Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Fdr71Yt4c1-X3zxtNH2CLD5VfSg.roa
File: Fdr71Yt4c1-X3zxtNH2CLD5VfSg.roa (raw, json)
Hash identifier: 9i6FxVllGLQkJUdh0WjZHlk7QoQvfrLYak8MYuXxPMg=
Subject key identifier: 15:DA:FB:D5:8B:78:73:5F:97:DF:3C:6D:34:7D:82:2C:3E:55:7D:28
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A98
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Fdr71Yt4c1-X3zxtNH2CLD5VfSg.roa
Signing time: Mon 14 Aug 2023 04:33:31 +0000
ROA not before: Mon 14 Aug 2023 04:33:31 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 17772
IP address blocks: 180.223.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:31 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=15DAFBD58B78735F97DF3C6D347D822C3E557D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:fc:32:e6:23:8b:1d:c4:e6:b7:02:67:87:
b9:90:c4:e1:69:7e:05:55:9d:b3:6a:db:2a:a5:ab:
1e:d9:ed:3f:ee:96:31:04:2f:ff:e4:84:96:33:66:
b2:6b:22:95:6b:3d:a7:11:dd:79:35:70:fe:d9:42:
6f:b9:bf:ab:79:19:1b:50:0b:82:01:8b:ba:4b:50:
83:a0:8a:31:78:ee:d8:8c:bd:ec:b1:47:65:cd:e8:
62:1c:59:4a:d1:4a:88:9d:64:10:99:01:a2:e2:b1:
84:7a:67:23:49:20:5e:b1:c5:75:eb:92:52:e5:7e:
25:9c:49:57:ee:da:73:3f:20:70:a0:66:d6:83:a0:
be:6c:0b:4a:26:9f:12:d3:da:68:69:91:0b:d8:7c:
1d:67:b6:0b:47:e1:56:f8:7d:2a:e2:7a:7f:db:25:
8c:c4:89:19:a6:c9:54:1a:4c:a0:fd:dc:70:bc:f0:
0c:c8:e8:d0:a3:00:f3:6e:b4:93:5a:37:00:0f:dc:
1d:67:35:37:9d:cb:9a:58:d0:92:c3:c8:48:51:a3:
a6:d8:b4:88:a0:61:32:e9:1c:ee:db:fa:c1:79:5e:
45:72:f7:52:90:ab:db:3d:03:b9:6b:4a:74:6f:16:
cc:8b:f0:2b:51:5c:b4:24:3d:f2:37:bb:ad:90:1a:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:FB:D5:8B:78:73:5F:97:DF:3C:6D:34:7D:82:2C:3E:55:7D:28
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Fdr71Yt4c1-X3zxtNH2CLD5VfSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:6c:24:72:70:57:60:ea:0d:d7:cc:d0:c9:91:d5:f4:dc:67:
6b:19:60:94:19:72:a8:cd:68:24:40:07:3e:a4:e5:1d:52:fa:
a6:ef:76:e0:f4:9f:6c:a4:4e:64:8a:2f:ea:13:91:b4:14:bb:
4d:8f:eb:c9:60:b8:2b:eb:21:28:a2:d5:03:ed:87:ec:81:a4:
5c:ff:8b:87:91:99:25:73:66:1b:59:46:68:90:1b:45:6b:11:
38:1e:4f:6c:c5:73:92:b8:18:0c:77:77:18:83:a7:6d:09:ea:
9d:c8:15:bc:a2:0e:f1:b0:ae:1b:5e:a9:2c:61:e5:e3:2d:76:
29:7d:e6:6f:43:e9:f0:46:b6:2b:d6:51:ea:a9:02:44:d7:eb:
30:51:4c:f7:d2:04:0e:3e:ee:71:af:74:83:f0:d1:7e:d2:cf:
02:56:87:61:fe:2f:f4:7f:36:d1:12:7e:0b:99:86:da:3c:9a:
66:a3:fb:79:6a:dd:45:b6:ca:35:21:e9:d8:2f:c8:e6:94:94:
46:1b:8e:c4:54:a7:a0:96:11:b4:ae:25:e5:a0:5f:a1:fa:27:
eb:45:b8:e5:2a:0a:af:03:15:86:cb:a0:c8:fe:77:a5:52:73:
5a:f8:ec:b1:8a:c8:c9:31:6d:fb:8a:d2:02:37:28:b5:cf:50:
0b:7b:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:15:59 2023 by rpki-client on console-fra.rpki-client.org