:56:6b:96:ca:71:05:eb:e0:b3:
58:3e:de:0e:c3:8a:6e:ed:b6:89:bf:11:36:f3:35:
1b:71:a1:5a:d0:e3:fc:49:3c:90:71:e3:92:e6:7c:
c7:08:22:d0:8c:4a:c1:10:5b:85:16:9f:48:d5:80:
f9:34:fa:78:1a:a5:4a:90:4e:19:33:08:4f:5a:9d:
6b:67:67:b6:1b:b6:d5:1d:11:62:c8:4d:95:79:e4:
46:72:a9:52:6c:47:c6:ce:2b:d5:25:d1:fc:56:e3:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:7C:7E:4C:1C:88:30:54:F8:D6:61:21:AA:30:8D:28:C6:F8:B7
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/T0t8fkwciDBU-NZhIaowjSjG-Lc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.147.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fc:95:16:55:23:4c:f2:75:74:75:06:7f:3c:f2:4e:0e:81:
41:dc:b2:dd:25:06:e9:9e:96:bd:40:a7:66:6d:ef:a3:1d:ce:
32:be:7e:76:34:8e:61:e9:c9:12:11:68:a8:30:40:5f:e2:14:
e2:98:7d:07:b8:89:7e:20:ad:f8:45:e5:c6:44:b8:6d:53:f6:
30:83:dc:d0:26:7b:d9:58:39:8d:8f:ce:d0:d3:ea:1c:93:48:
2e:95:25:9b:e2:60:bd:45:f7:46:65:c3:f0:38:e1:94:d0:aa:
71:12:4e:ad:57:82:76:94:93:20:9e:89:f0:e9:c7:c0:2b:7f:
ac:77:c5:87:c0:8f:fd:76:55:71:39:49:e4:69:cf:10:56:df:
c7:2f:0c:ca:62:a4:d2:03:76:34:e6:f9:ef:10:42:c8:84:ff:
2f:73:f9:57:6d:6c:80:98:f1:e3:fb:e0:2b:b9:03:c5:61:8d:
60:1a:fd:61:49:43:b5:81:42:00:60:d5:7b:bf:7f:4f:ac:dd:
e2:b1:b9:01:14:9d:16:fe:71:5f:57:ee:53:cc:ee:6d:64:a8:
d1:03:46:0f:6c:17:c6:6d:6d:3b:df:4b:c2:7b:01:65:d7:8e:
81:f0:4b:3e:ac:cb:43:d3:8c:b0:7e:cd:7f:c6:11:9e:c2:f2:
6c:f9:bc:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODI0
QzU1NTIyOEIyOEI2OThEREU3N0JDMUFERDBFMjgwN0I4NkI5MB4XDTIyMTEwMzA0
NTU0NFoXDTIzMTAxMTAxMjgxMFowMzExMC8GA1UEAxMoNEY0QjdDN0U0QzFDODgz
MDU0RjhENjYxMjFBQTMwOEQyOEM2RjhCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALh5jA1jc6cpSGKhu7i4tbcZat4YL4dO6HYDeQE1d84vNWkVkeli
ZVcGoctU+Ib8XG2UpcTquFb8nQ/f4mlcn8q7BlaQxatZQvhFUa13SEoA7kASmIWS
t40uoZT56xItBO5PXzByhcrNhuKbkZUfZKoSBj3m3o8XRlOYGFV4sJhbyMh3rZf9
He2wKwJetXTjRKTZRMeVd+w1fADWVmuWynEF6+CzWD7eDsOKbu22ib8RNvM1G3Gh
WtDj/Ek8kHHjkuZ8xwgi0IxKwRBbhRafSNWA+TT6eBqlSpBOGTMIT1qda2dnthu2
1R0RYshNlXnkRnKpUmxHxs4r1SXR/FbjetECAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBRPS3x+TByIMFT41mEhqjCNKMb4tzAfBgNVHSMEGDAWgBSYJMVVIosotpjd53vB
rdDigHuGuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9t
Q1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL21DVEZWU0tMS0xhWTNlZDd3YTNRNG9CN2hyay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY1L1QwdDhma3djaURCVS1OWmhJ
YW93alNqRy1MYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
k08wDQYJKoZIhvcNAQELBQADggEBAKf8lRZVI0zydXR1Bn888k4OgUHcst0lBume
lr1Ap2Zt76MdzjK+fnY0jmHpyRIRaKgwQF/iFOKYfQe4iX4grfhF5cZEuG1T9jCD
3NAme9lYOY2PztDT6hyTSC6VJZviYL1F90Zlw/A44ZTQqnESTq1XgnaUkyCeifDp
x8Arf6x3xYfAj/12VXE5SeRpzxBW38cvDMpipNIDdjTm+e8QQsiE/y9z+VdtbICY
8eP74Cu5A8VhjWAa/WFJQ7WBQgBg1Xu/f0+s3eKxuQEUnRb+cV9X7lPM7m1kqNED
Rg9sF8ZtbTvfS8J7AWXXjoHwSz6sy0PTjLB+zX/GEZ7C8mz5vK4=
-----END CERTIFICATE-----
Generated at Wed Sep 27 02:09:40 2023 by rpki-client on console-ams.rpki-client.org