Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/ShMaus7ATBJNZoVN9uTw-OR5iMA.roa
File: ShMaus7ATBJNZoVN9uTw-OR5iMA.roa (raw, json)
Hash identifier: QnPvFMor089QjgWi/XzSdxu2kXkjWU6B76Aa4lqBGfk=
Subject key identifier: 4A:13:1A:BA:CE:C0:4C:12:4D:66:85:4D:F6:E4:F0:F8:E4:79:88:C0
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1242
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ShMaus7ATBJNZoVN9uTw-OR5iMA.roa
Signing time: Tue 20 Aug 2024 12:56:42 +0000
ROA not before: Tue 20 Aug 2024 12:56:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 180.223.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4674 (0x1242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4A131ABACEC04C124D66854DF6E4F0F8E47988C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:b0:1d:bf:16:60:95:a5:c1:95:59:49:37:
14:18:b2:e2:53:8a:ec:0c:0c:73:5d:4b:1a:8f:2d:
af:12:3c:4c:f8:16:a3:96:36:cb:e4:93:a6:6a:79:
8c:be:cb:17:af:ad:c2:7b:a6:9e:09:b3:6f:27:fe:
d3:8c:53:94:95:d8:17:f6:f5:29:d7:2a:e4:9a:c6:
63:4f:ec:f1:e4:d4:ee:40:d6:1e:95:50:84:2f:48:
13:b1:5d:05:d2:b2:d2:61:d1:bf:29:4e:e1:1d:db:
fb:7b:d5:c5:33:0c:8f:74:f5:5c:8b:11:f6:c0:3e:
8d:a3:66:09:7b:47:88:bb:88:9a:29:99:3f:cb:05:
de:56:e5:fc:a2:44:35:c3:e5:ee:97:36:81:7e:1f:
b9:76:6f:2f:03:9d:26:54:8b:9c:ff:7c:55:ec:29:
b1:b7:9c:9a:8f:cb:53:6b:5b:be:b6:d3:96:f8:16:
87:04:10:6a:05:77:7f:21:d7:5b:d8:4e:84:17:06:
37:18:70:48:28:d5:5d:e2:fb:79:9a:6a:54:37:04:
e0:32:cd:87:2c:8a:39:c4:c8:4e:f0:29:40:f9:dd:
6e:6f:c6:cd:ef:73:79:48:4a:50:f9:18:a9:eb:5f:
33:98:36:a3:f4:8e:23:a9:33:90:27:a1:1a:08:29:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:1A:BA:CE:C0:4C:12:4D:66:85:4D:F6:E4:F0:F8:E4:79:88:C0
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ShMaus7ATBJNZoVN9uTw-OR5iMA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
17:79:15:97:92:19:11:b0:4a:a8:7e:41:10:67:e4:69:4a:0f:
06:03:e8:ff:2a:0d:29:28:f8:0e:35:bb:db:e4:9f:49:ad:df:
41:b1:b7:99:aa:84:95:8b:fa:c5:f3:52:c6:31:b3:aa:5f:f0:
74:9f:0a:29:ca:34:a2:6c:12:f6:55:63:b2:fe:18:f4:87:27:
5e:48:0c:4c:0b:c5:cb:4d:bd:0d:49:1e:c3:b7:da:70:56:c3:
73:ca:72:24:cc:7d:b0:4f:1f:8e:3f:57:63:19:00:43:c4:81:
80:ae:cc:1b:21:bf:ed:fc:87:f1:36:c7:a0:74:d5:64:23:98:
36:69:95:82:a1:dc:33:c0:46:88:4a:28:a3:ea:80:bf:a4:91:
44:83:1d:91:82:8b:9f:b7:4f:63:5c:84:5b:85:20:1d:67:f9:
09:84:55:9b:22:9d:26:24:48:94:ce:b2:ea:c0:a8:31:31:d3:
a1:7a:d3:e4:ac:d7:a8:31:78:6f:16:57:aa:71:d5:f1:89:ac:
e1:2a:91:4d:2a:74:c3:13:90:0b:2f:a3:47:9e:31:9c:6d:62:
36:d8:7a:08:fa:86:9b:05:05:57:0f:ed:76:97:f3:79:5f:58:
c7:c3:d2:6b:af:fa:3a:4f:eb:fd:70:a7:2f:1f:94:ef:52:ef:
06:cf:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 04:26:57 2024 by rpki-client on console-ams.rpki-client.org