Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/EoMLZcAe9RGMoKi80wU-5TMZ7SI.roa
File: EoMLZcAe9RGMoKi80wU-5TMZ7SI.roa (raw, json)
Hash identifier: d6QfpE5e7wLw0vv1ov4U7yD7hNEVLYPLyS/YeZr0bvQ=
Subject key identifier: 12:83:0B:65:C0:1E:F5:11:8C:A0:A8:BC:D3:05:3E:E5:33:19:ED:22
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1146
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/EoMLZcAe9RGMoKi80wU-5TMZ7SI.roa
Signing time: Wed 24 May 2023 03:53:33 +0000
ROA not before: Wed 24 May 2023 03:53:33 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 135377
IP address blocks: 106.75.192.0/24 maxlen: 24
106.75.193.0/24 maxlen: 24
106.75.194.0/24 maxlen: 24
106.75.195.0/24 maxlen: 24
106.75.196.0/24 maxlen: 24
106.75.197.0/24 maxlen: 24
106.75.198.0/24 maxlen: 24
106.75.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 01:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4422 (0x1146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: May 24 03:53:33 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=12830B65C01EF5118CA0A8BCD3053EE53319ED22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:67:6c:09:e8:69:18:6b:6e:1c:26:1d:72:
25:3b:bc:62:d8:bb:ac:73:f9:ac:c9:c9:05:49:d5:
b9:c9:dc:e5:ee:b8:64:a5:04:6c:ed:e8:ac:89:e0:
3d:de:ae:aa:2d:71:d4:d6:e1:32:56:30:21:59:23:
1d:3d:10:81:84:e7:a5:4d:c7:ec:03:c5:c1:b5:1c:
77:b5:3f:37:9d:3d:67:d1:f1:2f:c1:99:f8:b0:32:
15:6e:82:b3:3d:61:72:06:c8:f7:1e:ae:90:28:58:
7b:24:24:3f:7d:e6:11:d8:b1:17:b1:23:e1:26:08:
49:96:1e:46:9b:fd:e9:68:e9:00:a6:bc:1e:8a:3e:
ac:7e:32:07:71:fe:96:9e:ff:28:51:76:b4:53:f0:
5a:7b:c2:93:2d:5b:c1:37:ec:66:dd:c1:4c:8a:7c:
7c:f2:f0:53:25:5a:b3:56:8a:ab:56:c8:b9:6e:8c:
53:af:ed:16:f9:0d:a1:2d:e5:d3:ec:a9:fc:65:38:
5a:12:0e:27:ce:70:2a:f6:45:b2:4c:a1:a5:ae:61:
29:a9:56:63:81:e6:7f:38:9b:8a:90:01:9a:c2:36:
1d:a1:a8:fd:59:2c:12:d3:4b:51:83:3f:27:84:4b:
58:2b:98:92:2d:54:68:39:39:ca:d8:59:ec:93:59:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:0B:65:C0:1E:F5:11:8C:A0:A8:BC:D3:05:3E:E5:33:19:ED:22
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/EoMLZcAe9RGMoKi80wU-5TMZ7SI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.192.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:64:ea:0d:61:2c:51:24:36:f8:1a:e4:e0:8a:f6:c5:f4:8a:
99:cc:82:2c:eb:6a:26:c7:62:d9:26:fd:2b:0f:3b:e8:0a:f7:
98:f0:55:12:a9:e0:dc:20:af:75:9e:1d:74:c4:4f:04:7c:41:
b2:91:0d:50:9d:9c:00:c4:b5:07:40:34:18:4e:f5:5e:8c:a5:
8d:89:a0:a4:4e:b6:15:7a:f5:d2:1b:04:d2:77:3d:a4:d1:1b:
dd:30:fa:de:e9:21:c8:00:4f:69:87:b5:bd:85:7a:58:5f:e7:
89:aa:24:a9:d9:6b:e7:34:4d:24:4a:57:6c:12:08:ce:d9:82:
44:b9:77:4b:30:bc:af:d3:03:5c:cf:e5:bc:8f:95:5b:61:bd:
e2:7d:f3:5b:87:9a:cb:47:4d:57:fe:3f:79:90:74:c8:88:df:
fa:5d:92:53:5b:01:71:45:06:32:2b:5e:7f:31:ce:09:ea:ea:
1f:be:e3:59:45:1c:90:70:0b:8d:80:50:0f:26:a7:94:95:4d:
ad:dc:6c:3b:e7:b7:ef:e5:b0:f3:d8:df:d4:e9:cd:bd:db:a2:
44:32:6e:03:1c:e6:28:48:47:f2:78:27:1a:4b:27:ca:ed:f9:
19:26:24:3c:a0:dc:98:57:3f:61:96:a0:ad:e3:a7:24:f4:68:
39:1c:94:52
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yMzA1MjQw
MzUzMzNaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDEyODMwQjY1QzAxRUY1
MTE4Q0EwQThCQ0QzMDUzRUU1MzMxOUVEMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFjGdsCehpGGtuHCYdciU7vGLYu6xz+azJyQVJ1bnJ3OXuuGSl
BGzt6KyJ4D3erqotcdTW4TJWMCFZIx09EIGE56VNx+wDxcG1HHe1PzedPWfR8S/B
mfiwMhVugrM9YXIGyPcerpAoWHskJD995hHYsRexI+EmCEmWHkab/elo6QCmvB6K
Pqx+Mgdx/pae/yhRdrRT8Fp7wpMtW8E37GbdwUyKfHzy8FMlWrNWiqtWyLlujFOv
7Rb5DaEt5dPsqfxlOFoSDifOcCr2RbJMoaWuYSmpVmOB5n84m4qQAZrCNh2hqP1Z
LBLTS1GDPyeES1grmJItVGg5OcrYWeyTWT+dAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUEoMLZcAe9RGMoKi80wU+5TMZ7SIwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0VvTUxaY0FlOVJHTW9L
aTgwd1UtNVRNWjdTSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANqS8AwDQYJKoZIhvcNAQELBQADggEBADtk6g1hLFEkNvga5OCK9sX0ipnMgizr
aibHYtkm/SsPO+gK95jwVRKp4Nwgr3WeHXTETwR8QbKRDVCdnADEtQdANBhO9V6M
pY2JoKROthV69dIbBNJ3PaTRG90w+t7pIcgAT2mHtb2Felhf54mqJKnZa+c0TSRK
V2wSCM7ZgkS5d0swvK/TA1zP5byPlVthveJ981uHmstHTVf+P3mQdMiI3/pdklNb
AXFFBjIrXn8xzgnq6h++41lFHJBwC42AUA8mp5SVTa3cbDvnt+/lsPPY39Tpzb3b
okQybgMc5ihIR/J4JxpLJ8rt+RkmJDyg3JhXP2GWoK3jpyT0aDkclFI=
-----END CERTIFICATE-----
Generated at Wed Mar 13 04:11:40 2024 by rpki-client on console-ams.rpki-client.org