Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa
File: J09ozKdmxWT48Tw7uTHcz09CotE.roa (raw, json)
Hash identifier: 5b3Sbmg4DeAODQr8tBFfNxK31a866aETzDAqah4rt1Y=
Subject key identifier: 27:4F:68:CC:A7:66:C5:64:F8:F1:3C:3B:B9:31:DC:CF:4F:42:A2:D1
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1817
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa
Signing time: Tue 02 Jul 2024 02:33:39 +0000
ROA not before: Tue 02 Jul 2024 02:33:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 140293
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6167 (0x1817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jul 2 02:33:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=274F68CCA766C564F8F13C3BB931DCCF4F42A2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:a0:be:6e:e9:e0:fa:62:ba:74:b1:93:91:
19:21:35:06:ca:eb:9c:ab:19:41:b9:6c:1c:a6:b4:
a8:9d:23:91:8d:da:88:a3:4a:3a:8a:74:2a:8a:c7:
38:52:68:0e:c0:1f:46:75:f8:2b:4a:b9:24:b7:ca:
c1:c2:a9:6a:24:99:a3:b5:6c:01:55:1a:8b:11:70:
2c:90:c2:96:31:01:4d:0e:40:22:4c:8c:c9:16:77:
c2:b0:77:da:b9:df:17:aa:ce:4f:56:9b:d5:b5:ca:
f1:c7:0d:d8:ff:51:09:5b:66:f8:d2:0c:a6:57:35:
9b:43:78:7a:db:25:0d:6b:d8:81:98:6e:88:54:cd:
29:27:b5:7f:8f:69:dc:42:58:8a:7e:53:fc:2c:82:
e2:ef:5f:bc:cd:ca:8d:2e:69:39:f0:66:ac:7c:89:
eb:a9:b1:91:b9:3a:6d:9f:1d:ac:6d:a0:1e:f7:60:
88:3a:51:19:ac:5a:b2:a6:c7:ec:9d:31:18:97:78:
f3:8d:06:ae:30:f8:30:f1:11:21:a9:c4:16:61:13:
cd:c5:78:e0:4f:8b:6a:f2:4f:81:24:7f:75:3c:09:
6a:1e:5a:10:41:66:18:ec:e1:96:ed:be:d0:f1:4d:
90:0f:f9:0f:ad:78:97:d0:4f:a4:8c:7c:f3:cc:67:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:68:CC:A7:66:C5:64:F8:F1:3C:3B:B9:31:DC:CF:4F:42:A2:D1
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/J09ozKdmxWT48Tw7uTHcz09CotE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2d:49:c0:ff:fe:99:61:49:1b:1e:ae:d5:ec:8b:49:3b:55:9d:
89:8f:cb:f0:f0:54:5b:49:96:e9:a7:7e:20:bd:3a:3e:1d:a4:
25:37:15:a0:45:42:ac:8e:c5:fe:8f:a1:21:21:13:f3:b5:c4:
97:4e:f9:3a:64:9b:48:c9:a1:15:5b:18:aa:b3:5f:92:e4:2a:
8b:43:d6:ab:0a:a1:28:7a:5a:90:54:a2:f4:6b:11:37:c3:c2:
16:56:d6:2f:0e:7b:c7:12:9a:bb:6d:40:e0:d3:30:5e:9d:81:
45:b0:c2:93:1a:6c:a2:11:d3:5f:b7:a4:19:09:ac:0e:ba:36:
b3:38:2e:53:4a:0e:1a:d8:2a:15:1d:2e:de:49:c8:c6:a8:63:
98:92:04:b5:44:9b:ad:49:83:ac:8b:51:81:ac:a7:0e:f7:f6:
62:46:04:47:d5:77:a0:ee:46:49:35:94:9b:23:1b:49:72:e1:
c6:6d:2c:d9:79:53:7b:94:ba:17:a7:7a:53:76:d6:fa:02:2b:
ce:4d:80:f0:4c:f7:20:1a:8b:e3:ac:6f:27:c4:a9:79:02:6b:
a0:78:9d:b5:a6:7f:26:7b:b9:59:26:43:2c:cb:27:a5:43:c2:
86:62:07:21:88:98:f2:6e:e8:48:2c:05:19:58:6b:e1:68:5a:
d8:07:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:39 2025 by rpki-client