Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/eTjc9UpareWis3GWChUWyT6NQ_s.roa
File: eTjc9UpareWis3GWChUWyT6NQ_s.roa (raw, json)
Hash identifier: U4im61sQKhFxoURyh6kmw2COHKD3hw/mbySIT6GTQJs=
Subject key identifier: 79:38:DC:F5:4A:5A:AD:E5:A2:B3:71:96:0A:15:16:C9:3E:8D:43:FB
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0BA8
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eTjc9UpareWis3GWChUWyT6NQ_s.roa
Signing time: Sun 01 Oct 2023 09:39:24 +0000
ROA not before: Sun 01 Oct 2023 09:39:24 +0000
ROA not after: Tue 24 Sep 2024 02:11:20 +0000
asID: 4134
IP address blocks: 180.223.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 1 09:39:24 2023 GMT
Not After : Sep 24 02:11:20 2024 GMT
Subject: CN=7938DCF54A5AADE5A2B371960A1516C93E8D43FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:9c:bf:e7:50:77:ee:ce:07:7f:aa:04:3e:
bd:00:06:7b:19:37:92:87:dd:cc:06:91:01:67:23:
73:d6:fb:b2:45:b7:ba:d0:79:53:26:bc:f1:b2:3a:
82:86:da:e1:1a:a7:38:b2:c1:eb:64:b4:db:d2:0e:
40:09:25:95:5e:f3:9f:64:5c:a5:9b:4e:b7:1a:ab:
0c:25:67:20:3f:e2:d0:85:e3:f3:57:aa:ae:40:d8:
64:1f:be:52:6c:6a:e9:96:09:44:7a:58:06:66:3b:
58:25:c5:2f:99:86:22:78:db:cf:f2:03:8b:cc:16:
c5:49:3c:70:76:41:55:96:c1:d9:e2:ab:d2:f1:a2:
f5:b1:7a:a9:e4:f5:fa:bd:b6:e9:6b:fc:f6:e4:a7:
33:73:60:55:c2:80:40:a9:f0:40:81:36:4b:50:95:
b4:73:43:3a:c4:16:93:81:90:f5:a6:51:31:21:de:
81:bd:98:75:dc:ac:5e:5f:69:5f:29:fa:9e:f4:c5:
e3:89:b7:97:97:7c:5c:b8:ea:87:47:73:60:df:bf:
2e:38:3c:48:b1:b5:68:a0:14:3b:b7:65:59:34:55:
54:34:07:6e:74:e1:cf:9d:08:b9:bf:d2:34:cf:f2:
4a:4d:cd:4e:87:d6:9a:3a:af:0f:db:0a:88:3c:79:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:DC:F5:4A:5A:AD:E5:A2:B3:71:96:0A:15:16:C9:3E:8D:43:FB
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/eTjc9UpareWis3GWChUWyT6NQ_s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.224.0/20
Signature Algorithm: sha256WithRSAEncryption
60:9e:a4:88:42:10:98:de:11:7b:36:7f:c6:af:64:02:f3:a1:
1e:d8:48:0f:69:4c:2f:af:58:6e:3f:09:3a:0c:1f:3f:67:97:
5a:69:1d:1a:1a:94:fe:fd:4d:7a:cd:e8:e5:d1:9b:8e:92:ab:
60:1e:47:62:42:97:9a:50:63:2b:66:df:ae:c7:4a:de:16:52:
56:cc:35:81:1b:e7:9e:28:d9:99:4c:91:01:0d:4a:8f:bb:99:
09:c9:e8:ce:03:3a:f2:e5:c7:36:89:fd:f0:03:01:c7:c0:bf:
5b:b7:bb:e0:c5:64:f6:79:bc:b7:18:6e:cd:19:b0:50:9a:01:
59:71:a4:6a:e7:34:24:2c:c2:66:c4:b3:38:05:2c:e8:c0:05:
6b:60:fc:fb:e7:06:62:c6:c2:b8:8d:9f:a8:94:f8:30:9a:9b:
c5:88:64:bc:be:6b:e7:ec:29:d0:e2:92:67:ba:0d:80:4c:cd:
5d:d8:27:6a:98:ce:8a:62:f6:42:de:f3:96:c9:dc:24:e9:19:
60:e2:09:3c:99:0b:2e:af:73:a1:ae:27:12:cd:14:55:df:0b:
ba:ab:13:87:9a:8a:b7:e6:b9:18:15:62:f8:01:3a:07:d9:d3:
43:ea:f7:eb:6d:25:73:0e:7a:c4:de:93:50:bf:ca:97:e9:e4:
f7:e7:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:52:27 2023 by rpki-client on console-ams.rpki-client.org