Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa
File: d-YM1Oi3snO_a5_MMsy2MffhMAY.roa (raw, json)
Hash identifier: T0pjqDRJHyF5oP/xDBqywS0+QNlw467EiTmLkconLYI=
Subject key identifier: 77:E6:0C:D4:E8:B7:B2:73:BF:6B:9F:CC:32:CC:B6:31:F7:E1:30:06
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1813
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa
Signing time: Tue 02 Jul 2024 02:16:46 +0000
ROA not before: Tue 02 Jul 2024 02:16:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 140293
IP address blocks: 2404:6380::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6163 (0x1813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jul 2 02:16:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=77E60CD4E8B7B273BF6B9FCC32CCB631F7E13006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:99:ab:46:f9:8b:cd:eb:c5:38:b8:ac:97:
38:56:d4:d1:ff:71:fb:77:ce:0c:72:5d:ea:3d:a9:
2c:4e:e9:c1:50:59:2c:8c:0c:6c:d1:28:c0:76:88:
59:6c:2e:8f:5b:8f:57:41:a8:fc:6e:e0:43:2b:0e:
6c:c6:14:e3:27:e3:0c:e1:ca:d5:00:b1:33:9f:aa:
6f:ec:1d:80:92:d4:f5:da:8f:57:ab:10:37:cf:62:
c2:63:e9:1b:62:89:98:0d:11:fa:12:ac:87:7a:a3:
2e:85:a8:1c:6d:e2:1d:51:d6:ca:30:7c:0d:7b:65:
83:74:95:87:99:00:21:2e:e8:d1:08:4e:12:b0:da:
0b:aa:41:d0:97:0a:44:14:ec:c6:73:06:c9:01:ba:
cf:48:a2:eb:9f:7d:fc:14:08:0b:c4:0f:67:73:3e:
e5:c9:1f:83:4a:5d:68:ac:f0:67:08:1d:6b:1f:ad:
ff:ef:11:20:c0:0f:02:2b:b3:f0:76:65:47:53:ac:
da:f1:b8:dd:1b:bf:35:ae:e5:fa:3a:b9:9a:b1:32:
66:f2:e6:0b:89:01:19:8b:db:f0:58:17:d4:85:da:
68:5c:61:20:64:eb:f2:fa:04:01:71:e3:1e:3c:0a:
4f:5e:27:c2:b8:11:22:21:57:93:37:63:44:38:2f:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E6:0C:D4:E8:B7:B2:73:BF:6B:9F:CC:32:CC:B6:31:F7:E1:30:06
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/d-YM1Oi3snO_a5_MMsy2MffhMAY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6380::/32
Signature Algorithm: sha256WithRSAEncryption
8b:aa:f9:b2:07:6b:04:d3:2f:b6:15:1e:c9:47:5b:19:d5:1f:
eb:d2:bc:47:33:c6:08:f6:f3:2e:dc:52:f6:d0:05:72:97:e9:
8d:ed:96:8d:c3:94:df:a6:b2:3c:f1:87:28:d8:d0:b1:aa:c2:
32:3a:cc:76:3e:c0:3a:46:df:5f:24:91:1a:59:92:83:18:63:
45:47:c9:12:17:cc:56:8e:9d:64:37:e6:5a:34:98:ec:d2:c0:
b9:d5:34:eb:60:ba:4d:dc:90:c3:3c:f4:e7:a2:1c:ee:e6:10:
83:2c:15:65:d5:16:6d:3c:13:d7:aa:78:ff:a2:83:65:66:d3:
92:8c:f7:7d:fd:5e:91:b2:b8:d0:24:49:26:e8:de:6e:6f:c2:
07:81:5f:7a:8e:8d:1a:b2:32:79:71:b0:e2:57:28:fa:87:c2:
06:0a:8e:a5:e7:b6:5c:96:a2:8b:53:97:f0:a1:b6:92:e5:e2:
8e:0b:d1:37:d0:9f:4a:9b:d1:1a:7a:89:26:da:e8:96:48:a1:
58:3c:c8:78:c8:37:a4:66:a0:5d:31:f4:7d:c0:0b:f6:e1:17:
6d:3b:c8:61:9b:e0:39:91:d7:06:6b:a9:0e:01:83:ed:d0:bd:
0e:6c:db:d2:71:1c:ef:87:f8:d1:20:5a:c7:2b:62:90:b9:1a:
72:f3:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:23 2025 by rpki-client