Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/IpgvLXTdfuR1eY706pGU2kJzAlI.roa
File: IpgvLXTdfuR1eY706pGU2kJzAlI.roa (raw, json)
Hash identifier: lJoV2YztJ9hl8QzbHQqz8jirw8id1FqdibPAsKwmkDo=
Subject key identifier: 22:98:2F:2D:74:DD:7E:E4:75:79:8E:F4:EA:91:94:DA:42:73:02:52
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1484
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IpgvLXTdfuR1eY706pGU2kJzAlI.roa
Signing time: Thu 16 Nov 2023 19:13:57 +0000
ROA not before: Thu 16 Nov 2023 19:13:57 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 4811
IP address blocks: 118.145.32.0/19 maxlen: 24
180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5252 (0x1484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 16 19:13:57 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=22982F2D74DD7EE475798EF4EA9194DA42730252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:79:80:fa:a4:ca:fd:79:61:26:da:66:2f:
6f:70:13:f2:f3:e0:e7:96:43:5f:0f:bc:30:97:9e:
64:e8:8b:ad:28:e6:c3:a9:23:ab:9f:da:e4:84:e4:
a6:bc:04:81:7b:14:9b:db:04:18:18:cf:1b:5d:c8:
76:67:b4:1e:34:aa:ae:49:10:8a:e4:8e:e4:fa:71:
50:e6:45:87:a4:1a:ad:85:ef:20:1e:c5:b9:69:7b:
8f:c3:78:df:a8:91:70:8e:0f:5e:07:97:ce:4c:ff:
2f:df:9a:53:36:43:45:ff:c6:45:9f:15:01:f5:6f:
fe:96:78:fd:f1:13:85:ff:6f:2e:c7:ed:36:e0:cf:
e0:bf:b2:63:40:e2:5e:02:64:c3:a5:34:2e:81:1e:
c3:a1:a9:93:16:02:0f:34:71:40:4b:76:ef:d1:bf:
31:ac:81:7b:77:8e:0f:b8:b8:f3:7b:9d:b9:e2:04:
b6:c6:f2:ea:ec:09:ca:22:a0:95:7f:7c:6c:eb:80:
52:74:78:f2:9b:bf:96:86:f7:8d:ca:98:e9:02:7a:
65:83:7c:5b:b3:8a:06:bd:59:81:ba:50:79:0b:f9:
14:08:51:65:91:68:71:a6:1c:ec:df:64:b4:42:09:
bd:34:2f:ca:50:ad:c5:f1:07:a1:77:17:9c:a1:f6:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:2F:2D:74:DD:7E:E4:75:79:8E:F4:EA:91:94:DA:42:73:02:52
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/IpgvLXTdfuR1eY706pGU2kJzAlI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
180.184.144.0-180.184.155.255
180.184.184.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fd:d9:8c:dd:74:9b:d3:57:fd:c5:6b:75:aa:ef:ea:61:68:
58:84:be:5d:43:ac:37:cc:54:36:00:f9:d5:47:2a:b7:6d:ec:
18:2a:ef:0c:d9:40:e0:d9:90:71:c5:5e:43:92:49:40:1a:d0:
7f:06:e3:e5:93:f3:77:46:ae:d4:14:de:2e:d3:41:19:93:4c:
7d:fd:e2:f1:6a:4f:97:88:32:4b:b3:21:62:32:81:1f:2b:e9:
90:68:e2:17:91:d3:61:4e:12:2e:32:62:fe:e4:9d:66:a6:94:
27:5e:c6:91:06:2b:e3:db:3a:d7:7e:15:1e:ad:c0:43:57:86:
49:b7:f6:0b:3d:5c:bf:39:14:24:4e:bc:38:69:9f:c3:4f:66:
2e:d0:24:5b:e3:3a:5c:1c:c5:e3:ee:a5:29:1f:dc:fb:4e:32:
42:13:ca:c9:89:52:5e:e1:e3:7e:59:78:81:54:cb:0a:27:41:
f9:26:09:2f:fe:a4:60:90:bb:6f:a2:6d:54:96:20:a7:db:4a:
72:9b:1c:88:f6:c7:89:6c:29:7f:0e:29:a6:09:7f:df:68:72:
de:1e:c4:8f:78:3d:21:0a:8b:75:07:f4:5f:dc:a9:a5:3f:e6:
e2:a3:1b:d1:c9:fd:a7:b6:df:b1:8c:3b:19:a9:c1:d5:25:df:
93:64:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 03:42:31 2023 by rpki-client on console-fra.rpki-client.org