Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa
File: K2ikVvSng2sirFm8jOApLd6LRF8.roa (raw, json)
Hash identifier: rx7D/dDHu5PM49FT9uX120c5OjHXsXV8hvf6r0z4gsU=
Subject key identifier: 2B:68:A4:56:F4:A7:83:6B:22:AC:59:BC:8C:E0:29:2D:DE:8B:44:5F
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0E22
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa
Signing time: Wed 18 Sep 2024 07:51:21 +0000
ROA not before: Wed 18 Sep 2024 07:51:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55990
IP address blocks: 110.41.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 18 07:51:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2B68A456F4A7836B22AC59BC8CE0292DDE8B445F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:57:7d:67:e6:cd:7c:4d:9f:63:65:05:e1:
10:0a:d8:3b:a3:c8:c5:6e:1a:8c:18:52:bb:ed:33:
33:a5:bb:bf:c2:56:9b:4d:e3:28:20:5c:34:bb:70:
8b:c9:af:94:cd:70:e5:64:4e:d4:df:01:12:83:44:
69:9b:5d:b1:f8:27:81:61:d5:17:5a:74:d5:9d:13:
19:95:03:4a:41:1c:41:f2:fb:24:5b:fe:3b:17:f8:
d1:8a:51:a3:be:6d:fd:47:bf:df:23:4b:ab:23:23:
0d:38:02:ba:fc:53:f1:67:67:58:d9:57:61:80:71:
db:59:31:cf:16:34:15:c4:6f:c9:08:d1:38:d9:10:
78:f6:1c:5e:17:0f:03:86:17:2b:a0:48:f1:1b:d8:
80:b8:ce:41:db:01:9b:fb:14:ab:4e:18:c4:16:19:
e9:57:bd:73:0c:ac:6d:1c:86:a9:7f:e0:bc:ea:7b:
8b:9b:c7:0c:76:1e:d1:8d:aa:48:47:f7:ad:46:f1:
c3:0c:a6:97:8d:65:33:86:0c:ff:30:d4:1f:6a:aa:
fc:3e:38:50:8f:33:1a:a5:ef:a0:58:4d:62:b8:76:
5c:9f:c0:30:f2:8f:6f:6c:10:29:40:86:ba:22:9f:
ca:4b:56:34:79:61:2b:e2:a9:0a:d7:00:50:fb:2d:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:A4:56:F4:A7:83:6B:22:AC:59:BC:8C:E0:29:2D:DE:8B:44:5F
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/K2ikVvSng2sirFm8jOApLd6LRF8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.209.0/24
Signature Algorithm: sha256WithRSAEncryption
12:af:66:78:86:b3:55:92:a9:e1:fd:32:bf:bf:99:63:e3:d5:
c5:d6:89:34:f0:f1:6b:8e:71:9e:7a:ef:51:70:34:e7:13:5a:
b0:5c:87:e1:ad:d8:4e:fc:01:5d:10:63:4d:4e:57:44:b6:bf:
ed:30:5d:26:6f:bc:34:df:bb:28:c5:c0:c4:39:e5:3b:2f:a1:
62:f9:24:80:82:08:54:af:4a:f5:14:e5:95:88:fe:05:0a:6b:
cc:a6:cb:b6:0f:ab:96:36:a7:ea:47:84:b2:ee:9a:f7:23:11:
11:e9:02:5f:04:5c:b6:73:40:38:87:2a:69:8d:81:fc:c7:b2:
bd:fd:de:1f:22:a0:79:0b:5b:c0:45:ce:f6:69:26:71:71:b4:
23:ff:e2:4b:0d:2f:00:2d:2b:ea:82:25:46:36:da:5b:e4:b2:
4e:71:80:29:33:89:70:04:84:ce:90:b5:eb:20:51:55:e7:c0:
3a:e8:f5:5d:64:b0:26:0c:df:3f:b0:0e:e0:26:01:5c:b4:61:
8a:95:d2:60:94:2e:35:b7:85:23:38:10:59:6d:20:b2:98:95:
e3:75:9f:72:a9:73:1e:1f:98:c5:c2:46:f7:20:f6:40:99:cc:
55:00:d4:8c:a4:3a:18:71:22:50:7e:03:ab:cb:be:36:47:56:
4e:c5:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:59 2025 by rpki-client