Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/kWoCCSm6SVIwNRbbnM0w8FvhAB8.roa
File: kWoCCSm6SVIwNRbbnM0w8FvhAB8.roa (raw, json)
Hash identifier: DbJwfRtgD33Zj3eCgYAu1oWB/MMzqW0Npspywx7Peqw=
Subject key identifier: 91:6A:02:09:29:BA:49:52:30:35:16:DB:9C:CD:30:F0:5B:E1:00:1F
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0627
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/kWoCCSm6SVIwNRbbnM0w8FvhAB8.roa
Signing time: Thu 22 Aug 2024 03:44:34 +0000
ROA not before: Thu 22 Aug 2024 03:44:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4766
IP address blocks: 58.66.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 22 03:44:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=916A020929BA4952303516DB9CCD30F05BE1001F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:d3:f3:3e:ce:61:63:aa:f9:8e:4b:64:e3:
e5:a1:20:60:ce:6b:d7:e1:c5:e3:4f:08:c8:32:87:
81:c0:1a:b1:c5:d1:d8:aa:7a:e6:45:6e:92:42:aa:
80:a2:7c:a7:a3:4a:e6:ee:f0:83:08:da:56:1a:b9:
0b:21:9e:a2:06:9b:fa:f2:e1:ab:c5:70:2f:ec:70:
6b:6d:52:76:a9:25:db:e6:36:ae:d8:de:f6:cf:23:
0a:53:0c:56:44:aa:c5:52:c0:a4:84:be:aa:43:4d:
09:81:88:28:42:a4:ba:91:a3:35:69:22:39:c5:65:
53:9e:42:52:13:bd:c5:bf:d6:dc:af:18:44:1f:50:
75:be:d7:f3:c0:0e:ec:fe:95:01:5d:6c:9d:7b:da:
74:30:f7:59:56:a3:6e:68:4a:1d:ca:cd:c8:03:c5:
51:c7:4a:ac:74:0a:62:eb:52:9a:ce:19:f8:e0:ae:
e7:49:7f:9c:92:70:c0:c2:43:16:b8:2d:08:a4:cc:
d4:67:c0:21:17:64:2e:50:aa:b1:88:f4:44:59:59:
79:90:6b:ee:a9:0f:ba:bd:91:53:9e:77:af:c7:fb:
c0:2e:14:04:31:ad:20:da:90:68:ff:41:57:3f:89:
a9:e3:37:d4:d4:7c:74:6b:22:61:8e:d3:58:21:77:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:02:09:29:BA:49:52:30:35:16:DB:9C:CD:30:F0:5B:E1:00:1F
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/kWoCCSm6SVIwNRbbnM0w8FvhAB8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:ba:e1:f1:6a:59:f2:fd:24:1f:f2:9e:dd:83:2b:39:7c:81:
79:91:f7:ff:89:66:44:dc:81:83:ee:ff:8c:80:64:c5:c1:cb:
17:c9:0c:7a:bc:87:44:87:64:e7:74:02:6a:20:90:20:e5:a0:
91:a5:32:a3:60:94:4c:36:d4:d0:18:c7:78:bc:4c:fd:84:6b:
af:17:d3:b9:6e:1f:37:d5:76:92:64:c3:dd:ec:6d:c4:4e:16:
4f:61:8d:01:42:25:b0:b5:1a:d8:8b:69:8f:23:24:48:c5:05:
ce:51:fe:d9:43:8c:9e:3a:85:f8:dd:da:0b:ef:9a:06:e1:d7:
a2:1a:ef:7c:0f:07:5a:b0:09:4e:d7:95:e4:92:64:0c:0d:04:
e4:6a:35:8d:5e:8c:e8:33:53:02:b4:1e:85:64:d4:b2:58:c2:
a2:b9:64:0b:28:57:aa:94:f3:a3:94:67:34:cb:6f:e0:86:b3:
4c:a7:21:67:c3:c4:51:1b:11:54:8d:85:42:9d:2d:6e:cb:19:
b8:74:54:f9:c2:0a:43:3c:ee:06:47:0d:9b:8d:98:d9:4f:24:
92:98:17:d2:20:cb:94:d8:ff:07:bf:a0:cd:d4:55:57:b6:c8:
f9:09:78:ce:84:1a:a1:75:59:96:e2:30:f8:84:96:6f:d9:53:
8f:52:5e:7e
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICBicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjIw
MzQ0MzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkxNkEwMjA5MjlCQTQ5
NTIzMDM1MTZEQjlDQ0QzMEYwNUJFMTAwMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBI9PzPs5hY6r5jktk4+WhIGDOa9fhxeNPCMgyh4HAGrHF0diq
euZFbpJCqoCifKejSubu8IMI2lYauQshnqIGm/ry4avFcC/scGttUnapJdvmNq7Y
3vbPIwpTDFZEqsVSwKSEvqpDTQmBiChCpLqRozVpIjnFZVOeQlITvcW/1tyvGEQf
UHW+1/PADuz+lQFdbJ172nQw91lWo25oSh3KzcgDxVHHSqx0CmLrUprOGfjgrudJ
f5yScMDCQxa4LQikzNRnwCEXZC5QqrGI9ERZWXmQa+6pD7q9kVOed6/H+8AuFAQx
rSDakGj/QVc/ianjN9TUfHRrImGO01ghd9j7AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUkWoCCSm6SVIwNRbbnM0w8FvhAB8wHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYva1dvQ0NTbTZTVkl3TlJiYm5N
MHc4RnZoQUI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpC
QDANBgkqhkiG9w0BAQsFAAOCAQEAI7rh8WpZ8v0kH/Ke3YMrOXyBeZH3/4lmRNyB
g+7/jIBkxcHLF8kMeryHRIdk53QCaiCQIOWgkaUyo2CUTDbU0BjHeLxM/YRrrxfT
uW4fN9V2kmTD3extxE4WT2GNAUIlsLUa2ItpjyMkSMUFzlH+2UOMnjqF+N3aC++a
BuHXohrvfA8HWrAJTteV5JJkDA0E5Go1jV6M6DNTArQehWTUsljCorlkCyhXqpTz
o5RnNMtv4IazTKchZ8PEURsRVI2FQp0tbssZuHRU+cIKQzzuBkcNm42Y2U8kkpgX
0iDLlNj/B7+gzdRVV7bI+Ql4zoQaoXVZluIw+ISWb9lTj1Jefg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:05:01 2025 by rpki-client