Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/wZ0IEXsTH-zQcdC5mwZ0ecvdsS8.roa
File: wZ0IEXsTH-zQcdC5mwZ0ecvdsS8.roa (raw, json)
Hash identifier: 0v70GAZRcVsXoTMGtjf5aWWlLZ7b2hNIpGbLZdCHRTY=
Subject key identifier: C1:9D:08:11:7B:13:1F:EC:D0:71:D0:B9:9B:06:74:79:CB:DD:B1:2F
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0B30
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/wZ0IEXsTH-zQcdC5mwZ0ecvdsS8.roa
Signing time: Mon 11 Sep 2023 10:50:22 +0000
ROA not before: Mon 11 Sep 2023 10:50:22 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 7018
IP address blocks: 180.223.16.0/20 maxlen: 24
180.223.32.0/20 maxlen: 24
180.223.48.0/20 maxlen: 24
180.223.64.0/18 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Sep 11 10:50:22 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C19D08117B131FECD071D0B99B067479CBDDB12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:44:79:fa:b7:e4:7a:77:1b:80:41:82:a8:
6e:a7:53:87:c9:70:ef:11:e7:e1:0f:9d:34:2c:0e:
6c:f6:40:ae:58:f0:74:84:fa:3b:f2:e3:73:4e:c3:
97:66:9d:92:7a:22:7b:5c:48:43:64:0f:a7:05:09:
a1:0d:72:3d:63:46:3b:35:79:a3:a1:fc:a9:8a:62:
52:17:77:8d:fb:c2:1f:d2:bd:44:5c:8f:32:ba:d8:
55:d3:fb:bf:29:47:84:10:82:85:aa:fa:69:34:40:
1c:af:23:6a:6e:68:f3:c4:91:2f:95:74:52:3e:c9:
41:27:93:31:54:83:02:0f:61:ec:2b:36:0d:1f:8a:
e3:ec:df:c9:a2:00:c0:77:94:9b:31:06:54:b2:3a:
f0:50:2b:04:ea:ff:60:38:d8:15:08:19:29:79:16:
54:5b:da:39:82:3a:61:8e:ce:dd:51:f8:62:86:3b:
ac:0c:5e:02:b5:4d:a2:17:77:6a:eb:ad:32:d9:a5:
88:af:26:76:bf:5f:78:f3:cf:c2:a9:97:83:7a:9f:
ff:9c:bf:8c:21:f4:a8:03:16:6e:b9:29:b8:f0:68:
13:4f:49:ef:b0:98:17:e7:1d:84:06:f4:db:d1:86:
67:d5:75:ae:87:55:30:84:2d:2e:e8:08:d8:47:3d:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:08:11:7B:13:1F:EC:D0:71:D0:B9:9B:06:74:79:CB:DD:B1:2F
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/wZ0IEXsTH-zQcdC5mwZ0ecvdsS8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.16.0-180.223.127.255
180.223.208.0/21
180.223.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:a7:bf:2d:cb:4b:e5:a6:75:68:f9:0b:ae:02:a5:ab:2b:a8:
69:dd:5e:b0:5e:8a:ef:10:9b:48:23:63:7e:ee:f6:08:ab:cc:
5d:da:f7:cf:a6:ac:69:86:1a:09:e4:41:37:26:98:8e:78:9d:
83:b1:e2:9d:37:43:27:5f:d8:fd:7d:b0:0e:02:28:d4:2e:54:
34:41:a6:33:c7:a9:08:89:06:cc:d1:f6:21:06:01:ac:9c:de:
b9:35:21:99:f6:9f:a2:59:ef:51:b5:86:52:4c:35:f6:34:30:
0a:11:46:e5:82:9c:38:c5:56:66:f8:84:5c:87:d4:d0:18:85:
7c:00:9b:b4:8d:07:79:5e:15:ef:7f:75:96:b9:61:07:9b:fe:
c0:fa:1d:fe:aa:31:03:71:76:f0:49:f8:7a:7f:b1:e8:93:54:
38:f9:eb:c4:16:96:46:2f:3a:63:94:e9:ef:ba:50:55:2e:7a:
83:18:b2:5e:5c:9b:c9:19:36:e9:be:e2:9e:a9:aa:a3:04:87:
a5:ab:8b:d1:12:2e:29:20:30:c1:fd:ba:c7:00:96:b3:66:92:
63:d7:5b:4f:23:23:c4:e2:99:41:04:f5:c2:2a:d8:89:b6:7d:
4a:dd:6d:49:2a:4a:c4:04:98:e9:cb:8a:d9:18:31:0d:82:cf:
76:2c:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 10:11:19 2023 by rpki-client on console-ams.rpki-client.org