Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/DsIUqSA8xqCxKIRyxow-3msVzU4.roa
File: DsIUqSA8xqCxKIRyxow-3msVzU4.roa (raw, json)
Hash identifier: Fm02iIYxD9RrILwBvalcURBz3onREugqzj3TQmdrZm8=
Subject key identifier: 0E:C2:14:A9:20:3C:C6:A0:B1:28:84:72:C6:8C:3E:DE:6B:15:CD:4E
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0AE1
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DsIUqSA8xqCxKIRyxow-3msVzU4.roa
Signing time: Mon 28 Aug 2023 02:14:18 +0000
ROA not before: Mon 28 Aug 2023 02:14:18 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139076
IP address blocks: 180.223.72.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 28 02:14:18 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0EC214A9203CC6A0B1288472C68C3EDE6B15CD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:2f:e1:3b:52:ac:11:db:52:2b:46:0c:33:
88:ef:ae:e4:55:b3:02:a0:b7:95:49:cc:2f:bc:f8:
d9:d9:fb:d5:18:1c:41:79:1f:d8:20:0c:4b:28:a0:
cb:42:5e:10:77:6b:04:86:27:37:8b:01:db:56:66:
41:08:f0:c2:46:18:cc:fc:b6:55:ae:28:de:e2:0a:
52:49:11:d1:92:98:37:d3:78:22:61:b5:d6:85:b9:
f6:3c:a6:e6:2d:eb:41:e7:91:d2:74:d3:b2:91:8f:
79:ca:69:1f:d7:a2:41:89:5f:4f:e6:bc:6d:58:c4:
bd:d7:39:15:0d:0b:09:70:f8:f1:5b:c1:91:c5:9b:
d5:66:41:4e:a9:45:04:78:af:2b:1b:8c:22:11:89:
ff:32:63:59:79:1b:8d:ae:e7:1d:6d:ea:1a:2f:9c:
11:b8:68:4e:6f:69:f3:fd:2e:3d:bd:e6:7b:e6:a0:
db:d1:dd:52:a2:d4:7f:30:0e:50:55:57:91:16:6c:
73:e3:b2:8c:74:da:5e:86:da:42:b4:f7:64:f9:c7:
ac:7e:ba:eb:78:46:6b:01:37:34:c3:ce:73:c2:7d:
81:83:bd:c8:61:90:27:17:37:04:6c:da:19:93:46:
47:99:4c:fe:5e:fa:bf:62:18:cd:da:0e:22:6c:1b:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:14:A9:20:3C:C6:A0:B1:28:84:72:C6:8C:3E:DE:6B:15:CD:4E
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/DsIUqSA8xqCxKIRyxow-3msVzU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:f7:5a:2a:27:49:62:c3:41:4a:5e:6b:29:00:90:7c:80:71:
31:09:f4:62:a2:45:37:77:07:8c:05:3e:46:f7:d1:ab:24:b0:
a1:0f:3c:d7:28:b1:ff:2c:e4:b6:b5:23:ee:6c:8e:21:7a:d7:
2c:38:81:50:e9:6b:49:7b:47:fb:a1:bd:7f:51:31:36:06:2d:
fc:a6:e5:1c:2d:eb:42:e4:6d:dc:9d:59:a5:65:02:60:a7:c1:
bd:24:11:00:dd:d2:d5:e3:bf:64:41:fc:75:75:b8:43:22:05:
6c:63:69:31:2e:49:45:65:9a:6d:0c:1c:b2:6f:e0:32:a7:99:
4a:d9:7a:5e:20:71:b8:ad:e3:90:cc:fe:22:14:5f:1c:82:05:
f9:0a:4e:7d:a2:06:8a:48:07:cf:e9:b2:aa:cf:28:9a:20:d6:
90:93:de:26:78:70:ae:09:90:0e:3a:b3:8c:e3:3e:3c:6c:52:
0e:4f:33:f7:36:34:80:9f:1d:26:65:ab:1a:03:f3:aa:92:bc:
6f:27:ce:fe:ed:4c:c0:68:1b:af:df:05:c9:1d:cb:0d:cf:58:
57:aa:98:bb:73:09:8e:69:4b:a8:45:72:6e:1e:ff:a1:f3:04:
70:42:dd:a5:95:89:18:3c:7d:93:2c:58:20:57:63:c7:e9:d5:
5e:7c:a8:b1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMzA4Mjgw
MjE0MThaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDBFQzIxNEE5MjAzQ0M2
QTBCMTI4ODQ3MkM2OEMzRURFNkIxNUNENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn4S/hO1KsEdtSK0YMM4jvruRVswKgt5VJzC+8+NnZ+9UYHEF5
H9ggDEsooMtCXhB3awSGJzeLAdtWZkEI8MJGGMz8tlWuKN7iClJJEdGSmDfTeCJh
tdaFufY8puYt60HnkdJ007KRj3nKaR/XokGJX0/mvG1YxL3XORUNCwlw+PFbwZHF
m9VmQU6pRQR4rysbjCIRif8yY1l5G42u5x1t6hovnBG4aE5vafP9Lj295nvmoNvR
3VKi1H8wDlBVV5EWbHPjsox02l6G2kK092T5x6x+uut4RmsBNzTDznPCfYGDvchh
kCcXNwRs2hmTRkeZTP5e+r9iGM3aDiJsG2ndAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUDsIUqSA8xqCxKIRyxow+3msVzU4wHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRHNJVXFTQTh4cUN4
S0lSeXhvdy0zbXNWelU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7TfSDANBgkqhkiG9w0BAQsFAAOCAQEAa/daKidJYsNBSl5rKQCQfIBxMQn0
YqJFN3cHjAU+RvfRqySwoQ881yix/yzktrUj7myOIXrXLDiBUOlrSXtH+6G9f1Ex
NgYt/KblHC3rQuRt3J1ZpWUCYKfBvSQRAN3S1eO/ZEH8dXW4QyIFbGNpMS5JRWWa
bQwcsm/gMqeZStl6XiBxuK3jkMz+IhRfHIIF+QpOfaIGikgHz+myqs8omiDWkJPe
JnhwrgmQDjqzjOM+PGxSDk8z9zY0gJ8dJmWrGgPzqpK8byfO/u1MwGgbr98FyR3L
Dc9YV6qYu3MJjmlLqEVybh7/ofMEcELdpZWJGDx9kyxYIFdjx+nVXnyosQ==
-----END CERTIFICATE-----
Generated at Wed Nov 22 14:15:02 2023 by rpki-client on console-ams.rpki-client.org