Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLXcEQjr_-Ul4W04_hKuyRu3e_U.roa
File: xLXcEQjr_-Ul4W04_hKuyRu3e_U.roa (raw, json)
Hash identifier: oBt/VIjScocIYumL3MJ5EGa+JMxcAHpmAsJxMQC/MeU=
Subject key identifier: C4:B5:DC:11:08:EB:FF:E5:25:E1:6D:38:FE:12:AE:C9:1B:B7:7B:F5
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0F32
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLXcEQjr_-Ul4W04_hKuyRu3e_U.roa
Signing time: Mon 25 Mar 2024 08:12:09 +0000
ROA not before: Mon 25 Mar 2024 08:12:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 180.223.32.0/21 maxlen: 24
180.223.152.0/21 maxlen: 24
180.223.192.0/21 maxlen: 24
180.223.200.0/21 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 01:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3890 (0xf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Mar 25 08:12:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C4B5DC1108EBFFE525E16D38FE12AEC91BB77BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:c2:7d:51:76:68:2b:cd:7b:14:1b:f5:f7:
db:ad:c6:3a:be:74:ad:8f:43:38:cd:4c:c4:e7:41:
4a:3b:27:53:42:07:4c:62:a5:ea:4a:c3:f1:11:0f:
b8:10:1c:9e:e5:dd:a3:7f:f9:8a:eb:92:2e:4f:85:
ce:86:80:dd:26:f8:26:14:b0:bd:74:92:ae:3b:ac:
48:be:90:e2:89:2c:3b:9b:67:cb:7c:21:ac:62:d4:
88:18:a7:0b:51:a3:ae:6a:be:38:67:5c:01:5e:78:
33:77:a0:4c:b6:16:6c:7f:99:57:ad:f4:dd:61:5c:
4b:64:cc:e5:59:70:e5:da:95:7c:d1:34:c8:c4:a5:
5b:95:45:09:c4:fb:23:dc:1d:fe:ed:f0:d2:a1:ae:
e8:9a:d0:12:47:34:43:74:cd:c1:fc:a5:4c:63:ae:
18:95:21:72:1a:59:7f:94:62:9e:90:fc:5e:a7:9c:
18:55:38:6d:a2:a1:0b:2f:77:2c:28:8f:0d:b5:5d:
02:70:41:78:fd:f6:a5:71:b1:bb:5c:9e:55:47:9e:
45:01:c0:65:5b:fb:ef:74:ec:a5:64:2c:3a:65:84:
62:e9:ad:da:cc:70:00:5f:a9:97:59:3e:16:20:42:
32:52:cd:a2:16:bb:91:ea:b2:ed:83:21:b0:67:3f:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:DC:11:08:EB:FF:E5:25:E1:6D:38:FE:12:AE:C9:1B:B7:7B:F5
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/xLXcEQjr_-Ul4W04_hKuyRu3e_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.32.0/21
180.223.152.0/21
180.223.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:89:b7:fa:5a:11:46:58:5e:03:f1:33:7a:12:f2:98:2b:71:
ce:e5:ab:b8:76:e5:d0:20:90:f1:01:1a:2c:18:6d:8a:e6:f4:
c3:8d:82:41:57:f0:06:12:4c:2a:21:d3:bf:d2:e1:dc:de:ce:
3e:3d:02:35:ac:a6:c5:57:c7:12:39:b3:ec:4d:fd:10:4a:89:
49:1a:ce:c4:6e:ac:f1:6c:e1:d3:f9:c3:49:f7:98:5a:57:4f:
6f:61:47:17:1a:af:f3:57:60:16:cb:8e:db:37:aa:34:5b:3e:
98:da:c8:5f:08:27:7b:38:d7:2e:57:26:ab:2c:05:1e:57:0c:
89:21:e1:c8:7f:5f:bf:4c:70:0d:d1:35:c8:19:e5:e8:7c:62:
fc:34:69:35:1a:57:e8:a8:33:a8:b1:54:cd:78:47:e2:a3:91:
ed:03:4c:77:d1:00:dd:45:8c:02:88:d3:74:47:de:79:16:a1:
55:56:41:1f:b2:ab:94:d5:3f:c3:1f:f2:f4:2c:28:8a:18:11:
0a:9d:03:9a:e1:72:4e:7f:a6:ca:e5:b1:30:78:ff:44:5c:16:
01:db:80:88:bc:72:16:80:8c:f7:5c:03:97:27:21:ab:70:84:
06:db:e4:94:f8:79:93:0c:28:e2:ce:f6:b0:8c:b6:f4:9c:b1:
51:f5:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:45:30 2024 by rpki-client on console-ams.rpki-client.org