Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/midR87L9RIeZmh8caaRYfafuMIg.roa
File: midR87L9RIeZmh8caaRYfafuMIg.roa (raw, json)
Hash identifier: GKHiqyJxAwLd9F201J1Ay4SnW8mF4/oKE53EcP1EXtg=
Subject key identifier: 9A:27:51:F3:B2:FD:44:87:99:9A:1F:1C:69:A4:58:7D:A7:EE:30:88
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 11AB
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/midR87L9RIeZmh8caaRYfafuMIg.roa
Signing time: Mon 22 Jul 2024 03:03:01 +0000
ROA not before: Mon 22 Jul 2024 03:03:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 984
IP address blocks: 180.223.124.0/23 maxlen: 24
180.223.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 12:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4523 (0x11ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 22 03:03:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9A2751F3B2FD4487999A1F1C69A4587DA7EE3088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:a2:7d:95:b7:0b:d2:c3:0a:3b:52:41:ad:
1f:15:34:95:e6:a9:b9:57:b8:ff:fe:a5:20:9d:2e:
08:a8:df:20:03:d5:aa:7e:d6:57:78:43:bb:15:07:
a3:09:c9:a0:ad:c3:07:7b:82:69:71:ad:71:cb:76:
ee:1f:e2:e7:82:df:e5:44:4e:71:7c:81:70:c6:71:
2d:27:70:48:5d:33:0c:bd:23:ba:97:e6:9a:7f:0d:
14:46:b8:c5:09:bb:63:d4:26:1c:17:10:dd:ec:79:
8b:14:a5:cb:aa:56:2a:d5:f2:f6:f5:3c:48:e5:3f:
ef:a0:c0:f3:ad:52:09:a7:cd:8a:cb:55:0f:3b:34:
43:f7:7f:cf:f7:b7:cf:17:c5:87:54:2b:29:16:36:
67:98:3c:f8:49:57:05:f7:35:8a:94:40:48:37:62:
88:74:18:0c:6d:07:3a:c2:05:71:ab:6b:8c:51:63:
ec:2f:ae:76:48:37:26:0b:6c:a4:4a:88:9c:eb:d3:
27:6d:55:f1:48:d3:c7:a1:8b:3a:07:e1:75:0f:4e:
1b:f3:ab:9f:87:99:08:d4:86:ba:c5:73:ca:f2:d1:
bf:10:7b:b5:71:aa:63:30:78:d6:21:bf:a2:47:f2:
f9:a9:f7:82:7a:90:a1:d6:57:d2:3b:85:c4:9f:bd:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:51:F3:B2:FD:44:87:99:9A:1F:1C:69:A4:58:7D:A7:EE:30:88
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/midR87L9RIeZmh8caaRYfafuMIg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0-180.223.126.255
Signature Algorithm: sha256WithRSAEncryption
ca:d4:31:49:ff:b9:0c:45:ad:aa:30:d9:82:5c:3b:c6:e6:2a:
cc:18:33:56:85:9c:02:f6:22:99:2e:8c:1e:9f:5c:a3:29:cd:
40:06:6e:d0:0b:ff:b1:73:14:09:e8:f4:81:59:54:98:4e:82:
fe:a6:ea:84:75:68:4b:7c:7d:ee:c8:b1:37:23:95:6c:89:8e:
eb:cd:b3:d6:7a:ba:21:ae:fa:ee:f1:55:f6:34:03:6a:74:60:
e7:8d:4f:2a:04:3f:e1:a1:d1:27:d3:e4:53:cc:73:bf:45:fa:
bf:62:9c:4b:75:5d:14:1e:f7:3e:68:1b:8f:c4:a0:23:73:b0:
03:eb:6b:e0:be:3c:ce:48:b3:b4:6a:16:69:bd:64:b6:e7:4b:
82:14:cf:10:e9:80:1a:cf:de:2e:a8:60:8d:51:45:6a:85:44:
91:c3:a7:b9:f7:dd:e4:2d:2b:6d:88:08:59:0e:f2:97:0c:bd:
c2:ab:29:78:71:c0:9e:e2:cb:b8:8a:e4:dd:ac:e1:c2:02:b3:
3b:cf:2e:c5:37:5e:ae:a2:4c:92:ad:a4:b7:3e:ac:62:79:7b:
17:56:52:7f:ff:bd:09:aa:bf:14:12:f1:8a:5a:b1:0b:b3:49:
d5:1d:a8:e5:39:4d:9a:ef:a8:21:ca:16:eb:cb:b7:95:cb:22:
0c:95:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 14:37:36 2024 by rpki-client on console-fra.rpki-client.org