Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Mr7ZWDssnAjGIjtuVqlF2StmT7g.roa
File: Mr7ZWDssnAjGIjtuVqlF2StmT7g.roa (raw, json)
Hash identifier: 9pHi01DWjZ1HJQ1KUMfYJUSvA7HjDNYhu245DsCf/Qc=
Subject key identifier: 32:BE:D9:58:3B:2C:9C:08:C6:22:3B:6E:56:A9:45:D9:2B:66:4F:B8
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A9B
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Mr7ZWDssnAjGIjtuVqlF2StmT7g.roa
Signing time: Mon 14 Aug 2023 04:33:32 +0000
ROA not before: Mon 14 Aug 2023 04:33:32 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 3320
IP address blocks: 180.223.216.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:32 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=32BED9583B2C9C08C6223B6E56A945D92B664FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:5a:3d:bd:c4:6a:9a:64:d7:fc:60:af:b3:
bc:5e:a8:cc:00:67:e0:18:86:75:8c:60:19:01:82:
44:24:dc:b4:85:8e:9e:55:31:18:83:ff:95:a3:7f:
b0:df:be:a1:b5:0c:d9:ed:a1:58:33:af:8f:9e:2c:
09:e4:c3:d7:3b:26:1e:86:40:62:87:a5:97:bb:7f:
9b:49:98:68:5b:0a:6f:5f:77:0c:b4:a4:eb:2e:fe:
f1:07:aa:c2:58:38:15:31:59:57:16:fe:85:46:d7:
52:33:61:fc:da:30:5a:49:26:93:8a:95:6d:b6:61:
82:84:57:41:07:9a:a0:92:41:b8:97:ee:7d:36:c2:
c0:f3:a7:fd:24:dd:bf:3b:d4:6f:39:1f:df:7c:27:
44:9d:c5:27:e5:e5:2d:4c:6e:cb:e4:13:bd:9a:67:
42:e8:e8:d4:32:3a:50:cf:27:a1:3e:7a:32:76:8f:
e2:6d:e8:c9:97:18:77:be:59:d9:48:70:8f:eb:87:
5d:27:20:16:d0:f1:85:2a:3c:d9:a2:d6:02:b6:ed:
c5:9b:a2:ec:8d:47:88:bc:e3:dd:f6:00:00:c4:bf:
d0:53:75:6e:60:63:3a:fa:63:61:a3:fc:60:ee:69:
b2:8a:14:a7:2d:c3:cc:e5:f6:c5:d7:75:a2:d5:43:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:D9:58:3B:2C:9C:08:C6:22:3B:6E:56:A9:45:D9:2B:66:4F:B8
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Mr7ZWDssnAjGIjtuVqlF2StmT7g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.216.0-180.223.231.255
Signature Algorithm: sha256WithRSAEncryption
1d:2f:e4:90:87:a6:3c:b8:f3:ca:4b:e5:6f:ff:3c:0a:4f:2d:
4a:9d:19:fc:23:65:47:41:0b:0f:ab:e7:69:0e:e2:64:93:dc:
9c:9d:6c:a6:22:f8:1c:b2:91:a9:63:38:26:c9:9b:ef:93:f3:
7b:92:56:63:f5:08:3c:d8:17:4e:eb:fe:ef:c9:02:be:cc:c3:
85:09:41:94:fd:50:9b:93:af:f1:36:3a:09:c7:3c:54:ec:22:
ca:13:13:18:d0:6b:e7:60:41:9c:50:0a:84:9f:0a:39:3c:27:
6d:8a:3f:38:b9:f0:22:76:cd:c9:de:74:45:da:07:62:a5:a5:
b1:b8:ac:38:bb:4f:cd:a4:12:0b:33:98:1e:71:89:8d:b8:19:
38:a3:87:9e:35:79:d3:54:54:54:a5:51:8d:b2:d5:f9:95:17:
8f:c6:cd:b5:c7:bf:a4:1e:42:be:a0:93:0d:94:8d:bb:6f:91:
70:33:fc:cd:cf:f0:82:b3:af:35:65:67:80:d1:32:70:0c:c3:
63:2f:37:6e:d0:c8:0e:4e:64:fb:03:e3:b0:5d:3b:47:8c:1c:
00:2f:58:62:62:53:ae:d7:83:2d:0d:3c:87:6a:98:96:d4:ca:
3d:5c:dc:9d:6f:a3:c0:82:26:e7:3e:64:d7:26:6b:6f:15:17:
4f:9a:bf:a4
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgICCpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMzA4MTQw
NDMzMzJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDMyQkVEOTU4M0IyQzlD
MDhDNjIyM0I2RTU2QTk0NUQ5MkI2NjRGQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLdlo9vcRqmmTX/GCvs7xeqMwAZ+AYhnWMYBkBgkQk3LSFjp5V
MRiD/5Wjf7DfvqG1DNntoVgzr4+eLAnkw9c7Jh6GQGKHpZe7f5tJmGhbCm9fdwy0
pOsu/vEHqsJYOBUxWVcW/oVG11IzYfzaMFpJJpOKlW22YYKEV0EHmqCSQbiX7n02
wsDzp/0k3b871G85H998J0SdxSfl5S1MbsvkE72aZ0Lo6NQyOlDPJ6E+ejJ2j+Jt
6MmXGHe+WdlIcI/rh10nIBbQ8YUqPNmi1gK27cWbouyNR4i84932AADEv9BTdW5g
Yzr6Y2Gj/GDuabKKFKctw8zl9sXXdaLVQ/Z5AgMBAAGjggH7MIIB9zAdBgNVHQ4E
FgQUMr7ZWDssnAjGIjtuVqlF2StmT7gwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTXI3WldEc3NuQWpH
SWp0dVZxbEYyU3RtVDdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEw
DjAMAwQDtN/YAwQDtN/gMA0GCSqGSIb3DQEBCwUAA4IBAQAdL+SQh6Y8uPPKS+Vv
/zwKTy1KnRn8I2VHQQsPq+dpDuJkk9ycnWymIvgcspGpYzgmyZvvk/N7klZj9Qg8
2BdO6/7vyQK+zMOFCUGU/VCbk6/xNjoJxzxU7CLKExMY0GvnYEGcUAqEnwo5PCdt
ij84ufAids3J3nRF2gdipaWxuKw4u0/NpBILM5gecYmNuBk4o4eeNXnTVFRUpVGN
stX5lRePxs21x7+kHkK+oJMNlI27b5FwM/zNz/CCs681ZWeA0TJwDMNjLzdu0MgO
TmT7A+OwXTtHjBwAL1hiYlOu14MtDTyHapiW1Mo9XNydb6PAgibnPmTXJmtvFRdP
mr+k
-----END CERTIFICATE-----
Generated at Sun Oct 1 10:14:58 2023 by rpki-client on console-fra.rpki-client.org