Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa
File: 1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa (raw, json)
Hash identifier: sXw9vp4Da+jDgR0pcFeAiC1OMY7yBSJKibiySCQUYGU=
Subject key identifier: D4:80:CB:68:51:9C:54:34:EF:B6:29:1A:15:1A:DC:27:BF:8B:FF:E0
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 15E6
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa
Signing time: Wed 13 Mar 2024 01:22:26 +0000
ROA not before: Wed 13 Mar 2024 01:22:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 138527
IP address blocks: 118.184.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 02:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5606 (0x15e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Mar 13 01:22:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D480CB68519C5434EFB6291A151ADC27BF8BFFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:83:a4:29:d8:2d:ed:9b:98:ed:9d:3c:91:
a2:b3:b6:91:e4:81:d4:52:db:15:52:3c:44:0c:bd:
84:62:a4:46:f0:62:5a:03:17:5e:6d:ae:c2:b9:34:
19:75:f1:ab:25:5a:fb:1d:3a:2e:73:ad:63:47:f7:
31:6c:31:4c:b2:5a:20:2a:f8:b2:a7:3e:6f:c6:ba:
63:82:05:ea:55:bf:ed:7f:92:0e:ca:e7:c7:6a:5a:
84:4b:ef:13:cc:24:52:65:fd:96:71:e5:9b:ce:b1:
db:bd:b0:ff:53:eb:ee:29:b1:be:9b:57:b3:55:ad:
71:3c:85:30:f5:0b:94:3b:e1:c2:0a:70:a8:e3:34:
b5:d8:c1:fe:a3:fc:ff:99:11:ba:af:bf:ad:59:dd:
ad:a9:ef:0e:56:c1:ea:fe:cf:10:56:bb:e1:10:a2:
09:11:76:27:e4:33:ef:80:e3:29:2d:b2:f3:6b:30:
15:b3:36:00:65:53:4d:e4:3f:34:a5:64:d5:de:9c:
7d:bb:7c:a5:00:1c:52:d1:a4:84:e2:5e:a2:02:fc:
7b:d0:0f:87:ab:80:da:bc:ac:c3:8e:2b:32:db:10:
df:3f:0e:40:37:c5:68:21:73:ac:5e:03:f2:cf:65:
83:1b:66:fc:c2:79:e9:cd:ed:c0:96:67:4e:0f:4f:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:CB:68:51:9C:54:34:EF:B6:29:1A:15:1A:DC:27:BF:8B:FF:E0
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/1IDLaFGcVDTvtikaFRrcJ7-L_-A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a0:3b:bb:ee:be:67:0c:dd:bb:16:30:bd:32:34:33:7f:fb:
8c:a0:6d:d5:ad:51:2f:26:29:1c:17:06:d1:65:ef:04:6c:01:
d7:06:d6:84:9d:9a:6d:1a:4d:20:bd:93:e0:26:7e:fa:eb:67:
a4:33:cf:a3:0e:63:26:e3:7f:af:e6:a7:03:b5:3b:5c:6a:25:
1c:56:c2:02:22:84:aa:23:4d:16:86:a5:39:c9:1b:a0:8f:52:
d0:1b:f5:cb:75:f9:16:ea:de:b3:bd:97:f5:61:db:b6:37:ec:
d8:a4:7c:ff:40:06:18:02:19:c7:18:db:98:56:ca:6c:c3:15:
97:e4:d4:4e:4f:b4:df:f7:6c:5a:d5:e9:66:f0:0c:9a:6d:d9:
f5:ff:1d:4e:1f:82:e8:5e:24:bc:40:64:0f:cd:8b:35:72:1e:
80:53:b6:cd:44:90:80:75:f9:d9:bc:43:5c:40:c4:39:8e:bc:
37:ec:8a:b4:7e:d8:4d:e2:37:3f:96:d1:5f:bc:0b:fb:ad:33:
ad:dc:b7:48:c3:f1:ad:2f:69:5f:6a:05:05:0c:71:a9:16:51:
d0:c5:a2:54:1c:d9:21:a5:05:9a:b2:b1:e4:d9:19:00:9a:fb:
2b:55:39:dc:1c:54:ef:bd:e5:eb:c4:7d:02:c3:86:f5:5f:43:
eb:c5:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 03:55:16 2024 by rpki-client on console-fra.rpki-client.org