Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/4Fvy2UMlrNzfskqO-YzoMGK8HPM.roa
File: 4Fvy2UMlrNzfskqO-YzoMGK8HPM.roa (raw, json)
Hash identifier: XO98sKCRsLarrXt1UwZwn3AOjeOmn82InvWwyUmgiQc=
Subject key identifier: E0:5B:F2:D9:43:25:AC:DC:DF:B2:4A:8E:F9:8C:E8:30:62:BC:1C:F3
Certificate issuer: /CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
Certificate serial: 04
Authority key identifier: CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/4Fvy2UMlrNzfskqO-YzoMGK8HPM.roa
Signing time: Tue 05 Sep 2023 05:36:35 +0000
ROA not before: Tue 05 Sep 2023 05:36:35 +0000
ROA not after: Wed 04 Sep 2024 05:32:22 +0000
asID: 59078
IP address blocks: 101.48.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 21 Aug 2024 05:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD65DDFFCA490F695E12F3A53EEBAFF0EDA77050
Validity
Not Before: Sep 5 05:36:35 2023 GMT
Not After : Sep 4 05:32:22 2024 GMT
Subject: CN=E05BF2D94325ACDCDFB24A8EF98CE83062BC1CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:b9:c3:0d:c9:28:fd:de:d9:cf:26:6f:11:
e7:c0:97:50:10:5f:39:5b:e0:57:81:53:71:2c:05:
cb:f5:68:40:81:01:47:5c:ab:ba:c3:28:e1:5c:49:
29:01:64:56:f1:0b:f3:8a:36:40:19:b2:1d:b6:76:
4b:97:06:60:7c:ee:ca:80:af:df:60:eb:b1:d6:30:
14:1c:90:f4:5c:de:d0:f6:94:9a:a2:bf:2f:7a:a2:
9c:f4:a4:38:c9:3e:86:7d:cb:1e:a2:f2:93:2f:1b:
69:ad:ec:57:91:32:01:1b:1e:5b:82:0b:56:14:3d:
76:0f:a4:3e:31:3e:a6:4c:6c:f6:78:c9:cc:48:bb:
2b:f7:af:81:d2:4b:5b:88:68:ea:2d:3b:45:50:35:
f0:16:71:b6:d2:ae:6f:8d:c5:56:6a:f6:dc:8a:16:
23:00:21:47:56:ee:1c:2e:41:6a:81:84:fd:37:bc:
c0:ba:90:8f:76:49:cd:fd:ce:6f:b2:1c:b6:29:8b:
bf:0e:be:4f:ff:08:cd:a7:b5:db:68:7a:0a:0b:d9:
8a:c3:64:72:d2:e4:65:bd:bb:e2:2a:db:d6:64:bc:
6a:fe:b8:73:b4:db:78:5f:ba:ef:6f:0e:bd:40:90:
1e:dc:d7:6e:cf:0f:d1:cb:9d:2e:63:a0:03:b7:db:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:F2:D9:43:25:AC:DC:DF:B2:4A:8E:F9:8C:E8:30:62:BC:1C:F3
X509v3 Authority Key Identifier:
keyid:CD:65:DD:FF:CA:49:0F:69:5E:12:F3:A5:3E:EB:AF:F0:ED:A7:70:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/zWXd_8pJD2leEvOlPuuv8O2ncFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zWXd_8pJD2leEvOlPuuv8O2ncFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/4Fvy2UMlrNzfskqO-YzoMGK8HPM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:cc:50:bf:40:0c:1e:57:4c:e6:37:13:8b:0a:84:6c:46:b4:
