Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nrZYaKlbiJK7aUDOmnvJ6cJD7vY.roa
File: nrZYaKlbiJK7aUDOmnvJ6cJD7vY.roa (raw, json)
Hash identifier: GPI9/qbc4FoRhwryggFUHW0HjgQtSoJkBPyxaxPFdlc=
Subject key identifier: 9E:B6:58:68:A9:5B:88:92:BB:69:40:CE:9A:7B:C9:E9:C2:43:EE:F6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0841
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nrZYaKlbiJK7aUDOmnvJ6cJD7vY.roa
Signing time: Sun 09 Jul 2023 15:01:41 +0000
ROA not before: Sun 09 Jul 2023 15:01:41 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 996
IP address blocks: 112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Jul 9 15:01:41 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9EB65868A95B8892BB6940CE9A7BC9E9C243EEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:4b:65:b8:6d:ab:c2:27:9e:8a:72:14:e9:
f0:33:eb:23:17:be:50:1e:a6:21:58:da:f2:7d:d2:
6f:e7:e1:a1:17:0e:3a:4e:36:90:bb:3b:72:24:46:
3e:01:a0:54:e6:fc:59:1f:fc:23:c1:cb:53:10:8e:
5d:b1:5b:98:d6:1d:36:eb:8c:9a:1c:38:7f:68:32:
0f:66:4d:eb:d0:35:95:3d:aa:c6:1d:e9:2b:a8:74:
2c:ac:b1:4f:62:c0:f8:a2:d7:47:c7:c9:78:4c:cf:
34:86:81:2c:54:1c:ed:44:c5:9a:64:4e:92:ac:38:
5a:41:c0:32:9e:a2:ae:96:39:58:ab:11:5f:89:5e:
0b:ac:14:77:c5:55:aa:c9:9b:77:06:95:b9:fa:19:
18:fc:7e:e0:39:38:ad:f7:93:c4:78:bf:f4:fe:f4:
f6:95:db:9e:29:da:89:42:ba:c8:52:83:4b:37:59:
cf:4a:57:e4:d3:9f:53:7d:08:4d:b1:b6:11:6a:a1:
94:03:91:bb:84:3e:6b:4d:42:32:03:f3:a7:d2:ac:
85:24:65:a1:35:96:6e:e2:5a:b5:fe:96:43:e0:f0:
7c:cd:fb:02:60:fc:c6:3b:98:1a:84:c8:7a:4d:b8:
f0:85:62:83:12:ed:6e:34:d5:36:33:b2:9b:89:d8:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:58:68:A9:5B:88:92:BB:69:40:CE:9A:7B:C9:E9:C2:43:EE:F6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nrZYaKlbiJK7aUDOmnvJ6cJD7vY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:86:4a:3e:6d:4a:ed:ab:71:3f:2a:e1:bf:c5:1a:bd:bd:a3:
32:d2:3b:d9:ee:d6:73:27:2d:73:1d:e2:65:a2:80:e5:45:bb:
b0:95:d7:e3:7d:58:6f:2f:a3:b1:10:fa:8d:b1:c7:d0:ad:6d:
2a:2e:90:99:d2:66:a0:79:fc:53:36:b4:bc:18:b4:76:87:88:
52:61:45:65:a7:5e:64:57:5f:b9:45:bf:1b:f7:63:3b:1c:d5:
e6:38:de:10:0a:d0:c8:58:4b:b3:97:d6:a8:7b:41:cb:f9:74:
d2:a8:ff:43:f0:c0:86:e3:41:a5:e5:c0:98:6f:5a:f3:fe:1a:
b0:97:78:59:53:06:31:c9:5c:11:dc:09:cd:ab:b9:69:40:c4:
33:6c:17:33:c0:05:df:2d:74:6c:d3:71:f4:e4:ea:52:29:04:
93:4f:7f:ed:67:45:dc:32:80:f4:c3:ee:ac:51:61:fb:65:dc:
e1:ae:4b:0e:24:1b:69:ac:17:ac:08:44:59:2a:ee:6d:f7:09:
40:2f:44:59:68:0d:35:ae:24:d2:f3:cc:c7:70:b2:5c:27:37:
97:65:5d:de:7d:2f:bf:90:e4:5f:75:92:a1:8e:89:3f:3c:21:
a8:e4:58:43:74:e7:17:c7:2a:ce:3e:f9:ac:b1:90:18:b0:55:
62:06:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net