Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/xfktL2rZ499KFeeh-8ILlBQFJ98.roa
File: xfktL2rZ499KFeeh-8ILlBQFJ98.roa (raw, json)
Hash identifier: Jxa10Jc6nQrWQLdvI604j1AJO2VA/vBJVzlnRSJu1pA=
Subject key identifier: C5:F9:2D:2F:6A:D9:E3:DF:4A:15:E7:A1:FB:C2:0B:94:14:05:27:DF
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 072A
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/xfktL2rZ499KFeeh-8ILlBQFJ98.roa
Signing time: Thu 22 Sep 2022 06:14:19 +0000
ROA not before: Thu 22 Sep 2022 06:14:19 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 132203
IP address blocks: 49.51.128.0/19 maxlen: 24
49.51.146.0/23 maxlen: 24
49.51.160.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Sep 22 06:14:19 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=C5F92D2F6AD9E3DF4A15E7A1FBC20B94140527DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:97:1e:c5:e5:8b:da:e7:5f:43:2e:e0:ef:
3f:6e:0d:5e:4c:7f:c9:e3:7f:46:f9:e0:2e:ae:2c:
56:1d:56:f8:cd:c1:69:fb:bf:22:b7:de:cf:f1:76:
49:0d:b9:e4:42:ed:cf:2a:b6:37:29:03:6e:22:1b:
52:8c:4a:d2:85:86:fb:02:fa:76:bd:10:54:9e:2b:
90:2d:8d:76:2e:66:43:54:e9:d5:bb:25:2b:53:fa:
ce:60:b7:67:f4:91:cd:eb:f2:cb:61:28:0a:76:46:
2f:b6:84:55:9e:57:79:59:9e:b8:01:44:b8:8f:51:
bb:06:49:e0:cd:c0:9a:dd:c4:9e:33:05:2d:33:e4:
52:44:98:fb:87:98:7c:e0:55:5d:97:7d:f9:83:40:
a1:a0:ca:4c:e5:60:c5:ea:a2:e3:eb:36:b4:0a:6c:
d1:4b:3b:8b:ac:e4:eb:b9:94:e9:de:44:97:f2:a9:
3a:e9:55:95:52:82:69:00:d5:d4:01:97:29:bc:9a:
f7:bd:7d:6c:81:46:a3:2a:3b:36:96:40:88:6a:8d:
00:86:e4:4c:6b:f2:41:d8:d1:43:32:20:5c:28:a3:
e4:e6:03:40:3e:a0:84:5b:d5:3a:6a:e9:d6:9d:31:
b7:af:9c:4b:0a:1d:5e:d7:04:3e:b8:0b:15:29:cf:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F9:2D:2F:6A:D9:E3:DF:4A:15:E7:A1:FB:C2:0B:94:14:05:27:DF
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/xfktL2rZ499KFeeh-8ILlBQFJ98.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.51.128.0-49.51.175.255
Signature Algorithm: sha256WithRSAEncryption
44:ca:dd:c5:04:9c:08:21:64:b8:9f:dc:3d:95:63:ee:b8:4c:
a5:22:47:2f:e5:72:2b:3a:d7:da:d1:f4:ad:7e:14:21:27:98:
29:68:e5:c7:88:5f:e4:c3:f8:46:e6:ae:a0:47:d6:79:99:4d:
29:e1:62:bb:64:92:97:8b:0a:81:59:d0:4f:90:97:13:5f:ec:
d9:3c:56:6c:fd:92:9d:1d:1d:c3:c9:e6:59:6e:2c:b7:63:d1:
c5:b0:9c:88:2b:b8:31:e3:c9:6a:1d:cb:e2:b6:e4:e8:c8:d6:
87:4f:24:63:ae:ec:26:b8:1d:f5:d2:26:38:dc:ff:eb:f2:00:
ef:fb:bb:3f:54:fa:0b:bb:e5:72:58:79:e5:a6:fc:2d:56:7f:
37:7b:a5:42:8e:b0:02:21:dc:ec:12:87:93:d2:4c:3e:54:8b:
cb:7b:6a:13:51:d0:bf:5b:da:56:be:df:17:32:91:2b:4c:b9:
dc:36:c6:43:d9:22:aa:15:f3:6b:f0:49:4c:18:c0:8b:f2:0b:
d2:e5:c0:41:de:42:39:5e:9a:d3:f2:32:72:be:2f:c0:cc:91:
b0:53:87:78:b2:cf:29:fc:84:d5:2d:b7:af:fb:48:33:50:96:
0d:09:5e:8a:fe:d1:20:fb:d0:0b:2a:89:86:78:d9:be:af:51:
53:1d:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 13:35:16 2023 by rpki-client on console-fra.rpki-client.org