59:71:c1:be:d9:93:86:45:55:2a:fc:9a:b4:fc:37:6d:34:44:
56:22:67:c8:64:bf:01:15:8d:da:90:72:45:92:e7:1f:ba:11:
b3:88:17:3c:9b:1f:e2:37:ff:ee:74:47:e0:8e:28:84:14:cf:
25:6d:80:50:86:6f:92:af:fd:34:6b:c4:db:c0:95:dd:f3:f3:
48:4a:43:54:3a:21:15:c3:1b:0b:b7:92:21:80:28:5e:37:1f:
02:0f:31:84:50:f7:83:d0:7d:65:56:ef:f4:70:3d:42:b9:94:
78:0a:05:56:77:29:6d:1e:74:64:b2:6d:ee:41:9c:3a:04:06:
35:fc:65:98:54:d2:1b:a7:dc:c5:10:2f:7e:e2:0f:c1:ec:b2:
04:67:d4:7a:3a:5d:a6:40:92:cc:5a:16:97:bf:78:ac:01:ef:
f0:30:77:e2:39:56:02:20:85:ac:a7:04:63:b2:82:58:53:1a:
b8:38:1a:f9:ee:5f:f3:ac:e9:30:59:1f:0a:3c:3f:40:8a:49:
aa:10:0a:15:be:b0:6b:2a:2c:15:49:47:16:7f:92:20:d8:9f:
94:78:74:3c:39:49:4a:6f:7a:88:ab:a7:42:8a:81:e1:73:7c:
85:0e:e4:77
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDY1
RERGRkNBNDkwRjY5NUUxMkYzQTUzRUVCQUZGMEVEQTc3MDUwMB4XDTIzMDkwNTA1
MzYzNVoXDTI0MDkwNDA1MzIyMlowMzExMC8GA1UEAxMoRTA1QkYyRDk0MzI1QUNE
Q0RGQjI0QThFRjk4Q0U4MzA2MkJDMUNGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ5kucMNySj93tnPJm8R58CXUBBfOVvgV4FTcSwFy/VoQIEBR1yr
usMo4VxJKQFkVvEL84o2QBmyHbZ2S5cGYHzuyoCv32DrsdYwFByQ9Fze0PaUmqK/
L3qinPSkOMk+hn3LHqLyky8baa3sV5EyARseW4ILVhQ9dg+kPjE+pkxs9njJzEi7
K/evgdJLW4ho6i07RVA18BZxttKub43FVmr23IoWIwAhR1buHC5BaoGE/Te8wLqQ
j3ZJzf3Ob7IctimLvw6+T/8Izae122h6CgvZisNkctLkZb274irb1mS8av64c7Tb
eF+6728OvUCQHtzXbs8P0cudLmOgA7fbb9cCAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBTgW/LZQyWs3N+ySo75jOgwYrwc8zAfBgNVHSMEGDAWgBTNZd3/ykkPaV4S86U+
66/w7adwUDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83NzUv
eldYZF84cEpEMmxlRXZPbFB1dXY4TzJuY0ZBLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC96V1hkXzhwSkQybGVFdk9sUHV1djhPMm5jRkEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83NzUvNEZ2eTJVTWxyTnpmc2tx
Ty1Zem9NR0s4SFBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AGUwMA0GCSqGSIb3DQEBCwUAA4IBAQCOzFC/QAweV0zmNxOLCoRsRrRZccG+2ZOG
RVUq/Jq0/DdtNERWImfIZL8BFY3akHJFkucfuhGziBc8mx/iN//udEfgjiiEFM8l
bYBQhm+Sr/00a8TbwJXd8/NISkNUOiEVwxsLt5IhgCheNx8CDzGEUPeD0H1lVu/0
cD1CuZR4CgVWdyltHnRksm3uQZw6BAY1/GWYVNIbp9zFEC9+4g/B7LIEZ9R6Ol2m
QJLMWhaXv3isAe/wMHfiOVYCIIWspwRjsoJYUxq4OBr57l/zrOkwWR8KPD9Aikmq
EAoVvrBrKiwVSUcWf5Ig2J+UeHQ8OUlKb3qIq6dCioHhc3yFDuR3
-----END CERTIFICATE-----
Generated at Wed Aug 21 08:03:27 2024 by rpki-client on console-fra.rpki-client.org