Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/tVKOZcv1wiLf1G8pyCRRG5MqrSY.roa
File: tVKOZcv1wiLf1G8pyCRRG5MqrSY.roa (raw, json)
Hash identifier: tZxvOmMPL4YxGI5dUXa8Dd0ou/QjPo2wVlhFNTiSWoY=
Subject key identifier: B5:52:8E:65:CB:F5:C2:22:DF:D4:6F:29:C8:24:51:1B:93:2A:AD:26
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A99
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/tVKOZcv1wiLf1G8pyCRRG5MqrSY.roa
Signing time: Mon 14 Aug 2023 04:33:31 +0000
ROA not before: Mon 14 Aug 2023 04:33:31 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 7029
IP address blocks: 180.223.192.0/21 maxlen: 24
180.223.200.0/21 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
180.223.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713 (0xa99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:31 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B5528E65CBF5C222DFD46F29C824511B932AAD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:03:fb:84:54:ac:96:7b:f7:a9:fb:aa:8b:
d3:98:06:2c:c2:d0:61:9b:d3:98:ec:95:32:d5:4a:
b7:56:92:d7:59:95:fe:dd:b5:2b:1b:b9:dc:77:17:
5f:84:36:bd:6f:c6:3c:f4:52:33:06:7b:5a:61:17:
02:fe:a7:6a:ca:52:43:58:4b:0e:79:3c:4f:f4:31:
0b:19:fe:b2:47:b8:3d:21:41:6e:58:90:93:e7:3b:
53:cb:bb:58:ec:1c:d3:26:54:84:a5:13:18:86:43:
c3:7b:11:5d:4c:7e:e0:f9:32:06:f6:ce:2a:f1:b9:
85:d8:34:d8:3b:23:74:76:b0:4e:8f:ac:03:11:52:
68:b3:96:c0:9e:1b:38:ce:ae:1d:8b:de:95:8a:22:
44:86:15:52:e7:42:85:57:a3:e3:32:fb:0c:3d:6b:
95:16:62:22:00:f0:60:96:e8:de:43:30:6e:50:a6:
4d:50:35:01:23:b0:e1:73:95:36:0b:fd:b8:e0:0e:
31:db:fb:ca:e0:fa:8c:6d:96:24:90:27:8d:1b:9b:
80:1d:5a:94:ef:1a:6d:23:00:97:f3:ae:b9:f7:ab:
c4:09:07:6b:d4:30:2a:f6:b7:0b:c2:06:d2:8d:31:
e1:84:7a:9b:66:f1:b3:07:1e:e5:4e:1d:63:af:4c:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:8E:65:CB:F5:C2:22:DF:D4:6F:29:C8:24:51:1B:93:2A:AD:26
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/tVKOZcv1wiLf1G8pyCRRG5MqrSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0/19
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
31:98:eb:86:de:6b:09:9e:61:f9:e6:d3:ac:7a:c3:c3:e9:af:
78:82:f0:9d:50:a2:9c:9a:1e:e0:7a:05:ef:df:e0:d7:e0:ad:
d4:32:75:16:24:1f:fc:ca:36:90:d4:0b:13:96:f5:14:b0:f4:
43:41:cd:e8:26:d6:a0:50:89:cf:dc:f0:9b:7e:4b:93:e2:cf:
19:02:74:f7:9d:15:da:a3:b5:1f:f7:f1:1a:b9:39:be:0b:31:
cf:7b:ce:43:0c:d6:63:23:3f:2c:55:ab:86:f9:45:4a:f1:90:
24:44:f4:c4:88:ac:35:d2:74:48:b6:9e:72:f0:a9:61:08:be:
3f:48:5c:21:45:c7:dc:6c:e0:aa:cf:47:0d:07:26:cb:20:d4:
bb:8d:ad:72:0e:28:3c:6c:bb:cf:5f:79:2c:5a:30:a0:d9:91:
29:ec:0e:c6:da:8b:9a:56:43:4e:76:f1:8e:c5:3d:74:21:9b:
fe:68:b5:2a:df:e3:af:a3:55:12:ff:3f:8e:06:bb:1c:1a:28:
be:1c:ad:9e:1f:cc:78:d9:35:23:56:38:64:da:74:8c:12:8f:
4d:c2:a3:e1:21:d4:f6:3b:7e:84:a5:58:f2:c6:34:19:b7:96:
6a:8e:e3:a1:de:06:2c:5d:e6:1f:6e:dd:49:06:bb:53:66:0d:
63:5f:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 10:11:19 2023 by rpki-client on console-ams.rpki-client.org