Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/FOn79m8_siPlMgy28gx81ue2y7c.roa
File: FOn79m8_siPlMgy28gx81ue2y7c.roa (raw, json)
Hash identifier: uysjvT72DG8GykKnhGy+R74VZki74FgD55eqGKaRe00=
Subject key identifier: 14:E9:FB:F6:6F:3F:B2:23:E5:32:0C:B6:F2:0C:7C:D6:E7:B6:CB:B7
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 124B
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FOn79m8_siPlMgy28gx81ue2y7c.roa
Signing time: Tue 20 Aug 2024 12:56:45 +0000
ROA not before: Tue 20 Aug 2024 12:56:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 01:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14E9FBF66F3FB223E5320CB6F20C7CD6E7B6CBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:6d:97:e4:b4:02:15:ec:c2:d3:8e:62:5d:
ff:d8:44:ea:6a:ea:a6:25:fd:64:8a:19:6e:88:80:
7a:b4:10:07:ed:9b:55:6e:b3:53:0d:e0:7b:90:0a:
43:1b:7a:76:99:9e:cc:42:2c:3f:71:0a:01:6f:99:
76:8d:06:44:da:51:e6:c6:70:38:60:e6:8d:8e:a5:
d6:9c:1c:e8:df:65:4f:c4:43:19:e7:36:ae:92:97:
f3:cc:7f:92:8f:39:0e:f2:8f:c8:43:4b:ac:51:f4:
ea:de:23:0e:bc:cd:e3:08:65:4c:a8:25:bf:6b:10:
07:03:f8:42:78:aa:2d:39:ed:a8:ce:8a:98:dd:93:
82:2d:6d:e5:fd:b6:16:2e:23:7d:dc:26:dd:26:fe:
e1:1b:af:1a:ce:56:7d:58:10:c9:c3:f9:b8:03:d7:
e6:15:f6:99:5a:c3:5a:b9:0f:95:10:cc:de:21:6b:
94:a5:4b:ba:57:27:7b:9d:cc:19:3b:bc:71:15:1d:
fb:fb:52:9b:39:5b:03:da:84:88:ef:a4:31:5c:9e:
83:89:3f:1a:83:99:06:8a:f9:d3:4e:29:c0:7a:89:
9f:95:7c:e6:b1:cc:88:8d:97:62:e1:fd:d3:08:38:
1b:84:31:52:20:37:52:e9:2d:10:04:9b:61:8f:71:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:FB:F6:6F:3F:B2:23:E5:32:0C:B6:F2:0C:7C:D6:E7:B6:CB:B7
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FOn79m8_siPlMgy28gx81ue2y7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.240.0/24
Signature Algorithm: sha256WithRSAEncryption
93:18:eb:73:44:7c:48:67:b9:2e:3e:f9:76:b2:3c:5f:ba:9a:
1c:6b:42:f6:2f:62:fa:db:e0:0e:49:64:de:eb:3c:e0:f5:8e:
d9:81:11:8c:43:cf:35:b8:0c:e7:3f:8e:71:7b:0f:0f:56:04:
0f:a2:6d:6b:72:72:83:a2:72:10:be:cf:01:d3:db:96:d9:00:
35:1f:53:e3:7e:9b:bd:92:09:3f:ba:fc:c8:ff:cf:43:06:5b:
2f:86:b3:16:57:0b:a1:0f:44:e4:ce:b1:d6:02:ec:99:2d:a5:
b2:20:47:5b:2f:48:bb:4d:c6:d0:65:be:18:00:31:b2:61:d6:
27:60:ec:ce:5e:9f:30:be:c6:a8:b8:06:0f:c2:d6:cd:a1:a1:
74:2d:e6:1c:37:5d:4f:2f:84:61:d6:b0:87:7c:d6:c3:90:10:
47:1a:0c:28:14:b9:52:98:df:b6:51:e6:14:4d:2d:3c:14:6f:
e8:19:d8:bc:65:71:53:f3:15:69:f0:55:47:45:b5:7a:fe:91:
ec:aa:55:fb:80:9b:80:92:98:f0:68:f9:29:81:b9:ad:b8:b4:
c1:40:50:f3:5c:e7:4d:91:f3:47:a2:54:b1:61:b9:4c:7f:ac:
4d:0b:de:d9:13:4a:74:3a:86:84:92:0a:da:2f:b7:42:59:de:
f3:29:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 05:56:37 2024 by rpki-client on console-ams.rpki-client.org