Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/D4WHlEtOk_fLbnY2bYzgPsLDhHI.roa
File: D4WHlEtOk_fLbnY2bYzgPsLDhHI.roa (raw, json)
Hash identifier: KRcv3ciUo+ntUx9u/Fe153we4mcX7XxA3dyDBMixBgk=
Subject key identifier: 0F:85:87:94:4B:4E:93:F7:CB:6E:76:36:6D:8C:E0:3E:C2:C3:84:72
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 156D
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/D4WHlEtOk_fLbnY2bYzgPsLDhHI.roa
Signing time: Fri 17 Jan 2025 01:27:44 +0000
ROA not before: Fri 17 Jan 2025 01:27:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 984
IP address blocks: 180.223.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Feb 2025 03:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5485 (0x156d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0F8587944B4E93F7CB6E76366D8CE03EC2C38472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:ea:ec:6a:d7:0d:59:c0:90:da:31:45:66:
1b:e4:cb:7a:85:3f:48:9a:bf:f2:88:44:a0:52:b1:
1f:d7:9d:3b:aa:b4:6e:ab:98:14:9b:cf:ca:1a:68:
1c:3e:ff:50:c9:0c:4b:bc:56:07:5a:40:85:95:3e:
05:2e:e4:f9:f0:93:0b:db:8d:0b:a8:9a:f6:96:41:
87:2c:6b:5b:98:f5:82:8a:d5:ee:6a:51:41:11:4e:
6f:76:48:c8:97:44:6f:bc:2f:29:f5:48:69:bc:5d:
c2:b9:ca:77:dc:37:ea:a3:f7:ed:50:ec:e2:7d:c2:
03:d8:e9:34:2a:8c:52:d2:90:f8:11:03:8c:90:06:
b1:5d:e5:ae:5f:24:3e:aa:60:a0:5c:73:91:4f:06:
3a:0f:fc:3b:a1:7e:c6:58:97:32:f9:05:a4:c3:be:
e5:c8:ca:9e:5b:21:4c:59:59:97:8a:1c:a1:d4:37:
7a:91:2c:bd:cb:36:34:d0:50:e3:57:3b:21:9f:94:
11:e9:38:70:10:4a:1b:f9:14:51:ac:81:76:36:b9:
90:fc:3e:6c:39:de:a9:62:37:a5:e6:17:a6:1a:b5:
de:cf:61:d5:9f:bb:b9:29:fd:55:a2:6f:f7:9c:b8:
99:01:44:a1:40:6a:b0:df:dd:3a:4d:23:d8:3a:70:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:87:94:4B:4E:93:F7:CB:6E:76:36:6D:8C:E0:3E:C2:C3:84:72
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/D4WHlEtOk_fLbnY2bYzgPsLDhHI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:5b:87:03:d8:65:3d:7a:2f:20:d2:7e:b1:d0:c9:7d:d7:56:
c6:22:84:6a:d2:5d:73:f5:c6:75:fc:3b:19:4f:6a:0b:c2:6a:
bd:3e:4b:0e:65:c4:9e:02:b3:1c:04:41:40:83:95:0f:5b:a2:
cc:ea:2b:e6:c8:f9:7a:25:63:43:2d:4b:03:67:9e:56:8e:90:
5a:96:63:8e:df:42:ba:94:39:ab:f5:7d:eb:b0:31:3e:cc:10:
40:4a:ae:02:1e:80:70:ae:63:ad:ed:14:57:c0:82:34:39:5f:
0d:6a:6b:c0:e9:4d:ed:63:48:70:b6:15:93:c5:db:58:d5:e9:
c7:d4:8f:51:a8:bb:a5:cf:1a:0a:38:98:f7:8a:9f:6d:ad:1b:
f0:ee:37:8e:a2:0d:46:c8:f4:c0:a2:d0:4b:13:fe:bd:43:7b:
74:74:b2:18:d4:1c:0a:53:0f:7d:6d:4d:d5:3f:ae:ce:cd:fd:
ba:00:db:ac:e8:9c:d4:50:33:b8:0d:64:0d:c5:78:cd:81:80:
e9:71:13:70:1b:ab:21:86:a8:d6:78:c0:ce:32:11:19:29:09:
05:ef:77:30:26:73:44:13:36:3e:b2:02:fa:e0:df:50:26:c2:
fd:64:bf:5a:74:b4:57:95:35:2d:f2:c2:e6:e9:ba:eb:fe:b7:
d3:f2:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:07 2025 by rpki-client