Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/6H-USR50R0A8vuKDfsvsKdkmtyM.roa
File: 6H-USR50R0A8vuKDfsvsKdkmtyM.roa (raw, json)
Hash identifier: W0Z0F8dVwN+hCoNEsxH8qWPNDnOiPMIo9HkVmpW4QMo=
Subject key identifier: E8:7F:94:49:1E:74:47:40:3C:BE:E2:83:7E:CB:EC:29:D9:26:B7:23
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A97
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6H-USR50R0A8vuKDfsvsKdkmtyM.roa
Signing time: Mon 14 Aug 2023 04:33:31 +0000
ROA not before: Mon 14 Aug 2023 04:33:31 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 6079
IP address blocks: 180.223.200.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:31 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E87F94491E7447403CBEE2837ECBEC29D926B723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:d9:1c:6f:1c:3a:70:98:5d:4e:6b:67:6f:
cd:11:dd:d6:ba:c0:a0:be:e1:22:d1:f1:dd:fd:b8:
35:f0:1c:27:86:77:b1:cc:ef:7b:21:07:a4:ec:1f:
dc:0d:90:a9:dd:09:58:8e:a0:5e:55:bd:d7:53:c6:
9a:27:6f:df:b1:4e:aa:e2:c8:93:8d:8b:a3:62:d5:
8e:32:05:d1:a2:cc:67:dc:60:fc:dd:3b:e5:70:c1:
47:98:87:ca:e7:c3:b1:15:bb:c8:e7:cf:d7:24:1c:
b9:5a:0e:7c:73:e9:d3:2f:e5:86:b6:b5:07:68:fe:
2f:2a:4a:c6:4f:a3:46:cc:fb:a7:19:79:5c:0c:df:
c2:ad:93:23:cd:8b:67:ba:43:ee:d1:2e:6b:d2:4e:
91:2b:35:a9:9b:6a:0b:69:00:11:b5:20:65:9a:73:
40:2b:89:30:75:33:1d:d8:07:32:dd:ee:0a:95:fe:
51:c9:52:ae:08:d9:d6:dc:e1:4f:26:81:ed:4a:7a:
3c:6f:f1:56:80:c5:83:16:48:d3:1d:28:dd:fa:8d:
96:f9:b0:b2:85:e7:21:b9:9c:e3:d2:93:ff:77:58:
21:e4:25:83:5d:1d:24:53:9b:33:16:ae:c3:bd:51:
ca:01:b4:5d:6b:28:3a:89:c4:2d:6a:83:aa:a4:a2:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:94:49:1E:74:47:40:3C:BE:E2:83:7E:CB:EC:29:D9:26:B7:23
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6H-USR50R0A8vuKDfsvsKdkmtyM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.200.0/21
Signature Algorithm: sha256WithRSAEncryption
04:7f:b0:67:39:10:14:7b:c5:28:a4:15:41:3d:4b:25:0e:16:
0b:5a:a0:d2:38:61:a0:9b:64:d8:65:40:49:20:69:fc:45:e6:
93:be:f1:cb:8a:fd:a2:5f:45:bc:15:d7:d3:f8:a6:ce:df:36:
8c:d7:19:6c:fa:e5:fd:15:2e:be:38:3a:93:10:6a:8a:54:3b:
ec:65:94:e0:3f:fc:ce:2d:71:e3:9b:95:af:da:3b:ab:7a:da:
ec:c0:ee:fd:67:63:61:b0:55:3b:e1:c0:40:8e:c1:59:42:e1:
99:43:54:26:94:19:bd:a6:f6:8e:0e:52:f2:8b:e5:1e:92:23:
f7:62:10:ba:d1:7e:48:1f:b1:26:84:cc:28:50:37:3e:ef:53:
59:e4:85:23:ea:38:58:24:34:3a:69:86:78:a7:b2:3c:dc:2c:
db:e1:72:1e:d7:b6:ff:05:04:41:b4:df:c1:21:6d:bf:a4:e0:
3a:6d:f6:0f:96:fb:72:29:df:52:78:03:e0:d5:73:52:07:7d:
9f:38:94:4d:5f:26:23:ba:43:53:93:57:65:76:ae:d2:26:ce:
a9:a3:3a:b5:6e:63:22:85:e6:c3:30:85:4a:99:4b:b5:12:b0:
31:ec:c9:10:d2:88:f6:a8:1c:f5:fa:0a:fe:45:3d:53:71:2c:
64:eb:84:36
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMzA4MTQw
NDMzMzFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEU4N0Y5NDQ5MUU3NDQ3
NDAzQ0JFRTI4MzdFQ0JFQzI5RDkyNkI3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEFdkcbxw6cJhdTmtnb80R3da6wKC+4SLR8d39uDXwHCeGd7HM
73shB6TsH9wNkKndCViOoF5VvddTxponb9+xTqriyJONi6Ni1Y4yBdGizGfcYPzd
O+VwwUeYh8rnw7EVu8jnz9ckHLlaDnxz6dMv5Ya2tQdo/i8qSsZPo0bM+6cZeVwM
38KtkyPNi2e6Q+7RLmvSTpErNambagtpABG1IGWac0AriTB1Mx3YBzLd7gqV/lHJ
Uq4I2dbc4U8mge1Kejxv8VaAxYMWSNMdKN36jZb5sLKF5yG5nOPSk/93WCHkJYNd
HSRTmzMWrsO9UcoBtF1rKDqJxC1qg6qkolD/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU6H+USR50R0A8vuKDfsvsKdkmtyMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNkgtVVNSNTBSMEE4
dnVLRGZzdnNLZGttdHlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7TfyDANBgkqhkiG9w0BAQsFAAOCAQEABH+wZzkQFHvFKKQVQT1LJQ4WC1qg
0jhhoJtk2GVASSBp/EXmk77xy4r9ol9FvBXX0/imzt82jNcZbPrl/RUuvjg6kxBq
ilQ77GWU4D/8zi1x45uVr9o7q3ra7MDu/WdjYbBVO+HAQI7BWULhmUNUJpQZvab2
jg5S8ovlHpIj92IQutF+SB+xJoTMKFA3Pu9TWeSFI+o4WCQ0OmmGeKeyPNws2+Fy
Hte2/wUEQbTfwSFtv6TgOm32D5b7cinfUngD4NVzUgd9nziUTV8mI7pDU5NXZXau
0ibOqaM6tW5jIoXmwzCFSplLtRKwMezJENKI9qgc9foK/kU9U3EsZOuENg==
-----END CERTIFICATE-----
Generated at Sun Oct 1 10:14:58 2023 by rpki-client on console-fra.rpki-client.org