Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/UlfTQmIU_HzeSSxYYEfmKJsWwl8.roa
File: UlfTQmIU_HzeSSxYYEfmKJsWwl8.roa (raw, json)
Hash identifier: 3a7C2QAIKH1YmPBELzjXSHK1fkMgDLOnpdnF9T2xbSQ=
Subject key identifier: 52:57:D3:42:62:14:FC:7C:DE:49:2C:58:60:47:E6:28:9B:16:C2:5F
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05E1
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/UlfTQmIU_HzeSSxYYEfmKJsWwl8.roa
Signing time: Fri 16 Dec 2022 22:09:39 +0000
ROA not before: Fri 16 Dec 2022 22:09:39 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 17772
IP address blocks: 180.223.240.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 16 22:09:39 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=5257D3426214FC7CDE492C586047E6289B16C25F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:a5:0f:9e:a6:2c:03:ff:7b:d8:9a:b9:b0:
53:f2:a2:86:05:82:4a:d2:da:5d:00:6f:02:17:ce:
62:7b:1e:2d:8e:e9:86:68:ae:89:21:f1:5a:8b:0b:
7b:52:22:ac:52:e6:bf:27:88:c2:92:26:87:91:3e:
f1:59:1d:27:90:96:d2:a0:97:44:16:7e:54:03:59:
66:d3:a5:31:9c:cf:3f:ac:09:15:c7:4c:ba:82:70:
24:84:cc:9e:68:16:77:8e:f4:23:62:86:db:8a:e0:
54:cc:cb:8f:31:94:20:a6:b2:e4:58:02:02:c6:93:
0e:21:c5:3f:c4:79:0e:d9:bd:bc:1b:ba:23:d5:94:
9f:f8:51:c2:23:1d:e8:ce:b8:2d:6d:90:a8:ae:7b:
e2:9e:4a:3e:d7:de:3c:65:68:46:c7:ec:2a:85:6b:
c3:40:fb:31:96:ec:61:19:a8:3b:aa:91:36:ba:e0:
42:e5:07:3f:ae:bf:a3:06:e3:1c:84:74:74:bc:14:
55:62:38:ce:63:84:a0:f5:75:d0:36:89:b5:2c:8e:
16:b2:62:6d:ea:52:b3:f9:ff:cb:87:d3:4d:b1:c3:
f7:10:17:0c:8f:a0:30:61:33:24:e1:fb:6d:d4:06:
0e:58:5c:33:2a:c2:bb:1a:0d:ca:d0:1f:d9:6a:94:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:D3:42:62:14:FC:7C:DE:49:2C:58:60:47:E6:28:9B:16:C2:5F
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/UlfTQmIU_HzeSSxYYEfmKJsWwl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d3:d9:40:a2:d3:7a:8a:08:e1:50:ee:3a:08:97:13:ef:99:43:
c2:7a:32:a7:06:76:0f:3d:4d:3f:44:e7:3d:e2:3d:5b:d4:00:
52:0b:ab:e6:47:f9:7b:89:12:b8:a5:87:7a:60:6e:5a:9d:81:
bb:e3:a4:73:a0:79:d9:d7:96:42:c2:27:4e:86:6d:fc:ff:d5:
0c:47:b4:b5:09:9a:c0:5a:1b:91:ae:fc:ad:90:50:d8:c1:e3:
83:93:aa:49:4d:08:ac:9c:52:96:1d:f9:73:15:45:00:0d:1e:
7d:35:bc:20:74:a1:fb:28:2d:23:38:5c:94:2e:4b:97:51:ed:
a1:8b:2f:fe:c5:63:ce:d5:72:c1:52:6e:4a:cf:a2:e7:45:54:
9d:63:0d:e6:28:57:1f:88:df:2b:d6:dc:46:09:85:61:a8:3e:
f8:4e:64:55:fa:12:06:77:60:92:12:f1:95:66:33:25:d3:74:
1b:e4:00:c5:c1:a1:df:ce:65:a3:b9:ca:f2:e4:d7:c9:9c:1b:
ec:1c:2c:fa:d0:d7:89:e9:bc:2f:6a:09:da:a2:5e:41:2a:21:
9d:4e:d5:bf:5c:3e:0d:d3:5f:64:c1:36:dd:05:15:b7:0c:fd:
6f:69:f9:5a:61:d9:55:68:d0:27:87:98:3d:c3:95:29:c1:b2:
9b:c5:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org