Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/ygD_0vKHL8Mw4tAcD3_oGw6TePA.roa
File: ygD_0vKHL8Mw4tAcD3_oGw6TePA.roa (raw, json)
Hash identifier: u6d32uI9KFPvew8cNBmHyBvvsxNwzmn9edUUrsmxz/w=
Subject key identifier: CA:00:FF:D2:F2:87:2F:C3:30:E2:D0:1C:0F:7F:E8:1B:0E:93:78:F0
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0C11
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ygD_0vKHL8Mw4tAcD3_oGw6TePA.roa
Signing time: Sat 21 Oct 2023 01:56:48 +0000
ROA not before: Sat 21 Oct 2023 01:56:48 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 7018
IP address blocks: 180.223.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Oct 21 01:56:48 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=CA00FFD2F2872FC330E2D01C0F7FE81B0E9378F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:3f:d4:b4:f4:f5:48:1e:0c:39:bd:78:5c:
6c:d5:94:8e:14:2f:a5:ca:cb:db:70:ff:9d:02:00:
4a:2e:94:e2:ff:93:d3:40:e8:e0:50:6f:c1:b7:21:
5c:b9:a7:7e:02:fb:28:19:85:c5:7a:63:c8:9a:18:
c5:39:98:f6:6f:a3:a7:e3:a3:16:cf:c6:34:ab:d8:
8d:f6:bb:45:95:91:35:6e:68:0c:be:2e:94:f4:3a:
a5:c6:8d:1f:b8:a0:73:7c:24:24:9b:e7:ba:31:3d:
3a:d9:83:dc:a1:bf:5c:a0:3b:c1:cd:8e:57:29:69:
01:f7:d1:2f:8c:f8:de:ee:32:07:6d:52:78:8f:4a:
bf:93:22:97:b0:ef:fa:cc:0e:88:53:f6:c1:82:ee:
dd:b5:d7:12:5d:f4:90:df:be:e0:ad:46:4c:e4:98:
81:e7:c0:91:8c:88:e1:78:d1:70:72:65:58:2c:2e:
fa:71:87:a7:f1:66:53:d5:e7:84:75:73:4c:b0:e6:
7c:44:96:08:a2:91:7e:ad:63:3d:7e:f1:99:4f:a2:
27:10:c8:33:3d:e7:51:64:43:c4:87:96:64:98:3e:
67:f6:e0:2a:07:e3:58:11:69:df:d3:fe:3f:3a:45:
07:ed:4a:0e:69:50:ab:89:bd:84:40:b9:1a:a8:4e:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:FF:D2:F2:87:2F:C3:30:E2:D0:1C:0F:7F:E8:1B:0E:93:78:F0
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/ygD_0vKHL8Mw4tAcD3_oGw6TePA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:cb:a8:0f:4a:49:a1:21:5c:d7:5a:b7:84:76:2e:64:85:e1:
34:dd:cd:21:1b:4f:fa:0c:05:16:55:f7:09:b0:39:1c:75:6c:
69:46:03:01:db:6a:b8:19:66:7e:e4:06:28:35:e2:a8:74:b9:
ac:f1:55:9e:b7:b5:62:ff:a5:a1:d3:63:57:7e:d1:3f:19:3f:
73:81:e1:1f:10:5d:f1:78:52:33:1b:13:46:58:00:1b:49:81:
32:9d:e8:d8:a0:59:5a:ac:15:58:15:be:31:e2:b0:38:ff:b4:
8e:21:a9:7c:32:82:84:9e:36:98:40:2d:d2:22:20:34:e8:2e:
78:66:d2:fc:3d:c3:42:13:1d:7f:10:c4:4b:76:07:f3:a8:58:
1f:ba:b8:24:a0:5f:88:a5:de:96:7c:01:d3:55:2d:38:fc:da:
69:5b:dd:85:4c:31:f4:48:ca:43:ec:09:84:68:b4:d5:e2:30:
c8:11:30:20:1e:a6:dd:68:b7:a7:36:b9:b2:36:5f:7c:43:5f:
f2:d1:13:b0:89:c7:b0:e2:cd:78:37:7b:2c:bd:6f:d9:ba:11:
eb:7a:5d:e6:28:72:83:f3:c4:03:32:03:bf:90:f9:44:19:05:
06:9f:59:0d:1e:01:75:3a:92:61:4a:e8:22:eb:6e:4e:bd:6f:
06:ba:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 13:57:01 2023 by rpki-client on console-fra.rpki-client.org