Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/573HNOJrG74__SQbLuQn6c2pYto.roa
File: 573HNOJrG74__SQbLuQn6c2pYto.roa (raw, json)
Hash identifier: E+jKfV735pfmksvpsK3lUsPnl8GVhbQMoyVhoGCrssA=
Subject key identifier: E7:BD:C7:34:E2:6B:1B:BE:3F:FD:24:1B:2E:E4:27:E9:CD:A9:62:DA
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1241
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/573HNOJrG74__SQbLuQn6c2pYto.roa
Signing time: Tue 20 Aug 2024 12:56:42 +0000
ROA not before: Tue 20 Aug 2024 12:56:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4673 (0x1241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E7BDC734E26B1BBE3FFD241B2EE427E9CDA962DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:ad:af:5d:ba:b2:34:3f:80:0a:f8:e1:d0:
5f:7e:f7:a4:86:44:fc:b8:47:fe:c3:34:04:84:db:
a2:e8:bb:1e:7a:88:16:d4:b3:57:34:57:4f:3f:2f:
2e:ba:77:59:34:f9:aa:8d:71:2d:f8:56:c9:3c:b9:
d9:cb:9e:4c:a4:ea:cc:24:38:83:fa:16:2e:29:cd:
90:ae:c6:f4:13:12:18:fa:a3:22:65:e2:f0:cc:6c:
c5:0e:2d:f7:2b:1d:09:a8:91:30:a5:35:75:19:13:
dd:15:88:5f:a0:98:68:94:ec:c3:ae:34:10:91:0f:
e5:ea:c1:fe:72:1e:cc:98:d1:37:d2:d1:62:f3:f8:
5a:4d:d0:97:e0:15:b8:a8:11:82:a5:ad:4b:b6:ed:
92:cf:b1:f2:b4:02:60:8c:55:6c:ac:2c:ec:df:ca:
ba:ca:7b:c9:53:70:d4:ed:b9:23:12:d6:e5:e3:70:
5d:58:cc:bb:93:6b:20:fd:8a:54:f0:29:c4:18:bd:
23:e9:37:d7:c4:83:fe:43:19:b5:b8:8f:87:b4:72:
28:4e:ed:3a:86:56:5c:06:03:30:27:5c:80:8f:7b:
bd:1d:03:01:18:67:c6:4a:98:74:f9:7a:ea:9d:9d:
06:96:de:f2:97:1d:31:88:f7:ba:5d:5d:40:95:64:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:C7:34:E2:6B:1B:BE:3F:FD:24:1B:2E:E4:27:E9:CD:A9:62:DA
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/573HNOJrG74__SQbLuQn6c2pYto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.152.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:90:21:bd:2f:d6:59:1e:f4:0d:47:c7:a8:22:f5:69:2a:b4:
89:27:21:03:53:52:73:db:de:6a:e6:a9:71:27:53:51:e1:6e:
c9:c4:3f:17:64:85:17:63:de:2a:bb:f1:63:68:b8:1d:45:27:
4c:30:2e:b3:c1:93:c0:7c:e2:82:88:3d:fc:b7:54:a6:65:2e:
ce:13:41:1c:4a:61:19:9e:8c:f2:a9:e9:fb:e4:72:d0:7d:1e:
01:56:cf:d7:92:ca:9a:14:30:12:01:61:16:2e:44:8f:78:5a:
07:22:74:df:3f:29:ab:b5:cb:ee:74:f8:66:c7:32:25:4f:1e:
52:97:ba:4b:42:9a:57:1f:7f:52:61:74:6e:79:33:64:c0:1a:
ba:68:95:35:42:5d:17:9d:e3:08:16:7e:a9:1b:c2:46:73:e8:
08:ba:ba:68:b2:de:1a:52:36:1a:7d:62:df:33:e2:92:2a:18:
25:bf:66:a9:f8:11:39:6a:34:d9:d6:38:2d:6f:fa:99:92:de:
80:ce:e6:90:13:9a:0d:ec:9d:f0:e0:c4:3c:c3:48:04:19:86:
e7:69:a4:2f:fb:fa:9e:fc:1e:38:13:0e:86:f1:5e:ac:60:a1:
6e:67:3e:a6:f2:51:27:25:e1:c0:19:81:71:f9:ae:ae:c7:b5:
19:0d:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 04:26:57 2024 by rpki-client on console-ams.rpki-client.org