Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8lJNBr7wo06yF1pUqnQuzpmB4Zw.roa
File: 8lJNBr7wo06yF1pUqnQuzpmB4Zw.roa (raw, json)
Hash identifier: uX+rlco6gpQ5fFr10RAbR6y58cxN+3MzacUuh987qX8=
Subject key identifier: F2:52:4D:06:BE:F0:A3:4E:B2:17:5A:54:AA:74:2E:CE:99:81:E1:9C
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1172
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8lJNBr7wo06yF1pUqnQuzpmB4Zw.roa
Signing time: Mon 15 Jul 2024 14:59:16 +0000
ROA not before: Mon 15 Jul 2024 14:59:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 140362
IP address blocks: 180.223.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4466 (0x1172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 15 14:59:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2524D06BEF0A34EB2175A54AA742ECE9981E19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:b9:a4:b2:72:72:7b:a3:cd:91:f0:aa:c0:
ac:95:f2:e6:4c:9d:00:cf:7e:57:ed:45:a0:5c:b0:
87:57:f2:3d:6a:6c:07:14:de:df:bf:2c:b8:92:33:
f0:dc:ef:bb:ff:94:8e:53:b3:27:5f:b3:4f:9e:90:
df:a1:95:3f:d4:0b:79:ca:d4:f5:81:50:40:5e:37:
b5:a5:f7:9e:f8:1a:d6:0b:ea:c3:41:61:ad:d1:52:
d0:08:8c:c3:44:6e:60:94:aa:d7:54:72:19:9b:75:
8f:06:31:df:01:55:d8:97:e5:b2:e9:72:6d:56:2f:
d7:58:e7:4b:05:63:4c:b2:b5:9a:78:15:9b:f0:c2:
6c:69:7a:68:a5:9b:9e:8c:53:ae:5d:e9:a7:b9:12:
d6:45:4f:37:59:ae:46:04:10:b7:23:d4:3d:a2:d3:
20:66:5b:9a:82:3e:be:19:6d:ce:fd:de:c0:9a:d2:
30:c8:b7:36:fa:ab:20:8b:5d:4e:40:1c:a2:24:21:
d6:4a:b3:2e:e1:c7:88:17:a7:af:d8:51:04:5b:3e:
53:e5:e6:fe:1c:24:60:80:9c:3b:ed:96:ff:9a:55:
6b:05:b3:99:89:9d:1e:cc:c4:3d:1a:e1:69:03:d6:
eb:21:0f:08:43:9f:65:1a:b7:2c:72:15:a0:58:a6:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:4D:06:BE:F0:A3:4E:B2:17:5A:54:AA:74:2E:CE:99:81:E1:9C
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8lJNBr7wo06yF1pUqnQuzpmB4Zw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:c7:69:93:8b:93:d0:ec:d8:3d:68:49:0f:47:ea:55:d7:75:
ef:8b:8a:b0:25:2e:38:8c:87:99:18:db:cb:8e:1c:bd:2c:c6:
d7:f7:54:6d:80:40:34:de:3c:8d:90:aa:0f:59:b1:3f:8d:ae:
b9:2c:51:47:45:f8:e2:8f:0e:22:18:fc:a8:d1:d9:96:84:b4:
a7:47:d6:a8:21:22:10:b8:61:53:6b:19:8f:7b:9c:df:e7:66:
7b:15:79:35:03:e6:65:24:b1:b6:a4:79:8e:e7:21:04:50:cf:
40:27:db:e6:f4:6d:e9:6f:2c:bd:d1:1f:5f:aa:d5:5f:f5:00:
1c:ac:0f:39:66:2e:d7:ca:fb:1a:60:f5:08:21:c8:7d:d7:a5:
95:49:4c:82:ae:7c:69:13:f8:52:83:9e:19:7f:03:18:e2:5b:
22:49:d6:d6:99:dc:9b:ef:96:87:d8:ac:b5:46:51:a6:61:69:
dd:f1:a2:4b:de:3c:c7:30:05:b2:54:6a:58:52:55:0e:9b:55:
cc:93:40:90:28:95:e9:b4:67:47:89:49:a9:85:d2:34:a7:c4:
08:50:c3:48:0e:90:bc:54:98:9c:66:94:f7:89:99:94:20:33:
85:a7:df:c4:fd:27:38:2f:4e:7b:c7:be:e7:77:42:cf:6e:24:
e0:ff:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 04:26:57 2024 by rpki-client on console-ams.rpki-client.org