Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/cA3pyuifeyDqan9ALVg6lVaxyHU.roa
File: cA3pyuifeyDqan9ALVg6lVaxyHU.roa (raw, json)
Hash identifier: I3IoC+T+gG9DBt569MGxVh42oVy2z6SOh9XUGsVbHho=
Subject key identifier: 70:0D:E9:CA:E8:9F:7B:20:EA:6A:7F:40:2D:58:3A:95:56:B1:C8:75
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 123F
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cA3pyuifeyDqan9ALVg6lVaxyHU.roa
Signing time: Tue 20 Aug 2024 12:56:41 +0000
ROA not before: Tue 20 Aug 2024 12:56:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 00:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4671 (0x123f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=700DE9CAE89F7B20EA6A7F402D583A9556B1C875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:8e:46:84:f9:d7:dc:a7:ef:95:fd:e9:ef:
04:8e:b4:1d:cd:f4:d0:37:62:2b:a9:9f:06:b9:cd:
74:0a:a3:5a:b6:3b:c7:14:75:9a:eb:6e:e9:82:af:
b4:36:8d:02:85:77:35:74:66:b4:79:3a:57:ff:29:
56:1c:22:d3:81:40:81:d9:a8:f1:85:5b:91:b7:7a:
02:25:7c:8b:bb:e6:cf:91:eb:d7:d1:90:e5:16:40:
a2:64:10:04:03:54:80:e1:81:02:82:2c:21:4b:f9:
04:9b:76:c9:04:c8:69:75:20:e0:1e:f2:52:53:8d:
3a:1a:6d:94:5c:0f:60:ec:1f:0e:84:a3:6c:03:ee:
23:30:53:04:60:ad:a8:81:e3:6a:ad:6f:52:24:94:
00:12:53:84:ac:5a:9b:29:b4:4e:eb:bc:a9:0b:fe:
14:a4:17:c9:6b:e3:f6:45:9a:b7:1d:3f:0c:bd:a6:
5d:2c:3d:0a:96:a3:d5:3f:46:e5:c7:f8:1e:63:17:
c9:46:bc:a8:e0:62:50:4d:03:b5:f3:94:86:3d:bc:
70:e2:ca:53:82:b3:0b:bd:7a:b4:42:6b:d8:cc:7a:
00:b9:6e:4d:b0:e8:ae:e3:4d:49:75:f6:4f:2e:6e:
a2:6a:30:07:5f:88:04:8c:6f:00:9a:bb:49:d2:ae:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:E9:CA:E8:9F:7B:20:EA:6A:7F:40:2D:58:3A:95:56:B1:C8:75
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/cA3pyuifeyDqan9ALVg6lVaxyHU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0e:d4:8f:d4:3e:5c:83:94:17:77:39:fe:ff:a2:0c:2f:3e:
f8:aa:77:ad:f7:8d:5f:83:e1:ba:6b:a5:82:06:7e:65:3c:c1:
83:1d:b8:1f:c5:fc:8e:7b:53:21:31:5e:b8:be:ab:05:c1:e3:
18:aa:f5:e1:d2:37:57:89:16:cd:fa:6d:8f:46:4e:40:d8:96:
a6:00:80:61:db:9b:95:98:54:73:65:d5:6b:ae:80:1c:d9:ee:
9b:94:fe:83:df:d5:91:3e:be:76:36:5f:ef:dd:e5:82:ce:46:
d8:8e:58:4e:05:0b:df:fa:80:99:26:32:31:f8:6e:21:d4:11:
8b:c9:15:73:f2:3b:32:05:ec:ab:31:9e:06:94:f5:f6:89:3a:
2e:34:14:58:74:98:fe:f2:f4:93:64:85:ff:70:4c:70:93:75:
99:39:5e:c6:f2:01:ff:7e:e1:9a:d6:28:fa:ac:71:9a:37:5a:
29:03:1b:86:c9:6d:25:45:d7:64:e4:af:72:00:5c:d3:96:0a:
70:44:8b:74:77:13:aa:8a:5c:8b:c9:cb:b4:4d:fa:75:c8:ee:
df:42:99:c8:19:9d:de:f8:f9:bd:cf:1b:69:a9:9f:6b:73:67:
5b:1c:64:f8:35:76:37:49:7e:25:25:54:c8:bd:4b:d3:49:2e:
c4:73:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 03:08:19 2024 by rpki-client on console-fra.rpki-client.org