Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/lRj7nuK-z1VThmiLbszR3Qn3kRw.roa
File: lRj7nuK-z1VThmiLbszR3Qn3kRw.roa (raw, json)
Hash identifier: 1rbk5YQJjeCGwTNCbqgDakFmgzsCYDRa/W5TYAW5xV8=
Subject key identifier: 95:18:FB:9E:E2:BE:CF:55:53:86:68:8B:6E:CC:D1:DD:09:F7:91:1C
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A96
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/lRj7nuK-z1VThmiLbszR3Qn3kRw.roa
Signing time: Mon 14 Aug 2023 04:33:31 +0000
ROA not before: Mon 14 Aug 2023 04:33:31 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 17772
IP address blocks: 180.223.240.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:31 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9518FB9EE2BECF555386688B6ECCD1DD09F7911C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:6d:28:8b:5b:de:d1:c3:38:21:c1:17:05:
93:00:27:ee:b6:fc:4e:b2:a5:4f:72:e4:32:2b:5e:
9c:85:f8:c5:df:44:d1:da:a3:fb:10:9f:c8:0f:88:
f3:8f:bc:93:2c:90:b7:3c:ff:aa:54:33:64:25:11:
e2:45:03:76:58:8e:a3:f1:43:08:61:1c:ec:b6:95:
0a:41:97:5c:39:6a:b3:bc:39:20:3c:68:67:b8:3f:
21:31:99:78:69:27:0d:e1:9f:7f:e3:ae:4b:e4:a8:
4b:08:1b:0f:a6:ca:a8:99:b8:fc:b0:47:4e:d2:d8:
f5:47:e1:1f:cf:c1:af:dd:03:ff:11:59:9f:cf:0c:
e0:e1:7b:23:e7:d6:46:96:91:81:27:4b:6e:30:e4:
93:0a:ae:fe:2b:79:20:7e:f4:b6:61:19:2b:7e:2b:
13:ad:47:d9:e0:6c:fb:c7:de:69:82:bf:9e:21:d4:
50:77:ea:95:08:33:d6:8e:7c:56:e8:e6:f7:29:35:
59:f4:1f:f0:6e:16:e5:95:71:75:3e:13:f6:d9:24:
19:f9:fa:b7:8a:ca:fa:07:b6:06:97:b9:04:97:69:
5a:17:65:19:77:13:82:1e:1a:af:a3:6b:63:23:11:
fa:7f:9b:3f:9e:f9:14:b7:c2:f1:ee:fd:fa:8b:a5:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:FB:9E:E2:BE:CF:55:53:86:68:8B:6E:CC:D1:DD:09:F7:91:1C
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/lRj7nuK-z1VThmiLbszR3Qn3kRw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:17:53:ff:03:3e:c7:22:bb:69:cf:58:33:0e:44:07:61:e5:
46:48:e3:af:e5:e7:be:e5:fe:dc:02:3e:15:2f:de:47:4c:f0:
dd:9d:15:a0:72:17:e9:76:db:f7:f9:64:ba:24:fb:b6:84:c4:
f1:63:f3:7c:0c:29:c4:5e:b6:c5:51:b8:f1:ac:36:d2:99:50:
d2:98:ce:7d:f7:5d:26:4e:bc:da:83:86:77:d6:de:f6:a7:32:
90:8b:a1:80:6f:7d:7d:92:b9:28:8a:86:44:6f:a4:b3:cd:e6:
57:93:8f:33:95:eb:5f:0f:03:ff:93:ec:92:1f:b4:fa:b8:27:
09:24:5e:f9:35:be:eb:aa:7d:5f:59:63:01:2d:cc:d0:b4:b4:
a8:66:73:5c:e8:73:78:9a:40:5d:1e:82:f9:85:14:c1:96:b5:
43:77:0b:e3:70:4a:f1:bf:3b:94:28:0a:9a:0e:28:28:06:35:
62:f6:d5:ee:f7:50:f4:a4:5c:66:9a:13:35:2d:56:8a:99:d7:
fd:49:80:da:e5:82:01:08:ee:63:aa:e1:5a:7c:89:7e:94:af:
35:f3:6b:79:e5:83:e7:77:cf:83:03:cf:45:ac:e5:bc:c4:9d:
f9:2d:8e:b9:76:b2:01:f2:0f:55:71:57:b1:86:e9:6c:eb:79:
af:ac:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:15:59 2023 by rpki-client on console-fra.rpki-client.org