Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa
File: Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa (raw, json)
Hash identifier: IhCK6llY47OfM3Rhlq+7LSA32WJxEl2lnhdovbYO1EI=
Subject key identifier: 63:0A:7A:C9:7D:82:A8:A9:90:D8:C3:F4:E9:99:8D:65:86:CF:43:53
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 115A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa
Signing time: Thu 11 Jul 2024 15:11:14 +0000
ROA not before: Thu 11 Jul 2024 15:11:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136897
IP address blocks: 180.223.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 15:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4442 (0x115a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 11 15:11:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=630A7AC97D82A8A990D8C3F4E9998D6586CF4353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:19:e4:76:41:e4:89:d4:01:7d:53:00:6c:
11:50:73:69:f0:90:6f:4a:4b:47:a1:7e:65:af:6f:
53:23:e1:4b:56:7a:d0:38:46:a1:b7:c6:c4:90:01:
38:51:70:0d:d9:e2:58:cd:c4:af:36:ca:6c:ca:87:
1b:73:03:00:00:24:33:52:e1:ba:2b:a3:93:6a:78:
ba:58:2d:67:81:aa:53:7f:49:b3:12:25:4c:97:e1:
03:d7:52:58:d0:c1:74:a3:b2:ca:0e:b1:75:62:f3:
b8:42:b4:6c:d2:67:db:29:71:51:34:fc:e4:40:e3:
d8:4f:71:27:1c:48:5b:3d:30:0f:e9:07:09:c0:44:
33:bb:38:7a:7d:11:62:64:d9:7e:27:e0:fd:65:9d:
5d:5b:ae:d1:40:34:2a:f2:29:5c:e8:05:c3:e5:0b:
d7:fe:b3:d3:fd:33:b7:ca:3e:75:6a:b8:70:55:10:
a7:84:67:c7:50:bb:02:1e:b0:01:4b:c0:d5:36:83:
59:bc:75:b9:1b:f7:1a:14:7c:df:18:4e:05:f5:59:
f7:02:a0:98:39:1c:29:c1:c5:5c:4d:22:90:69:66:
43:d8:f0:1a:3b:46:f7:57:a8:3b:0f:59:a6:a5:e1:
cb:58:16:e5:1a:ca:0d:98:5b:e4:ef:e4:35:9b:36:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:7A:C9:7D:82:A8:A9:90:D8:C3:F4:E9:99:8D:65:86:CF:43:53
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Ywp6yX2CqKmQ2MP06ZmNZYbPQ1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:70:5c:67:e6:5d:63:d8:e5:c6:c4:aa:b1:29:46:f6:3f:46:
0f:fa:47:be:4e:34:07:7a:2e:54:18:30:89:af:17:b5:42:b7:
e2:25:2a:d9:4f:0f:a9:59:c7:20:a5:dc:64:51:c0:4d:3b:95:
67:7b:20:87:6d:47:41:b0:6a:11:a4:18:dc:41:6e:a4:97:06:
fc:6b:0d:06:d4:66:34:17:cc:7a:bf:60:34:59:45:ca:b6:75:
11:23:19:29:93:7f:ec:ce:02:08:b0:de:a8:76:65:dc:59:1c:
f0:d5:f3:c2:72:e5:03:b3:39:b9:19:56:1f:d2:72:f3:54:35:
cd:cd:a1:1e:20:a1:67:9f:93:cb:0b:56:a8:02:6e:d2:0d:a6:
59:81:40:99:6a:5a:f5:13:e8:cb:1f:6e:a0:58:a7:82:a2:b0:
5e:c7:31:02:bc:76:77:c8:60:ee:a6:6b:ca:44:00:c5:4e:fd:
e8:0e:9f:fa:5a:33:3a:5e:cf:1c:43:c7:23:df:25:ec:5a:b4:
d1:96:fa:49:66:59:e3:39:3e:f1:71:1c:92:16:20:32:8e:30:
4d:40:2d:f9:59:bc:39:51:10:b2:9d:cf:8c:cb:14:f5:b7:c7:
be:cd:8c:1b:66:46:86:27:28:b8:5f:67:20:f4:88:e0:b1:da:
6c:43:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 16:58:15 2024 by rpki-client on console-fra.rpki-client.org