Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/NaN_6z2zG2ElqJ7rQKlIHHpId18.roa
File: NaN_6z2zG2ElqJ7rQKlIHHpId18.roa (raw, json)
Hash identifier: dSg0QszGniW/W/wLUBJRI7BKV3RRkcxgB7QLwEDaT/I=
Subject key identifier: 35:A3:7F:EB:3D:B3:1B:61:25:A8:9E:EB:40:A9:48:1C:7A:48:77:5F
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 09F0
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/NaN_6z2zG2ElqJ7rQKlIHHpId18.roa
Signing time: Wed 12 Jul 2023 01:49:26 +0000
ROA not before: Wed 12 Jul 2023 01:49:26 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 7018
IP address blocks: 180.223.64.0/18 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jul 12 01:49:26 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=35A37FEB3DB31B6125A89EEB40A9481C7A48775F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:8d:f3:1d:98:5f:72:ea:9c:5d:96:a6:22:
11:1a:da:61:98:89:d6:6c:11:54:90:64:a5:92:7c:
87:f2:14:0a:c4:34:1b:0e:90:c1:49:69:72:0d:06:
b9:96:5b:3c:96:3f:82:41:f7:9e:8f:9b:d5:80:81:
0c:a8:b1:2e:d3:20:bc:50:2c:37:af:b9:c8:70:14:
fd:37:6c:e3:af:98:4a:25:14:e3:07:18:71:9c:63:
cf:58:7f:93:d1:ee:2f:f0:29:f9:90:a8:db:6f:dc:
e1:8e:a6:18:e5:e9:bd:24:4d:91:a1:7d:1e:d0:7f:
66:f4:fa:f9:ac:d5:1a:9c:12:42:9a:f7:6c:59:46:
77:a8:76:08:61:56:64:56:c8:fb:35:f9:f2:c8:7d:
0e:51:ed:fb:3a:83:82:b2:d8:a8:4c:06:9f:e1:3f:
ee:0f:79:36:5d:6a:00:cf:31:42:b0:16:8d:a3:c9:
38:6e:5e:40:2b:92:d7:d0:d2:8f:50:c5:5f:95:20:
31:51:b0:7b:74:1e:ec:53:3f:23:33:32:48:2c:76:
66:27:61:21:d4:82:80:45:12:e2:81:af:72:73:50:
2c:65:3a:d1:55:38:d5:d9:30:59:40:c1:91:dc:8f:
bf:ff:fa:1b:e9:2b:24:79:f5:7a:01:00:3e:00:80:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:7F:EB:3D:B3:1B:61:25:A8:9E:EB:40:A9:48:1C:7A:48:77:5F
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/NaN_6z2zG2ElqJ7rQKlIHHpId18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.64.0/18
180.223.208.0/21
180.223.224.0/21
Signature Algorithm: sha256WithRSAEncryption
67:27:8c:90:a0:a2:5a:9f:d4:57:e8:a5:ae:cf:57:0d:b2:4b:
a9:b5:97:38:3b:d8:c4:25:9a:28:0e:c9:32:6e:1c:27:c4:cc:
fc:a0:eb:49:1b:a4:ed:cd:82:e8:8b:ae:29:c3:6a:31:40:57:
06:5d:08:f9:fa:17:aa:2a:da:8a:2a:55:1b:7c:cf:e0:9a:72:
50:32:04:ff:34:d2:4a:10:53:ea:c8:04:25:9b:5f:59:2d:05:
8c:58:c9:0a:3a:45:d6:80:2f:ce:f5:5a:a1:10:6a:32:d4:f4:
41:56:96:41:57:cf:0b:3b:f2:ca:93:7c:90:ff:97:17:a1:5c:
5c:22:7f:04:3b:08:af:95:a4:5b:4e:b3:8a:3a:c2:00:13:c6:
dc:6f:ed:c8:62:06:a6:0a:ff:a3:30:3a:d2:d2:20:42:ea:a6:
26:34:a2:6f:57:35:4e:8c:0e:be:64:0d:9a:0f:7a:c5:55:88:
67:7e:e2:83:b2:f8:8c:27:15:a7:8b:72:1f:2b:08:e5:35:bc:
c6:13:d4:1a:1a:d5:1b:e7:c6:12:a5:04:05:19:4d:37:08:43:
9a:e9:0b:7e:b7:7c:ca:12:f8:f8:5e:13:f5:73:13:75:15:80:
9a:c2:c6:eb:4f:eb:d1:fa:f2:7a:da:af:ea:ec:bf:81:2a:14:
3c:5f:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 11:08:36 2023 by rpki-client on console-fra.rpki-client.org