Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Wp0An5FNmXb1xavrsn884f79Oig.roa
File: Wp0An5FNmXb1xavrsn884f79Oig.roa (raw, json)
Hash identifier: Me3+K5dBg7cLYugcv0seV6HmtkmGw8Y7PYnWd9/ocno=
Subject key identifier: 5A:9D:00:9F:91:4D:99:76:F5:C5:AB:EB:B2:7F:3C:E1:FE:FD:3A:28
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 05E5
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Wp0An5FNmXb1xavrsn884f79Oig.roa
Signing time: Fri 16 Dec 2022 22:10:34 +0000
ROA not before: Fri 16 Dec 2022 22:10:34 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 17772
IP address blocks: 180.223.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 16 22:10:34 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=5A9D009F914D9976F5C5ABEBB27F3CE1FEFD3A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:2c:5a:bb:98:52:19:68:51:60:d9:e2:1d:
76:65:47:d0:3f:02:2d:0d:93:89:09:5b:8f:29:b2:
66:d1:5b:47:37:35:42:98:90:97:71:c5:87:12:6e:
e6:b8:fb:1d:d0:a2:f6:ac:b3:be:7b:88:c4:24:3a:
f1:c9:6e:f5:05:4c:7f:46:96:55:98:b9:a6:2b:1d:
ab:34:f3:fa:a3:c5:dc:a5:3d:f5:d4:31:5c:e3:c0:
7b:f5:9c:53:77:ab:08:f4:43:10:3f:55:44:a7:4a:
9a:0d:d0:e1:a6:65:a7:09:df:e9:73:64:35:1e:7f:
ab:4b:41:b7:4a:1b:25:51:ce:ed:fd:5a:c5:03:34:
13:08:3d:ab:ee:a4:ca:d9:17:f6:ae:c0:c3:ca:df:
a6:d7:fd:1e:97:cb:3c:c9:28:71:ed:7a:90:17:87:
4e:d2:e4:48:53:9b:fb:27:f1:35:2a:7c:dd:c3:3e:
3d:39:10:40:db:da:d4:2f:07:10:36:be:8d:07:26:
a0:2c:68:58:a8:53:2e:bb:d7:48:93:3c:25:a8:6c:
bf:d6:41:fb:01:4f:8c:80:9d:fd:5d:f3:eb:ae:c3:
70:08:52:b7:f4:f3:db:be:bd:c6:8b:90:40:9c:0c:
c6:b1:90:0c:00:da:d5:7d:e8:82:e2:9f:6a:a4:78:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:00:9F:91:4D:99:76:F5:C5:AB:EB:B2:7F:3C:E1:FE:FD:3A:28
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Wp0An5FNmXb1xavrsn884f79Oig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5a:4b:d8:47:f3:19:a4:9a:f9:11:b6:6f:69:6b:ea:55:ba:08:
d7:1c:19:3c:95:ce:dd:8d:b1:a4:f6:de:d9:ac:4a:ec:02:3b:
94:31:08:5c:00:44:0c:3b:a4:a0:97:ee:17:a2:95:78:58:80:
29:7b:17:3f:d5:d9:2b:8b:45:79:dd:ac:c2:e0:82:8c:ab:2c:
0b:c7:8a:87:26:b2:81:79:ca:a5:26:57:7f:ab:53:f7:5f:e0:
1e:77:11:d4:ec:a4:5a:be:06:ba:43:80:24:d9:27:f1:0a:30:
c8:b7:dc:34:6a:d2:4a:6e:57:53:55:a3:c9:db:d1:95:50:d9:
d6:08:02:12:49:0f:16:ae:a4:46:90:cd:94:9e:bb:57:8b:47:
d1:42:99:55:89:47:10:73:46:c8:16:78:b1:13:29:57:c4:27:
5b:c3:84:89:ea:a3:3f:23:4b:d2:09:57:c2:2b:c0:13:32:c6:
0c:95:a8:79:90:5e:d9:2c:06:55:39:77:75:ef:bc:75:0f:4b:
8e:f1:6b:78:a1:3f:03:39:a5:65:0d:52:2a:7e:68:ae:f3:05:
6d:d3:b4:27:24:92:71:fe:9a:53:76:d4:91:da:5f:b2:f3:ac:
5f:87:c4:7f:d7:de:e0:77:0e:be:b8:35:76:db:80:0c:e0:8c:
84:b3:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 05:12:39 2023 by rpki-client on console-ams.rpki-client.org