Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/imtQ5CML-7uCc4FhkSRQ3O6OxNE.roa
File: imtQ5CML-7uCc4FhkSRQ3O6OxNE.roa (raw, json)
Hash identifier: y8Xyo93Z4BcNF5Bt8F7pIsbtdanWXq48e+Wr9XTR3j0=
Subject key identifier: 8A:6B:50:E4:23:0B:FB:BB:82:73:81:61:91:24:50:DC:EE:8E:C4:D1
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 072B
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/imtQ5CML-7uCc4FhkSRQ3O6OxNE.roa
Signing time: Thu 22 Sep 2022 06:14:19 +0000
ROA not before: Thu 22 Sep 2022 06:14:19 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 45090
IP address blocks: 124.220.0.0/14 maxlen: 24
175.178.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Sep 22 06:14:19 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=8A6B50E4230BFBBB82738161912450DCEE8EC4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:d2:f8:d9:3d:ed:47:da:c5:ed:e6:ba:fe:
11:b8:d2:fc:01:88:7b:33:4b:86:e0:8c:8e:4c:62:
2e:12:cf:da:0d:a8:dc:2e:05:cf:6b:93:81:c0:bf:
51:3e:b1:9c:b2:32:58:41:4f:45:c6:cf:59:bd:15:
d8:42:5e:17:65:f1:02:71:c0:5b:1c:be:1e:b8:cc:
d2:f2:6c:bb:b4:5c:22:57:42:d6:0f:65:08:21:87:
7b:82:07:15:4c:5e:09:10:56:39:c4:33:7b:eb:af:
e7:07:1b:d9:ec:ab:6f:5c:88:23:2b:60:a6:88:79:
2d:26:6c:a1:8c:aa:84:ce:db:8d:a0:2a:31:d3:5e:
7e:4b:1c:9d:b7:33:0b:4d:59:fc:d3:d0:15:8e:c8:
24:3d:d4:bc:04:e5:73:46:65:61:07:8d:69:a1:13:
03:ff:c5:39:de:f1:d9:70:cc:19:01:82:62:42:ff:
64:6b:7d:f8:5f:48:97:19:51:f9:3b:b4:02:3d:7c:
a6:bc:2d:0f:d1:0f:88:75:08:7f:c6:16:a5:22:93:
f6:0c:05:69:ba:ce:77:fe:4a:bf:e2:c9:60:57:aa:
79:fd:c7:9b:9f:9e:fd:54:03:f8:cd:d3:38:7d:a6:
0d:ff:32:04:19:b2:60:20:7b:8c:09:dd:5e:97:89:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:50:E4:23:0B:FB:BB:82:73:81:61:91:24:50:DC:EE:8E:C4:D1
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/imtQ5CML-7uCc4FhkSRQ3O6OxNE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.220.0.0/14
175.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:29:0e:76:ce:5f:8c:bf:40:7b:f0:1b:cf:a9:5e:7c:b8:b6:
65:0c:7d:e4:f8:83:57:e2:fa:d4:ec:5d:9f:a2:b3:e6:df:e8:
80:68:79:f4:e1:fc:f6:3e:a7:3f:80:1b:2d:9d:3f:3a:0d:f3:
3f:8f:02:d7:78:22:8b:57:de:27:f9:b5:e1:34:4f:89:40:2a:
aa:c6:7d:70:7a:e1:be:2a:1d:33:7b:23:ea:47:39:c9:c9:d5:
3b:11:68:cd:ee:8f:f6:01:24:42:64:ed:83:bc:9c:07:32:9d:
77:4e:32:67:a1:17:70:1b:c2:9c:89:1c:4c:c8:5f:df:38:86:
e8:4e:96:77:c9:1e:49:1b:59:57:52:29:b2:89:eb:cd:46:dd:
0c:57:e5:be:92:25:0f:b5:62:38:10:bf:45:46:51:82:52:17:
4b:de:34:db:db:ff:78:c9:81:a3:49:93:a9:55:28:56:50:a5:
f7:d0:fe:1c:1d:e0:7b:71:d5:d8:d3:88:ec:df:14:d0:08:c9:
42:52:3d:8a:ea:a0:be:4b:9d:4d:19:94:f7:67:66:53:e0:79:
35:72:8b:94:eb:fd:7c:7d:a1:e4:bb:89:06:e6:c6:1a:d2:b0:
63:b6:c0:9c:20:6a:9a:99:30:04:5e:16:a6:f8:bd:0c:cc:2f:
bd:10:aa:db
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICByswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE
QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yMjA5MjIw
NjE0MTlaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDhBNkI1MEU0MjMwQkZC
QkI4MjczODE2MTkxMjQ1MERDRUU4RUM0RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClANL42T3tR9rF7ea6/hG40vwBiHszS4bgjI5MYi4Sz9oNqNwu
Bc9rk4HAv1E+sZyyMlhBT0XGz1m9FdhCXhdl8QJxwFscvh64zNLybLu0XCJXQtYP
ZQghh3uCBxVMXgkQVjnEM3vrr+cHG9nsq29ciCMrYKaIeS0mbKGMqoTO242gKjHT
Xn5LHJ23MwtNWfzT0BWOyCQ91LwE5XNGZWEHjWmhEwP/xTne8dlwzBkBgmJC/2Rr
ffhfSJcZUfk7tAI9fKa8LQ/RD4h1CH/GFqUik/YMBWm6znf+Sr/iyWBXqnn9x5uf
nv1UA/jN0zh9pg3/MgQZsmAge4wJ3V6Xidm5AgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUimtQ5CML+7uCc4FhkSRQ3O6OxNEwHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i
OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2
L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L2ltdFE1Q01MLTd1Q2M0
RmhrU1JRM082T3hORS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD
AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQBAKQ52zl+Mv0B78BvPqV58uLZl
DH3k+INX4vrU7F2forPm3+iAaHn04fz2Pqc/gBstnT86DfM/jwLXeCKLV94n+bXh
NE+JQCqqxn1weuG+Kh0zeyPqRznJydU7EWjN7o/2ASRCZO2DvJwHMp13TjJnoRdw
G8KciRxMyF/fOIboTpZ3yR5JG1lXUimyievNRt0MV+W+kiUPtWI4EL9FRlGCUhdL
3jTb2/94yYGjSZOpVShWUKX30P4cHeB7cdXY04js3xTQCMlCUj2K6qC+S51NGZT3
Z2ZT4Hk1couU6/18faHku4kG5sYa0rBjtsCcIGqamTAEXham+L0MzC+9EKrb
-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org