Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/UR16LPr90KcdBE-pzYSOVQGgTQE.roa
File: UR16LPr90KcdBE-pzYSOVQGgTQE.roa (raw, json)
Hash identifier: SKvhZH7iWuBt5o3psvOGhZIDddqSRutV2ey7YD9NnHA=
Subject key identifier: 51:1D:7A:2C:FA:FD:D0:A7:1D:04:4F:A9:CD:84:8E:55:01:A0:4D:01
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 0701
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UR16LPr90KcdBE-pzYSOVQGgTQE.roa
Signing time: Fri 30 Dec 2022 05:43:14 +0000
ROA not before: Fri 30 Dec 2022 05:43:14 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 146845
IP address blocks: 103.169.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Dec 30 05:43:14 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=511D7A2CFAFDD0A71D044FA9CD848E5501A04D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:67:f4:7a:86:2b:1c:bd:53:34:fa:c9:3b:
75:c0:be:0a:b3:58:a7:a1:f8:a1:f5:9f:5b:a6:7e:
c6:44:d3:25:da:fd:79:78:67:50:5d:54:83:c2:9c:
83:96:5e:ab:59:a6:96:56:41:7d:58:9c:72:b2:24:
0f:66:32:9e:a2:b3:06:79:80:2a:a4:8b:4e:9c:32:
6b:5b:b1:fe:ac:5a:30:45:bd:73:96:4f:8f:a3:34:
dd:57:6c:7a:4d:e0:a0:36:e9:cd:36:7f:87:37:b3:
09:52:79:eb:5e:7f:2d:6d:01:6b:fa:cc:d6:77:8a:
ca:42:3a:b5:ba:9e:e4:17:22:0e:0d:10:56:90:49:
91:ee:39:ba:62:2a:2d:e8:49:46:9d:00:29:6a:12:
ae:29:78:58:4f:8e:34:99:56:e0:ef:d3:e7:9d:e7:
33:52:26:40:0c:0b:7d:41:31:1a:40:cf:f2:64:35:
cd:75:14:2f:04:29:36:c6:34:66:5b:5f:82:7d:1d:
8e:00:07:61:b4:8a:a6:05:58:77:62:4d:8a:91:b0:
4c:1f:02:e8:a4:7b:f4:31:a4:63:4d:e5:21:6a:ce:
89:b1:90:ce:6c:a8:5b:ab:86:b2:b5:4a:53:9b:85:
b8:48:e7:20:8b:b8:40:25:9a:f1:d2:eb:25:ce:23:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:7A:2C:FA:FD:D0:A7:1D:04:4F:A9:CD:84:8E:55:01:A0:4D:01
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/UR16LPr90KcdBE-pzYSOVQGgTQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:1b:31:62:78:1b:34:a6:4a:97:50:08:80:5c:8c:b9:c3:d3:
38:46:75:5c:f6:3c:e8:62:d0:9f:ed:33:7f:f7:10:a0:ff:25:
37:af:1c:a5:f1:52:25:df:93:91:23:07:6b:03:9a:45:fb:e7:
fd:6b:19:07:50:db:cf:e6:70:f8:5b:17:0e:41:00:60:35:d3:
81:5e:c2:3c:ed:92:95:f5:44:a4:45:50:86:d7:2a:1e:a6:8c:
df:74:50:ee:5b:65:07:50:6d:70:cf:94:84:4b:26:fc:c0:24:
2d:70:b6:eb:5d:5a:47:5a:e6:f5:d8:2e:67:93:45:2c:94:56:
23:5e:5b:0a:c9:5c:24:69:0e:c8:32:fa:29:ae:ec:5a:ea:55:
9e:8e:bf:df:c3:c0:ee:3d:f9:db:ac:d8:45:3a:6d:ce:e8:03:
47:03:5f:16:7e:5b:d9:4e:77:be:fc:51:9d:b0:81:ad:ae:c1:
41:e0:c8:82:41:8d:db:9f:4b:2c:63:41:37:92:d0:f4:6e:e6:
ae:a1:2c:b2:df:c4:cd:e6:0d:88:2b:e1:12:ca:5c:9e:89:3f:
3d:c5:3a:e2:a3:e8:fc:b3:5d:e6:a0:85:89:7d:a3:b2:5c:6d:
cc:e9:e2:93:8d:49:ad:b2:b9:d7:f7:d6:63:c9:04:0f:d5:e6:
55:1c:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 01:06:30 2023 by rpki-client on console-ams.rpki-client.org