Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/mpber5yuL3huBNoWzpE4kBfH_6w.roa
File: mpber5yuL3huBNoWzpE4kBfH_6w.roa (raw, json)
Hash identifier: GVb7VotWy8KZkxFFtR/2QJDhllubjZqSFGg2R3QokCo=
Subject key identifier: 9A:96:DE:AF:9C:AE:2F:78:6E:04:DA:16:CE:91:38:90:17:C7:FF:AC
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05E9
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mpber5yuL3huBNoWzpE4kBfH_6w.roa
Signing time: Fri 16 Dec 2022 22:11:32 +0000
ROA not before: Fri 16 Dec 2022 22:11:32 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 17772
IP address blocks: 180.223.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 16 22:11:32 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=9A96DEAF9CAE2F786E04DA16CE91389017C7FFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:b9:a9:39:32:d2:a7:39:71:a5:df:30:b1:
37:36:22:41:9d:e9:e0:e1:50:c1:96:7e:e5:a4:19:
ca:ee:ba:39:ca:49:3f:6a:1b:c2:f7:cd:72:66:6b:
25:be:fc:88:a3:b1:01:d7:40:66:11:d8:d0:b5:6e:
0b:15:bb:4f:ad:23:bb:34:74:44:c3:a1:96:cc:2f:
42:a0:de:cd:0c:b9:c9:5f:11:44:30:62:8f:0f:cb:
0c:f5:d2:e7:c1:d5:40:99:cf:cf:64:ab:3c:6d:e5:
e8:73:f4:92:e1:dd:3a:48:a6:c8:c1:7e:58:52:64:
dc:67:ec:0e:b3:37:16:52:e5:d1:8b:6f:11:38:59:
b6:68:09:34:23:18:48:36:9c:2f:0a:74:b2:7b:40:
55:85:46:42:88:1c:61:77:83:17:73:cd:a9:fd:0b:
c8:d4:25:cc:2f:8c:7f:03:3a:fa:31:67:b7:cc:a3:
72:cd:a3:6b:a4:0c:78:9f:74:72:ad:04:63:97:27:
29:9b:ab:56:df:fe:34:31:0d:b0:48:cd:70:00:72:
47:38:21:af:bb:83:c9:98:e7:d5:b5:56:86:34:f3:
81:31:78:c8:3e:e8:ec:35:18:34:57:1e:ab:cd:c5:
e5:c1:8f:c6:21:1c:c9:3c:d4:25:be:57:c5:d3:db:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:DE:AF:9C:AE:2F:78:6E:04:DA:16:CE:91:38:90:17:C7:FF:AC
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mpber5yuL3huBNoWzpE4kBfH_6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:06:29:97:e4:06:2f:db:39:a8:49:4b:ca:2f:b2:71:cb:f7:
12:34:99:fd:7a:46:50:f8:fd:8d:a0:25:97:e7:cb:c0:cf:95:
40:c4:69:94:eb:cc:7b:84:05:ec:81:48:cb:ab:90:2b:c5:8f:
09:ca:db:ce:b5:5b:95:5e:90:b2:13:7a:8f:76:f3:7d:c9:8a:
99:ed:2c:d0:73:f5:95:75:8b:9e:4b:60:c5:39:a1:29:6c:54:
8c:7f:58:f5:87:ad:42:9c:6f:14:c2:1f:61:48:50:9e:c2:00:
88:8e:27:71:f9:16:17:e2:79:55:40:b6:ca:4d:9c:35:2a:5f:
57:8d:0d:9d:33:c8:55:49:34:ad:45:39:7e:57:e5:00:66:5f:
96:91:c0:aa:cf:8c:82:2d:7f:f2:43:e8:10:27:2e:87:23:91:
08:b5:80:1b:50:7a:8b:9e:03:0b:53:ee:60:11:06:12:8a:6f:
2f:5e:fc:2e:80:42:04:2a:9e:89:b9:9c:04:ea:d2:23:18:a8:
76:c3:91:7c:be:6d:5c:13:39:62:0a:18:9b:a5:0d:e4:74:e1:
cc:c5:da:7c:f2:b7:f2:bf:6a:72:7e:c5:37:b8:78:89:b8:f9:
fd:72:ab:14:24:a7:62:d0:8a:4c:83:84:46:34:6a:cc:83:3e:
83:31:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org