Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/fXsyGZMt4JPBgR0t-YmNJKzw11Q.roa
File: fXsyGZMt4JPBgR0t-YmNJKzw11Q.roa (raw, json)
Hash identifier: xM7+xJQigzAFokxOzburIBfP7ZHI+KfES+09b80hpIo=
Subject key identifier: 7D:7B:32:19:93:2D:E0:93:C1:81:1D:2D:F9:89:8D:24:AC:F0:D7:54
Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Certificate serial: 15ED
Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/fXsyGZMt4JPBgR0t-YmNJKzw11Q.roa
Signing time: Wed 13 Mar 2024 01:20:43 +0000
ROA not before: Wed 13 Mar 2024 01:20:43 +0000
ROA not after: Tue 04 Jun 2024 06:12:36 +0000
asID: 59024
IP address blocks: 103.111.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5613 (0x15ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Validity
Not Before: Mar 13 01:20:43 2024 GMT
Not After : Jun 4 06:12:36 2024 GMT
Subject: CN=7D7B3219932DE093C1811D2DF9898D24ACF0D754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:51:89:91:a6:09:27:39:7c:3b:bf:5c:38:
67:3f:70:95:ff:47:63:04:1f:86:7d:15:3e:96:4e:
47:8b:a6:c9:df:9b:15:bd:a6:f2:4d:3f:2f:4c:58:
53:f0:b8:3a:5f:f2:8a:0c:94:c5:fc:ea:e8:1e:e6:
dd:f5:36:5e:ff:53:37:56:01:e8:42:84:1f:6d:58:
0f:67:45:f3:d1:59:04:9a:2f:90:e0:34:4b:05:0f:
c2:d3:16:fc:2d:2d:0d:28:e1:44:63:c5:60:69:f9:
5d:a8:41:10:a9:31:ff:9b:d2:34:01:44:f6:2b:59:
d4:2a:6d:94:7d:ec:29:94:02:b8:35:81:b3:d9:3f:
6e:7e:1e:fc:ab:bd:b3:18:0a:bd:dd:42:ff:ea:73:
25:51:d8:d1:1d:f7:8e:16:34:11:57:8e:e5:df:a3:
37:0b:5e:45:8b:34:ab:cf:c7:b1:f7:57:55:ea:a1:
98:3d:69:51:bc:de:0e:89:9c:e1:ee:bd:e4:a3:58:
86:52:c4:4e:35:46:96:ff:56:04:ba:94:5e:a6:07:
60:bf:7c:1c:6d:63:09:92:a4:01:39:60:b2:77:7f:
22:3f:ee:cf:cc:b3:86:6b:f2:2d:2c:ce:38:88:35:
74:f5:6d:60:20:f2:48:1d:31:3f:54:01:29:ba:2a:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:32:19:93:2D:E0:93:C1:81:1D:2D:F9:89:8D:24:AC:F0:D7:54
X509v3 Authority Key Identifier:
keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/fXsyGZMt4JPBgR0t-YmNJKzw11Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.172.0/24
Signature Algorithm: sha256WithRSAEncryption
94:62:81:5a:b6:cc:3b:8b:e0:c7:17:47:37:f1:4b:37:a8:1f:
6d:79:36:09:8b:a7:a3:57:45:fa:90:9b:3b:45:66:b3:04:ee:
23:73:4c:b2:4a:23:03:aa:8c:52:e2:32:8f:ef:d5:43:9f:06:
75:2f:e2:eb:50:82:94:30:36:f2:ab:81:f1:a6:04:e6:10:4e:
d0:e2:4e:02:f0:7b:fe:21:d3:5f:ba:7d:3d:3f:83:c9:ec:77:
75:a1:4e:f9:37:31:73:4a:21:58:ea:5b:ba:e3:c6:56:d7:61:
b7:e3:27:56:88:02:69:da:32:fd:cb:40:52:73:85:c9:16:6e:
ca:4c:95:3c:12:4f:6f:59:76:ac:aa:0a:f4:54:a7:a3:d3:8b:
7e:74:36:a6:69:99:43:20:93:45:9e:01:84:47:e2:91:fb:7f:
d8:b1:55:60:9e:8a:a3:05:2a:68:d0:cd:46:37:a4:b8:1c:2d:
4c:bf:fd:96:d3:66:35:4b:55:21:e7:f9:30:e9:c2:5c:25:78:
c2:b6:45:e0:7f:0d:60:3b:6b:c3:7a:32:e9:55:92:7f:13:44:
df:cc:e4:80:eb:d6:21:96:0f:d2:d6:fa:4e:8e:78:76:a6:ce:
fd:e7:05:e0:f7:27:8f:72:f7:27:7c:8a:f6:1c:e3:2f:c5:c4:
a7:b8:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 03:39:40 2024 by rpki-client on console-fra.rpki-client.org