Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/nnkDYPQ4EZsG0S6gJ9lODqcwwlM.roa
File: nnkDYPQ4EZsG0S6gJ9lODqcwwlM.roa (raw, json)
Hash identifier: SyDZGzLvnmDhiyrBTLefzHsZ9gIDv6LnljSjTHIZ9dE=
Subject key identifier: 9E:79:03:60:F4:38:11:9B:06:D1:2E:A0:27:D9:4E:0E:A7:30:C2:53
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1469
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/nnkDYPQ4EZsG0S6gJ9lODqcwwlM.roa
Signing time: Tue 14 Nov 2023 14:07:01 +0000
ROA not before: Tue 14 Nov 2023 14:07:01 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 138421
IP address blocks: 180.184.144.0/21 maxlen: 24
180.184.152.0/22 maxlen: 24
180.184.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5225 (0x1469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Nov 14 14:07:01 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=9E790360F438119B06D12EA027D94E0EA730C253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:bd:de:e1:46:ba:fb:ba:ff:39:24:dc:4c:
64:ad:5b:af:77:af:9f:fc:0f:b1:c4:c0:9a:fd:87:
bc:fb:24:06:54:94:b0:24:f2:48:73:82:ce:4a:98:
72:e8:1b:66:d3:82:e6:2e:0d:77:5d:3a:5d:e6:7a:
f5:2d:fd:ab:af:4e:b9:0c:ad:fb:1d:ef:35:14:d0:
9d:ac:6e:16:55:a4:33:c6:fb:3f:f6:7a:86:46:23:
e5:74:e1:28:5a:37:5e:99:54:e0:47:7b:ee:8d:cb:
05:7e:dc:73:97:87:01:72:27:74:e4:06:03:2f:46:
ae:3f:c8:8a:a1:6b:0d:cf:74:7b:2b:49:a8:d5:03:
63:a0:64:eb:4f:4d:f8:43:f0:87:11:05:8b:6e:f6:
6a:41:d4:bf:52:2b:f9:51:9f:e5:a4:a7:a8:2d:42:
09:44:d9:94:db:a8:71:23:6b:a7:68:8c:99:07:50:
e9:d1:25:fa:82:7b:6c:53:4c:93:24:06:51:d4:b4:
df:8c:23:0c:e9:32:bd:8d:2e:68:ec:ac:e2:5b:23:
92:ba:29:e6:db:69:3a:6b:ee:53:a6:15:b1:a2:45:
ca:1b:70:3d:4a:d2:4b:65:52:6d:5b:60:3d:c0:ca:
c1:b4:78:b5:ad:98:36:67:01:55:e1:30:93:b0:0e:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:03:60:F4:38:11:9B:06:D1:2E:A0:27:D9:4E:0E:A7:30:C2:53
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/nnkDYPQ4EZsG0S6gJ9lODqcwwlM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.144.0-180.184.155.255
180.184.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:16:3d:a2:65:a5:2e:2c:c3:94:96:ed:9a:de:f7:d4:20:93:
0e:a4:a8:a8:e1:75:0d:a5:a4:f3:c5:48:6d:81:17:07:67:f0:
bb:05:86:e8:4c:29:aa:50:ff:f5:5e:b2:0e:a7:e3:db:27:f6:
95:ff:00:b0:b9:b4:bd:f6:ea:12:e6:a9:3d:3b:57:c3:e6:d8:
26:81:64:62:f7:b4:7b:0d:f4:1f:8b:fc:cf:8d:27:51:94:d8:
95:44:a0:87:74:ff:06:4d:1d:61:33:ec:9f:b0:f2:b3:ed:6a:
30:b4:a2:0f:c7:39:50:2d:5e:69:1b:9a:c8:90:f3:fb:6a:d5:
88:ca:95:a1:88:29:d8:69:c0:ec:b8:9f:c4:27:b2:e9:73:e5:
53:d5:15:8f:14:a4:02:b9:0c:1f:55:4f:3a:b9:d3:c1:c2:e6:
a4:38:62:62:2f:8b:dc:26:9c:f7:b5:28:8d:f2:3d:ae:9f:89:
c4:03:0f:a6:28:1d:c8:7b:ac:88:c6:09:47:10:d2:22:27:18:
87:26:63:74:ad:92:eb:0f:49:a0:91:20:e5:d4:3a:30:28:7c:
73:f8:0b:3c:f6:13:a2:83:0c:15:eb:37:2b:c1:ab:70:5e:12:
04:58:39:50:1a:75:33:a7:9a:37:89:fb:54:49:b1:8f:27:89:
03:7c:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 19:49:06 2023 by rpki-client on console-fra.rpki-client.org