Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/7eGxQevAiWXaxP9xTFEFOb_smx8.roa
File: 7eGxQevAiWXaxP9xTFEFOb_smx8.roa (raw, json)
Hash identifier: aDbu6mprcqz/d7A9Z4+2y/+URDfUB+tG9xhjH6GCsG4=
Subject key identifier: ED:E1:B1:41:EB:C0:89:65:DA:C4:FF:71:4C:51:05:39:BF:EC:9B:1F
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 0E39
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7eGxQevAiWXaxP9xTFEFOb_smx8.roa
Signing time: Fri 19 May 2023 05:53:36 +0000
ROA not before: Fri 19 May 2023 05:53:36 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 56040
IP address blocks: 43.255.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: May 19 05:53:36 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=EDE1B141EBC08965DAC4FF714C510539BFEC9B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:04:fb:61:be:ac:4b:ba:27:92:8e:d4:d8:
23:3f:15:38:3d:75:25:f9:40:37:b3:2e:d0:66:91:
0a:40:cb:48:14:2f:d2:4c:28:cd:9b:90:a2:97:e5:
3e:25:cc:3b:d9:05:b2:d7:76:02:9a:32:cf:eb:9e:
f4:8c:95:04:c2:a8:41:e2:57:9b:0a:88:b6:c9:0b:
e7:94:81:62:d1:53:73:45:f2:94:cb:c2:e1:49:a0:
ad:e8:33:36:88:64:4f:d8:a8:41:1b:b0:b4:2a:06:
3e:68:b8:99:29:29:01:b3:87:8d:5f:91:33:1b:87:
f5:0c:5e:d0:72:87:05:2b:d4:61:8b:68:9d:a8:81:
a6:8a:e2:26:73:13:da:fe:51:8b:b9:6d:32:06:9d:
57:f8:1e:74:6d:1e:0e:63:b1:2c:46:4e:56:35:a4:
ad:ee:f0:d9:10:4b:05:cf:d6:1e:79:53:e3:ab:16:
a7:a6:0a:94:25:25:bb:b6:ea:84:3b:da:ae:b6:4e:
3a:b7:b7:d3:ae:62:b1:7d:6d:f7:d5:f8:29:ba:1b:
f1:da:bd:ed:47:dc:da:9a:d0:71:ea:a4:a8:53:76:
96:13:02:5e:1c:f7:56:58:8c:c5:fa:7d:29:4d:61:
f6:50:59:80:39:d6:d1:17:87:3f:73:8d:e6:ef:2c:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:B1:41:EB:C0:89:65:DA:C4:FF:71:4C:51:05:39:BF:EC:9B:1F
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7eGxQevAiWXaxP9xTFEFOb_smx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
21:40:41:5a:02:e5:de:c0:e1:e9:49:ec:a0:6e:dc:5c:9a:b4:
4e:5f:a4:50:35:c6:6f:92:11:59:f9:45:96:bb:ca:35:d0:7e:
1a:e2:4d:57:2f:6e:c9:06:d3:39:ad:72:57:fe:b2:45:88:01:
a3:ce:01:b3:73:bd:59:dc:7e:13:19:ef:7d:37:f9:a8:5c:b5:
18:f4:67:80:92:6d:ac:af:45:32:37:33:68:9d:b7:18:01:8b:
b1:a4:14:6e:73:27:ef:3b:fb:66:f7:6f:ed:ec:85:a9:ab:24:
87:f7:ca:a4:f0:d1:e1:d9:3c:0b:f6:d8:d4:7d:6c:22:24:36:
63:58:14:33:ba:4b:c9:db:f8:68:a7:cb:56:c7:66:7e:a5:e0:
8e:31:ca:01:60:6f:51:f8:b6:3d:dc:5b:c8:60:1a:98:23:a2:
fd:03:de:17:c9:56:47:a1:cd:8f:7c:56:0e:22:36:2e:8e:98:
d2:55:67:85:4d:37:6d:16:d3:d1:e3:44:fe:c1:27:72:c6:fa:
69:cf:81:80:4c:06:3d:9c:b8:d2:81:62:84:66:01:4f:63:32:
21:c3:3b:60:10:8a:fb:9b:e0:a6:b5:3c:8a:29:76:25:4c:85:
14:58:b0:b8:da:26:f8:0b:a9:7b:b9:33:b2:04:49:30:e0:b2:
ed:8b:6f:15
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4
ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yMzA1MTkw
NTUzMzZaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEVERTFCMTQxRUJDMDg5
NjVEQUM0RkY3MTRDNTEwNTM5QkZFQzlCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNQwT7Yb6sS7onko7U2CM/FTg9dSX5QDezLtBmkQpAy0gUL9JM
KM2bkKKX5T4lzDvZBbLXdgKaMs/rnvSMlQTCqEHiV5sKiLbJC+eUgWLRU3NF8pTL
wuFJoK3oMzaIZE/YqEEbsLQqBj5ouJkpKQGzh41fkTMbh/UMXtByhwUr1GGLaJ2o
gaaK4iZzE9r+UYu5bTIGnVf4HnRtHg5jsSxGTlY1pK3u8NkQSwXP1h55U+OrFqem
CpQlJbu26oQ72q62Tjq3t9OuYrF9bffV+Cm6G/Have1H3Nqa0HHqpKhTdpYTAl4c
91ZYjMX6fSlNYfZQWYA51tEXhz9zjebvLFB3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU7eGxQevAiWXaxP9xTFEFOb/smx8wHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG
8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx
LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxLzdlR3hRZXZBaVdYYXhQ
OXhURkVGT2Jfc214OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIr/9QwDQYJKoZIhvcNAQELBQADggEBACFAQVoC5d7A4elJ7KBu3FyatE5fpFA1
xm+SEVn5RZa7yjXQfhriTVcvbskG0zmtclf+skWIAaPOAbNzvVncfhMZ7303+ahc
tRj0Z4CSbayvRTI3M2idtxgBi7GkFG5zJ+87+2b3b+3shamrJIf3yqTw0eHZPAv2
2NR9bCIkNmNYFDO6S8nb+Giny1bHZn6l4I4xygFgb1H4tj3cW8hgGpgjov0D3hfJ
VkehzY98Vg4iNi6OmNJVZ4VNN20W09HjRP7BJ3LG+mnPgYBMBj2cuNKBYoRmAU9j
MiHDO2AQivub4Ka1PIopdiVMhRRYsLjaJvgLqXu5M7IESTDgsu2LbxU=
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:25:16 2024 by rpki-client on console-fra.rpki-client.org