Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/RagdYgBNkaV67khuJJYZvGIiFoY.roa
File: RagdYgBNkaV67khuJJYZvGIiFoY.roa (raw, json)
Hash identifier: sBb+IgA4GZM1bQr9RBqtblcxBmsNImzs3Isazj7VY+E=
Subject key identifier: 45:A8:1D:62:00:4D:91:A5:7A:EE:48:6E:24:96:19:BC:62:22:16:86
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0501
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/RagdYgBNkaV67khuJJYZvGIiFoY.roa
Signing time: Thu 03 Nov 2022 23:23:56 +0000
ROA not before: Thu 03 Nov 2022 23:23:56 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7029
IP address blocks: 180.223.192.0/21 maxlen: 24
180.223.200.0/21 maxlen: 24
180.223.208.0/21 maxlen: 24
180.223.216.0/21 maxlen: 24
180.223.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Nov 3 23:23:56 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=45A81D62004D91A57AEE486E249619BC62221686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:29:7b:8e:20:f1:08:53:73:d1:83:2d:79:
85:6f:11:97:2d:f4:b0:a4:8c:59:ee:ce:80:1d:ca:
da:72:59:1c:69:e2:2f:81:82:6f:08:8c:22:52:e4:
64:9c:7f:9d:b6:db:8e:5c:6c:6f:9a:72:4a:a7:f8:
e6:e2:7d:a6:32:8a:fd:23:6b:ac:78:ee:05:da:63:
da:8d:7c:4f:7b:76:f4:dc:0a:31:9d:ba:76:ba:04:
e9:70:15:e8:6c:8c:a7:1a:a5:1f:16:f0:97:cd:d4:
e1:6e:62:c2:b4:5f:e8:94:fc:f4:2c:67:20:36:57:
e7:de:5a:26:8c:db:b1:16:c1:0c:b0:67:b4:df:15:
d5:26:58:c9:24:b8:a4:60:ed:6c:88:4b:c2:c9:f5:
4a:e3:44:0b:d6:2f:bd:4b:5e:43:24:4b:04:13:e6:
1d:5e:56:2f:39:40:43:34:7f:48:9a:4d:7b:b4:5d:
78:56:9f:0c:aa:1e:74:a9:5d:c1:16:89:c8:13:26:
59:d2:cd:fe:66:1c:c1:a0:59:08:5d:47:aa:4e:b5:
63:45:aa:bc:73:41:57:40:c8:ea:2f:b0:8a:3b:01:
ad:58:5d:33:4e:7d:3f:33:9b:e9:b7:24:f7:31:ef:
f1:8e:1f:64:52:76:6f:b8:92:06:11:66:ee:30:98:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:1D:62:00:4D:91:A5:7A:EE:48:6E:24:96:19:BC:62:22:16:86
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/RagdYgBNkaV67khuJJYZvGIiFoY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0/19
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
25:0a:12:c6:c2:50:0a:09:9b:79:90:bc:ec:be:66:a2:eb:75:
87:f9:57:b3:7c:1b:51:70:80:40:52:9a:c6:a8:18:6b:8e:f9:
fb:07:70:7b:e1:16:a7:51:cd:08:8b:4d:8e:cb:44:c4:83:24:
8a:25:c4:52:f6:cd:f0:00:af:cf:fa:84:30:b3:07:74:8d:72:
42:07:7b:30:87:74:90:a6:09:4d:04:24:1d:eb:a1:35:69:d5:
52:bc:1e:6d:d2:46:aa:36:1a:92:6a:12:e4:9c:83:c8:18:67:
d3:e0:68:51:cc:d2:d8:17:a2:cb:8a:1a:cd:53:ac:c5:d1:7d:
5d:96:ff:f4:66:94:3b:a6:ed:cb:5d:ac:a4:09:13:b9:da:44:
af:3b:91:09:8e:ab:78:e6:92:cd:cd:01:ec:63:2a:82:d5:c1:
de:11:6a:28:03:85:4b:a5:39:59:30:c7:e5:1e:1d:d3:b2:e9:
b5:f2:42:86:01:d4:b5:93:ac:0e:07:4c:41:10:30:66:65:75:
51:61:66:b7:a2:3c:b3:c1:4a:f8:71:e5:88:42:a5:e1:6f:fb:
66:16:46:99:3e:85:76:a9:b3:7a:99:34:cd:9c:5c:59:f0:72:
25:fc:7f:44:eb:1a:5e:e7:ec:bb:1c:43:e2:cf:7f:7e:d7:f6:
07:91:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org