Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/zaWUoHuG9KcHW-UGPy8IhsrCwrw.roa
File: zaWUoHuG9KcHW-UGPy8IhsrCwrw.roa (raw, json)
Hash identifier: L0vtE8nfR6CsfFfo9v17nVlvidPyv89H11ZmzJkjE18=
Subject key identifier: CD:A5:94:A0:7B:86:F4:A7:07:5B:E5:06:3F:2F:08:86:CA:C2:C2:BC
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 056D
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/zaWUoHuG9KcHW-UGPy8IhsrCwrw.roa
Signing time: Thu 24 Nov 2022 23:31:06 +0000
ROA not before: Thu 24 Nov 2022 23:31:06 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 6079
IP address blocks: 180.223.200.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Nov 24 23:31:06 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=CDA594A07B86F4A7075BE5063F2F0886CAC2C2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:83:b3:ee:9e:3d:86:e7:d8:6b:72:ce:1b:
cb:52:ff:de:e0:a5:44:9f:ac:85:b0:3e:77:4a:44:
63:72:c7:fb:81:c7:32:03:10:fd:13:d9:35:3b:ef:
fc:a7:19:d0:a6:6f:8b:39:37:3f:6a:0d:5e:5e:34:
bf:66:2a:cc:1c:86:df:56:29:8d:33:e9:5f:36:de:
19:f3:17:bb:33:26:8d:a0:4c:08:16:3f:00:2e:77:
58:b3:de:4f:4f:2a:f6:bc:09:10:bf:a2:d4:40:2e:
a8:fe:04:7c:0d:21:23:c5:ba:0c:c7:aa:45:c7:2d:
6b:c4:b8:f0:c7:6b:f6:07:1d:50:1a:d7:d8:aa:3c:
02:e8:fb:3c:48:fa:24:1c:91:56:10:87:3c:fa:82:
9a:93:86:79:3e:a9:65:9d:6c:0b:1b:df:a1:ca:a9:
af:15:eb:e5:7b:76:a3:d9:dd:4d:71:bb:59:d0:1c:
5b:76:8f:0b:a4:c9:f3:ce:e8:55:64:a0:a8:5b:5d:
53:b5:22:51:f4:27:07:6f:f4:83:96:ec:70:10:93:
50:fb:2f:69:ff:aa:3c:b0:4d:ba:9d:d4:28:89:60:
ca:42:ff:58:0c:57:b5:4b:08:b9:56:30:53:27:92:
4f:b8:7f:84:46:0b:8d:7f:73:51:9b:56:0c:fd:ce:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A5:94:A0:7B:86:F4:A7:07:5B:E5:06:3F:2F:08:86:CA:C2:C2:BC
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/zaWUoHuG9KcHW-UGPy8IhsrCwrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.200.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:fb:65:17:ff:5f:66:31:0d:2b:03:cf:76:88:b1:db:77:fe:
97:cc:ec:d7:06:f6:a7:a1:e6:65:86:e4:4e:22:f9:30:9b:e6:
35:d3:97:d7:f9:bb:93:a7:2a:bf:75:1c:91:91:4f:59:89:99:
16:c7:dc:e3:1f:b4:29:54:de:7e:4b:18:3e:dd:39:42:fe:08:
36:a1:0c:13:58:71:b8:b0:9f:d9:de:cb:7d:dc:e1:15:72:86:
cb:ae:88:dd:ea:d5:ac:8d:f1:dd:a1:74:29:03:98:3e:ca:fa:
ef:79:e9:d1:21:5e:91:fa:d0:2f:b0:36:f2:bd:ad:53:82:cb:
c6:1c:9f:27:bc:58:b5:c1:46:d9:50:92:f4:72:06:76:12:c6:
aa:08:7f:49:cd:0c:a5:da:09:8d:75:8b:ea:02:0b:9f:86:91:
aa:b4:ca:e7:3c:b4:ad:84:4f:32:e2:67:a6:8f:38:2c:e9:32:
43:3e:9a:74:99:7b:5b:64:ae:9a:b1:7a:65:c6:46:03:3b:95:
9c:4a:89:e9:12:3e:57:07:f8:49:e9:8a:47:77:8c:36:9f:56:
da:78:6b:a8:ed:b7:9b:c6:c4:f5:39:cf:c7:38:48:e4:c5:fd:
8c:d0:0d:43:6d:0a:6f:70:9d:f7:b6:11:d5:d7:9c:0e:44:fb:
f9:5d:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org