Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/2P85BiE8T8P8SEYTIdxYpIclQI8.roa
File: 2P85BiE8T8P8SEYTIdxYpIclQI8.roa (raw, json)
Hash identifier: EaBZOOFcKn2sRzgMjSTOpYHwWlp7zcddtj5yU9ukA/o=
Subject key identifier: D8:FF:39:06:21:3C:4F:C3:FC:48:46:13:21:DC:58:A4:87:25:40:8F
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1468
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/2P85BiE8T8P8SEYTIdxYpIclQI8.roa
Signing time: Tue 14 Nov 2023 14:07:00 +0000
ROA not before: Tue 14 Nov 2023 14:07:00 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 4811
IP address blocks: 180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5224 (0x1468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 14 14:07:00 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=D8FF3906213C4FC3FC48461321DC58A48725408F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:b0:95:3e:f5:c0:6b:0f:35:16:65:93:eb:
00:e6:26:fc:10:8e:50:2a:8c:06:7d:ac:82:e7:43:
15:a9:0c:be:5b:56:d3:0e:27:00:17:c6:c5:e3:76:
2b:3c:44:96:a2:cc:16:28:e6:2c:2a:b1:ef:46:2a:
38:bd:34:39:7c:21:fa:ec:2c:af:0a:86:14:cc:26:
f9:d8:5d:2b:1b:6e:1a:e3:c7:a9:9a:0f:5f:9b:a2:
f4:de:b0:c9:2b:c9:37:f8:28:e2:0f:be:81:52:9a:
bf:fd:aa:a0:1c:5d:d3:33:51:9a:35:aa:9c:a9:c1:
80:2c:91:02:1d:c1:d8:8b:37:2a:0d:53:d4:68:39:
c7:89:49:07:9e:bb:5b:7e:ce:f2:c4:6b:2f:bf:8d:
8d:c0:59:42:de:5f:f4:0c:69:66:1a:d9:b3:7f:b6:
f7:ed:d8:de:37:58:cf:81:97:7a:b5:ec:5b:83:d2:
75:35:88:31:6d:c3:25:37:21:78:9d:74:eb:e3:08:
74:92:ad:11:5a:b0:1d:f6:f4:e6:1d:6c:c0:07:de:
11:c4:e4:07:52:5d:28:db:6a:84:c2:a9:53:8b:a6:
98:59:dc:74:09:3f:32:6b:f6:70:ec:cf:f0:14:5f:
53:15:d4:cd:89:38:4d:74:f3:3b:f1:89:5a:fd:b3:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:39:06:21:3C:4F:C3:FC:48:46:13:21:DC:58:A4:87:25:40:8F
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/2P85BiE8T8P8SEYTIdxYpIclQI8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.144.0-180.184.155.255
180.184.184.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b4:95:b4:9b:2b:3f:9a:ed:52:c6:a8:ac:fd:ae:0d:6c:fe:
7a:47:5b:40:c5:00:a8:42:d3:ca:44:48:a8:a7:61:27:bb:f1:
2d:fe:0a:52:81:6a:03:36:18:9c:0e:bd:39:08:11:5e:13:52:
85:fa:8c:2b:86:b9:1a:c7:33:7f:d5:88:5b:b8:52:e5:5c:52:
e2:74:eb:9e:15:e5:a6:ad:c4:5d:e3:37:4e:06:24:11:a0:1f:
f9:d6:de:c6:29:2e:c8:c9:61:cf:ea:2f:42:36:70:d7:d0:59:
31:ba:f4:93:9e:ec:a6:76:38:f9:01:49:6b:69:6e:a3:ba:25:
36:b0:82:a4:9e:01:ff:36:5a:f3:9c:c2:eb:d6:07:f7:99:98:
8e:aa:a0:68:db:19:0e:df:4a:d7:30:5a:86:10:51:98:58:ff:
99:b5:ee:be:ec:f3:90:ef:6a:20:50:27:d0:74:52:4c:aa:98:
75:38:c5:77:43:f4:ce:4a:a0:65:8a:5a:04:95:b4:df:70:b9:
03:9d:80:1b:b9:df:4d:7b:97:10:35:f5:44:da:05:bd:11:7e:
43:f9:7f:9f:68:98:87:77:86:0e:a5:81:22:7a:0e:5f:ad:cf:
9f:97:9a:b3:69:03:cb:f8:3f:5b:b2:a9:de:0c:cf:be:23:21:
af:2c:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 19:49:06 2023 by rpki-client on console-fra.rpki-client.org