Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/mb4V8u7U6bzp78x672fO_Blf2KQ.roa
File: mb4V8u7U6bzp78x672fO_Blf2KQ.roa (raw, json)
Hash identifier: sNEbxNQc4aS0fga+Wi1aKnVSXsrZI8yK26MSbcsFsms=
Subject key identifier: 99:BE:15:F2:EE:D4:E9:BC:E9:EF:CC:7A:EF:67:CE:FC:19:5F:D8:A4
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0A9A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mb4V8u7U6bzp78x672fO_Blf2KQ.roa
Signing time: Mon 14 Aug 2023 04:33:32 +0000
ROA not before: Mon 14 Aug 2023 04:33:32 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 5089
IP address blocks: 180.223.216.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 14 04:33:32 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=99BE15F2EED4E9BCE9EFCC7AEF67CEFC195FD8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:20:6c:75:c5:1b:c4:fa:66:61:cb:ba:d7:ad:
87:9a:8e:b7:ae:66:32:33:77:48:2d:73:52:7d:55:
fa:b5:82:31:d2:48:fd:87:d8:96:55:c6:f0:15:a9:
9b:93:af:96:03:17:68:1f:24:73:65:1d:fd:d7:d1:
e3:c4:a3:37:5a:e1:6f:84:3c:5a:ba:23:0a:64:bc:
97:af:78:ad:a8:d6:9f:6c:7e:76:be:f4:1e:e2:0b:
10:e1:8b:3c:e9:01:9d:d7:e7:aa:07:b2:2c:3c:9c:
1c:83:63:c1:dd:2e:67:e6:20:93:80:73:3c:7d:81:
c8:c9:9e:55:a5:31:7d:3e:88:88:86:f7:4d:ad:8e:
42:ab:77:3d:f7:9a:3d:d8:65:4d:db:e8:5d:8a:93:
77:39:7a:c0:b7:2d:d6:0a:9b:c0:22:49:d3:ec:09:
44:87:1e:a2:03:75:41:b8:86:64:02:29:9b:0b:af:
9b:b5:85:21:c0:63:e5:f8:9f:80:32:ad:df:7e:74:
62:1e:d3:ec:05:a8:a7:42:e9:80:94:19:59:e6:ab:
93:2a:53:ad:30:2a:2a:c5:00:42:09:b3:19:6b:28:
a3:67:79:8a:36:a8:5a:8f:d6:2e:64:d1:ee:d2:d8:
91:47:4b:5e:a3:83:e9:ee:9b:ba:46:1f:6f:37:ad:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:15:F2:EE:D4:E9:BC:E9:EF:CC:7A:EF:67:CE:FC:19:5F:D8:A4
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mb4V8u7U6bzp78x672fO_Blf2KQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.216.0/21
Signature Algorithm: sha256WithRSAEncryption
12:5b:7a:b1:c6:51:58:e2:f3:4f:9c:57:94:71:f2:1a:b0:d2:
0d:7a:b7:ba:a8:e0:a3:dc:fa:79:d7:4f:ff:4b:8e:a0:d7:ef:
9b:60:10:22:e1:77:ea:fd:28:11:be:7b:0c:92:92:1b:60:a3:
e1:e4:f3:0c:84:1a:de:c2:4a:d0:22:ac:83:5b:98:f9:89:2b:
a7:f6:ed:c3:0d:6e:3d:90:fa:3b:df:38:b1:d2:17:29:07:9b:
b3:8e:cd:ca:59:b2:5d:5e:e2:1a:e8:f0:49:c2:b4:fa:b7:42:
a5:a0:ed:67:a0:26:52:75:4f:25:7b:ce:06:af:c1:e8:3a:60:
83:44:6a:6e:c4:a4:fc:3b:d1:4e:f0:d9:a3:c9:5e:7b:f0:d5:
02:40:6e:19:2d:8c:c7:e4:33:23:8d:a1:b2:1c:13:53:ac:34:
34:57:78:99:d1:b9:a2:c1:87:60:9e:2e:30:2a:98:a7:04:17:
ad:66:81:67:4b:2f:db:78:94:76:a4:24:af:05:80:ec:e4:bf:
21:7c:91:52:f5:b8:d0:22:d3:c2:c2:dc:8a:5c:c1:22:75:b0:
96:d4:f8:e9:b7:42:cd:d6:90:95:99:d0:3a:3b:33:92:da:2b:
43:7e:87:05:10:8c:e9:cc:82:79:50:a9:3a:0f:27:38:31:51:
e6:92:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 10:14:58 2023 by rpki-client on console-fra.rpki-client.org