Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/1-y_m5e-Kr-QC3EnYuzoYbcd4G0.roa
File: 1-y_m5e-Kr-QC3EnYuzoYbcd4G0.roa (raw, json)
Hash identifier: 6+zTXtkgX/Ro7nPVJUX7t6qL0ASDw7ah5d6J557T7YE=
Subject key identifier: D7:EC:BF:9B:97:BE:2A:BF:90:0B:71:27:62:EC:E8:61:B7:1D:E0:6D
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 12BD
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/1-y_m5e-Kr-QC3EnYuzoYbcd4G0.roa
Signing time: Tue 10 Sep 2024 05:30:46 +0000
ROA not before: Tue 10 Sep 2024 05:30:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4797 (0x12bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Sep 10 05:30:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D7ECBF9B97BE2ABF900B712762ECE861B71DE06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:6d:ab:b3:64:54:3f:14:e2:85:ef:5f:91:
2d:b5:41:75:7a:9a:70:86:05:1c:dd:28:97:c6:32:
75:d0:75:63:76:b6:cb:bf:79:bb:e3:1a:40:cd:ce:
a2:74:41:88:d1:8a:88:0d:6f:52:d4:0d:a4:d4:cc:
21:76:6e:89:f2:ce:a0:ff:5a:2f:91:57:cd:1f:98:
f3:5d:9e:6f:6a:7e:f2:14:ed:bc:30:8f:3d:0c:ff:
15:86:16:b8:36:4d:3d:5c:b4:ff:b2:76:c3:1b:eb:
e7:f1:eb:84:6b:f5:25:a9:61:3c:e4:09:db:e3:07:
f6:8c:ed:ed:b5:44:f1:15:bb:15:ca:cf:bb:0f:17:
d3:e9:dd:ae:59:3b:b0:5c:2e:58:e9:34:56:b2:e3:
f0:d0:5c:fe:99:48:1c:06:b8:2c:05:06:1c:82:6b:
da:46:9f:4c:24:25:0f:6c:6a:c6:ab:98:70:b3:d9:
6c:a3:26:ef:36:8c:9a:0f:17:6a:c0:db:f0:36:03:
64:6f:a8:b8:80:ae:11:b4:48:ad:74:55:bf:15:cd:
e7:bd:5a:75:3a:91:9e:94:a4:6c:f4:88:51:7f:ea:
9f:dc:59:9d:8c:1f:18:87:3a:24:ec:97:c1:a8:37:
7f:aa:5b:ce:26:d1:91:d3:70:fa:59:34:90:22:08:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:BF:9B:97:BE:2A:BF:90:0B:71:27:62:EC:E8:61:B7:1D:E0:6D
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/1-y_m5e-Kr-QC3EnYuzoYbcd4G0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c9:38:8e:a9:57:82:c2:76:7f:f3:06:d5:5c:31:92:9d:be:
20:b4:75:bd:eb:4a:21:08:f5:f8:33:f7:3b:b7:c5:9c:1c:81:
61:1c:6d:fe:68:48:63:af:f7:76:b7:aa:1d:8c:2f:38:80:f6:
ca:d6:08:9b:e0:89:c5:ca:47:87:6f:07:99:92:40:4c:4e:ca:
3c:56:0d:04:25:4f:70:e0:a4:9e:f0:90:fd:71:bf:51:1e:da:
6a:5d:d9:b1:d8:39:ff:d0:92:39:7a:70:17:d5:a9:fb:fa:45:
a7:1e:f2:26:96:36:95:27:da:ec:f7:6b:7a:d5:25:5a:7b:04:
47:b6:fd:7d:36:32:17:f5:06:5f:e2:e4:13:aa:94:55:0b:60:
00:71:4b:b2:ea:fb:32:9a:eb:cf:4f:03:85:b7:85:bc:63:1c:
fc:58:66:4a:59:8b:82:5c:05:b2:60:7c:39:37:b7:a7:6e:5e:
88:ae:b6:0c:31:d3:33:1d:c9:67:c1:f1:8c:ca:d7:34:91:f4:
d4:93:c8:cb:dd:ad:1d:fe:62:96:fb:1a:ef:47:e2:6d:d2:92:
37:34:c9:17:df:38:0e:fc:93:49:6e:1f:62:43:0c:78:ec:65:
d0:01:33:6f:7a:46:b8:d5:d6:65:16:2b:ad:7b:d6:b8:2e:4a:
90:3a:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 04:26:57 2024 by rpki-client on console-ams.rpki-client.org