Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/dv9dCEgXzuKBB5c-r1weXdkYWl4.roa
File: dv9dCEgXzuKBB5c-r1weXdkYWl4.roa (raw, json)
Hash identifier: ZUb+AKaRdsygpCRhk2CiYorHoMV5kh4swG4tLsTl+FU=
Subject key identifier: 76:FF:5D:08:48:17:CE:E2:81:07:97:3E:AF:5C:1E:5D:D9:18:5A:5E
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 50
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dv9dCEgXzuKBB5c-r1weXdkYWl4.roa
Signing time: Tue 27 May 2025 08:36:31 +0000
ROA not before: Tue 27 May 2025 08:36:31 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56047
IP address blocks: 240a:42c2::/31 maxlen: 31
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:31 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=76FF5D084817CEE28107973EAF5C1E5DD9185A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:f8:6a:72:92:69:2a:b5:c0:d9:cb:07:02:
d1:f8:fb:6f:39:a3:80:d5:30:f9:0f:47:92:06:e3:
20:59:34:71:e2:d3:ae:fe:db:78:97:3e:8e:19:8b:
99:34:63:6e:20:42:ff:ea:c8:94:88:36:26:46:23:
23:f1:07:ed:0d:b5:1a:b7:7b:46:44:a4:d7:39:9a:
85:87:87:d5:db:8e:ea:d0:ed:fc:bf:32:c9:66:b0:
5f:78:46:82:81:9b:0d:7f:22:19:ac:75:c6:38:f7:
d8:b5:5d:57:5c:2e:dd:93:27:eb:0f:30:30:2b:5f:
e9:4a:ac:65:a8:50:ec:8d:03:05:d8:29:da:3f:e2:
33:0c:19:80:bf:48:9f:0a:8a:93:41:de:36:7b:17:
5e:81:49:5f:76:fb:c3:72:3f:06:6b:4b:33:9f:a5:
3f:96:3f:e8:21:d0:a4:3c:6d:b3:f5:d8:ce:02:28:
d9:a4:08:1d:9d:52:ee:04:87:93:d8:67:d5:8f:1f:
21:1e:41:74:4c:cf:6d:0a:04:bf:23:55:4d:4c:02:
a2:05:d2:d8:e9:ed:52:0d:3c:8d:0f:5a:f1:3b:31:
1a:b5:15:3a:2e:55:9d:9b:ed:ed:5e:37:76:28:02:
34:9e:24:dc:a5:be:83:72:67:f3:11:87:a9:3d:28:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:5D:08:48:17:CE:E2:81:07:97:3E:AF:5C:1E:5D:D9:18:5A:5E
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dv9dCEgXzuKBB5c-r1weXdkYWl4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42c2::/31
Signature Algorithm: sha256WithRSAEncryption
5c:66:e7:db:a6:f9:00:0b:09:61:5d:8b:df:df:e9:a8:49:d7:
5d:2b:8a:4c:cf:13:96:78:60:ab:6d:02:cf:01:3d:22:4f:21:
45:e7:d7:14:92:4f:65:70:f6:7d:94:8d:d9:84:dc:cd:c6:ad:
24:d9:69:f9:94:4d:23:b7:34:cf:f2:9f:d3:a2:93:3c:06:df:
94:7b:ac:b8:ac:c1:03:5f:72:9e:46:af:c9:00:05:6d:b7:0e:
8a:a6:a8:46:48:96:ae:44:a9:16:f4:a7:95:e1:6c:32:d9:cf:
af:62:a1:01:69:76:e7:e2:47:0f:a3:9d:c9:e0:92:94:37:01:
9a:8d:ee:10:53:d4:aa:c3:ae:73:93:7f:04:28:4d:bd:22:24:
16:1a:72:9b:d9:12:7f:a6:9a:c0:7f:2a:db:44:5f:58:76:7f:
9c:eb:a9:b8:77:bf:bf:41:b5:98:b4:59:a2:70:f3:8d:81:f7:
3f:99:72:e4:b5:2c:c2:7e:22:bc:d4:21:ca:f0:18:1a:70:d7:
b1:4c:27:4f:76:5f:f8:d3:ae:1d:c2:90:70:03:88:d7:30:c0:
e6:27:bf:eb:2b:a6:d5:75:ee:8e:9a:9e:4d:d6:f8:e9:71:1e:
f0:c0:6b:a4:f9:89:eb:41:c8:3b:b4:d5:21:25:ac:25:11:47:
5f:12:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:47:08 2025 by rpki-client