Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/iMHxUtktIxpqF_ZpasVi1HEvTWY.roa
File: iMHxUtktIxpqF_ZpasVi1HEvTWY.roa (raw, json)
Hash identifier: LippB7yKfkBgEwLNHraOZxEQ7wmrI5fkjxx+JOp/gPY=
Subject key identifier: 88:C1:F1:52:D9:2D:23:1A:6A:17:F6:69:6A:C5:62:D4:71:2F:4D:66
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A95
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/iMHxUtktIxpqF_ZpasVi1HEvTWY.roa
Signing time: Mon 14 Aug 2023 04:33:30 +0000
ROA not before: Mon 14 Aug 2023 04:33:30 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 17772
IP address blocks: 180.223.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:30 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=88C1F152D92D231A6A17F6696AC562D4712F4D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:53:34:0d:fb:a3:df:37:8a:a9:dc:c5:68:
cf:ca:8b:85:26:9e:b7:72:19:7f:77:ad:64:98:ae:
f4:2f:80:82:60:30:1b:92:c3:b4:99:68:db:6d:3e:
b6:c4:a8:f2:3b:19:7e:2d:3e:a0:87:74:6f:73:18:
f3:53:00:60:7c:86:95:18:6a:e2:82:20:a0:b9:1a:
60:dc:a4:62:7e:e0:88:1a:f5:a3:09:2c:0d:26:2d:
d6:09:96:01:80:aa:f4:a9:71:a5:e8:7e:0a:70:24:
e8:5c:d9:eb:2c:34:ec:43:a8:c7:a6:72:d2:00:8c:
bd:10:f9:fc:5f:1f:52:e9:7f:4b:14:0c:09:3d:bc:
a1:93:4c:07:d2:0f:d9:27:5e:e4:89:48:fc:b8:db:
a7:cb:ab:da:dd:f3:da:61:80:09:a9:f6:bc:71:06:
43:83:94:29:00:59:3d:cb:28:1f:cc:be:c5:0e:56:
40:f3:40:cd:cd:4e:6b:17:06:a1:81:59:c3:5f:36:
b0:1f:a8:da:d7:d9:53:78:80:2a:e3:5a:c5:f5:9b:
a6:00:32:50:c6:3f:6c:5b:0d:fc:bc:66:de:3e:f7:
e3:54:72:bb:34:5f:c1:a8:26:d9:97:34:b6:e0:8a:
80:a9:7f:6a:19:ef:b0:b6:0d:65:e5:44:b3:c3:10:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:F1:52:D9:2D:23:1A:6A:17:F6:69:6A:C5:62:D4:71:2F:4D:66
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/iMHxUtktIxpqF_ZpasVi1HEvTWY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:7c:a3:31:97:58:0e:f1:5b:ed:a3:49:1a:c7:75:aa:ef:11:
7c:cf:fe:8d:3c:b7:cb:cf:7c:31:bd:94:88:f4:fb:8d:33:5e:
df:21:40:39:42:f6:9f:e4:a8:97:83:1a:af:28:9d:26:07:7d:
a9:4d:10:58:0b:66:11:29:79:ed:09:01:ab:58:91:6c:e4:57:
cb:0c:bc:51:4f:ba:18:e6:06:e9:12:72:da:8e:4c:5c:31:d3:
fe:db:08:8c:16:13:7f:cb:d6:34:9d:e9:88:d7:dd:bc:23:38:
65:29:fa:d1:9c:59:16:a4:52:86:88:32:0c:34:cf:5f:c1:e6:
74:fe:ba:d9:a5:be:f3:9d:b1:34:76:a1:29:26:1d:5b:a4:ec:
56:bc:46:27:38:58:40:29:77:3a:77:a6:5d:17:6e:34:14:33:
98:d2:56:26:0f:e5:b7:fa:4a:1e:b4:ff:d9:4b:b5:d4:fb:83:
a4:e7:81:7e:8c:70:49:27:27:ab:4b:20:20:84:5a:7c:d3:d2:
76:72:d3:c5:62:cf:39:9e:0c:22:cc:10:a9:c4:22:49:45:3c:
15:09:07:04:46:b9:63:b4:d4:dd:09:6b:d2:a6:10:b0:81:27:
4e:83:3d:73:00:bc:eb:3c:84:a1:49:b3:a8:bf:b2:80:8d:bd:
ed:23:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 02:17:42 2023 by rpki-client on console-ams.rpki-client.org