Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TQrjea40hZzZO7_m-Q9ooY_el6s.roa
File: TQrjea40hZzZO7_m-Q9ooY_el6s.roa (raw, json)
Hash identifier: jd6HBzZwVN1PlOrCFM+F7U9ZJaKmzfG/7sJhcc988sU=
Subject key identifier: 4D:0A:E3:79:AE:34:85:9C:D9:3B:BF:E6:F9:0F:68:A1:8F:DE:97:AB
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0BA9
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TQrjea40hZzZO7_m-Q9ooY_el6s.roa
Signing time: Sun 01 Oct 2023 09:39:24 +0000
ROA not before: Sun 01 Oct 2023 09:39:24 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 4134
IP address blocks: 180.223.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 1 09:39:24 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=4D0AE379AE34859CD93BBFE6F90F68A18FDE97AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:27:89:f9:44:29:ce:75:49:cf:79:de:a7:
1d:6d:eb:30:90:80:01:a1:58:81:3f:6f:b5:46:e0:
d3:4a:0f:96:45:4f:9a:a7:a2:73:de:45:6c:ae:d0:
3f:0b:54:e3:25:b2:8d:1d:27:9f:36:9e:07:85:74:
45:15:42:6a:9c:d7:d5:83:31:5c:78:f1:36:e1:e8:
fd:77:05:b3:98:86:b8:25:22:46:a6:2e:63:62:54:
08:ae:83:81:83:27:42:92:e7:f5:32:29:ac:9d:6d:
8a:75:dc:8e:55:12:b7:4c:f5:bd:fc:a7:0e:76:c2:
89:5d:8f:71:b8:29:3b:36:d3:e3:7a:96:84:8a:c5:
96:7c:9d:ed:f4:ff:37:2e:92:da:35:d8:d7:2a:89:
fd:09:21:1b:73:96:3b:ff:e0:ea:89:26:1b:be:b1:
d4:69:22:e4:6a:f8:fd:eb:7c:78:1a:6f:3f:f5:23:
41:49:ef:e9:53:39:c5:37:90:da:91:17:4a:5b:11:
8c:13:a8:6b:c6:6e:33:dd:46:90:6d:2a:cf:1f:55:
1e:9e:02:48:75:6b:db:5e:a2:d1:5a:64:5b:bc:33:
e5:70:b6:01:6f:e2:72:01:8e:51:ce:79:50:9a:d9:
bf:f0:00:8a:cd:11:d2:1a:18:51:1b:a2:fc:5b:5c:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:E3:79:AE:34:85:9C:D9:3B:BF:E6:F9:0F:68:A1:8F:DE:97:AB
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TQrjea40hZzZO7_m-Q9ooY_el6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:31:47:9e:e2:33:fc:14:6c:30:23:22:15:f5:e0:c4:72:0c:
6f:6b:6d:5f:65:69:88:91:40:82:59:f5:0f:29:f6:50:41:2b:
b0:1c:07:b0:69:9c:fc:bf:fd:b6:67:5d:e0:c0:bb:da:e3:b4:
82:f8:f1:6f:2b:a2:20:f0:98:1c:16:86:73:3a:cc:26:fb:fd:
6a:75:bf:f2:63:24:1a:68:86:2c:d7:62:d1:72:ef:4d:8c:b6:
bd:2c:7c:b9:9b:fe:2d:46:95:e5:56:d3:b3:60:4e:46:64:e7:
6d:02:fc:83:6a:af:0c:26:82:84:1a:70:f3:53:3a:66:f0:74:
51:e8:57:1c:2f:69:5d:0f:27:34:c2:18:ac:20:e6:b0:07:1d:
42:c0:2a:c7:75:85:ed:40:f1:8b:db:92:e2:9a:fa:c5:c3:6d:
c9:2e:e1:e2:0e:39:fd:48:06:c9:a8:27:67:39:39:c6:e3:a9:
23:bd:96:4b:64:ad:e0:30:fb:4b:da:fa:35:e9:0d:e7:dc:f9:
4c:1e:11:c6:62:ad:60:aa:ba:1a:eb:f0:24:cd:60:25:64:0f:
8c:2c:d5:43:63:ee:42:c6:e2:9b:da:96:ba:97:69:a2:05:de:
8f:45:6a:66:5f:d1:88:7e:26:68:55:79:54:f1:b1:d8:0a:cb:
5b:82:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:48:23 2023 by rpki-client on console-fra.rpki-client.org