Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/AbjQCqac_aHytfzlMUW5SYjsPfg.roa
File: AbjQCqac_aHytfzlMUW5SYjsPfg.roa (raw, json)
Hash identifier: RX4Qa6j3LfcUzGekqA0Clr0aqSD8wM2JeIR37ytlaws=
Subject key identifier: 01:B8:D0:0A:A6:9C:FD:A1:F2:B5:FC:E5:31:45:B9:49:88:EC:3D:F8
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 15B8
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/AbjQCqac_aHytfzlMUW5SYjsPfg.roa
Signing time: Mon 15 Jan 2024 06:05:29 +0000
ROA not before: Mon 15 Jan 2024 06:05:29 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 58539
IP address blocks: 180.184.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 00:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5560 (0x15b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 15 06:05:29 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=01B8D00AA69CFDA1F2B5FCE53145B94988EC3DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:64:2f:d6:7b:85:bc:47:f3:90:bc:94:19:
6c:7f:e2:fe:cd:64:d0:72:9c:fd:49:e7:f2:06:10:
8a:31:01:77:33:eb:b4:fc:1e:7e:53:e9:1f:d7:38:
f5:ee:03:19:c0:46:45:ab:73:60:df:b7:87:63:08:
3f:35:2f:34:30:d2:8c:6c:3d:65:26:e7:96:f6:74:
1d:1a:1f:56:ce:b4:cb:b8:84:5c:f4:f2:98:fe:c0:
b0:ea:1e:4c:80:14:c6:72:4d:db:2a:a7:07:9c:82:
f1:bb:af:c9:da:19:67:a5:d9:04:57:8d:bb:f2:54:
b3:a1:fe:0a:66:73:70:f3:ed:2e:c4:73:ca:db:bf:
4a:df:4f:3c:14:06:c0:f3:29:3c:0b:51:f1:76:8e:
2c:74:35:d6:8c:38:f8:68:f4:2d:9b:62:9b:c4:90:
bc:ea:1c:31:ef:19:5d:9f:f8:ec:b7:3e:09:6c:cb:
d6:b4:92:79:61:02:83:c6:38:84:0c:07:00:68:5d:
8b:ac:bc:9a:90:11:22:de:01:b2:2f:b0:71:8d:5e:
9f:83:4f:4b:76:87:14:2d:03:ca:59:a4:02:89:bd:
b6:2c:8d:28:ed:dd:4e:0e:eb:de:f9:05:00:05:45:
7e:1e:ed:42:86:b7:7a:6c:38:4f:b4:98:16:b6:25:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:D0:0A:A6:9C:FD:A1:F2:B5:FC:E5:31:45:B9:49:88:EC:3D:F8
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/AbjQCqac_aHytfzlMUW5SYjsPfg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.8.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f0:05:88:01:b6:e4:ec:d2:65:61:47:32:46:e2:42:af:ab:
17:1c:6f:7d:bb:b8:b1:b6:60:de:32:04:b8:0f:f2:c6:b8:56:
38:1f:c6:db:b0:61:a7:c7:bd:80:06:f8:f4:65:91:02:e6:13:
2b:09:f2:20:9b:ce:b7:d0:ce:7f:eb:6e:5d:a0:61:36:43:22:
2d:0b:a2:64:f6:f1:34:72:2e:15:14:7b:4a:bc:f5:c2:8e:f8:
c5:f6:65:c7:41:b7:f5:6b:31:34:41:bd:df:77:86:fc:36:0c:
a7:df:e8:07:ab:41:0f:03:b1:35:9b:1a:68:84:6c:42:46:18:
ae:e4:e4:f5:b0:52:e3:63:2e:34:a0:b1:17:17:08:ff:3f:89:
de:24:a3:6e:3b:f6:0d:44:c0:01:d6:68:e8:f1:c6:48:91:a3:
f8:fa:82:21:f8:1a:0d:d8:01:38:56:e5:46:48:85:9f:a5:92:
b2:8a:26:18:85:04:d1:a8:9e:db:38:8c:9f:97:92:1f:ab:ef:
68:3d:32:18:15:c7:2e:5e:68:cc:75:c2:ab:96:26:d3:a3:0b:
2d:86:a7:76:90:b9:41:1a:01:a7:f5:79:7e:65:23:00:8c:d2:
f9:94:55:11:50:18:ee:5b:c3:16:58:20:b2:39:e7:e3:e5:cd:
43:df:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:53:40 2024 by rpki-client on console-ams.rpki-client.org