Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa
File: xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa (raw, json)
Hash identifier: YaZZmWAZiabSdrOfNLOwwARuYVgEmGH8Dev2RDPeXZg=
Subject key identifier: C7:27:D8:F7:24:7B:61:22:E6:05:6B:81:84:EB:05:29:9C:54:ED:63
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 134B
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa
Signing time: Mon 11 Mar 2024 06:45:33 +0000
ROA not before: Mon 11 Mar 2024 06:45:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4812
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4939 (0x134b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Mar 11 06:45:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C727D8F7247B6122E6056B8184EB05299C54ED63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:3f:dd:95:ad:6f:2f:af:44:9f:61:05:08:
a0:26:4c:05:02:4c:10:ec:c4:ca:b0:88:9a:2a:3d:
8c:2d:aa:b3:7b:fc:4c:d4:01:11:09:26:4d:1c:7f:
c2:35:1b:33:e3:29:1c:82:ef:46:5e:6e:ee:aa:cc:
34:de:29:75:30:45:15:cc:ce:fb:80:30:33:8f:73:
62:48:9b:4c:b8:5a:3f:71:b8:db:ba:a4:9c:c7:e1:
e3:b1:48:62:1a:4d:9c:ab:e2:62:1a:c4:7d:99:f3:
5f:94:92:8f:ab:9b:d8:ee:06:d3:21:44:4d:fe:f8:
01:93:81:88:c0:bc:96:b0:e0:00:88:d3:3e:0b:d1:
1b:08:5a:d1:50:59:ad:94:ab:cf:f0:56:87:79:a5:
b8:02:d7:42:ba:d1:1a:67:14:0e:56:1f:5b:f1:ff:
b0:bc:bc:4b:e5:2f:19:a9:2b:28:82:65:eb:3f:c7:
6f:4e:93:2b:d5:fc:99:84:6b:a9:75:98:a0:f8:84:
8e:02:e8:12:95:39:4e:16:84:51:96:9e:72:d6:96:
bb:d9:a8:38:21:dc:8f:d0:25:a9:6b:aa:1b:7f:e2:
5d:5d:3f:3c:43:de:03:c0:82:49:6b:79:ad:c2:b4:
8e:d9:f6:c3:70:0c:64:08:52:4f:31:51:f3:9a:c4:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:D8:F7:24:7B:61:22:E6:05:6B:81:84:EB:05:29:9C:54:ED:63
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/xyfY9yR7YSLmBWuBhOsFKZxU7WM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
1f:cd:4e:b8:59:a2:c1:26:89:27:02:f8:25:ac:35:6f:04:60:
2c:43:cc:79:e0:da:9a:93:bd:73:89:c9:f0:f9:7c:00:d7:00:
57:46:a1:8a:25:9f:30:ec:57:c1:59:3c:c6:42:4a:aa:da:6a:
dd:02:4b:4b:ee:07:15:59:72:30:10:c6:38:d8:68:44:ca:f1:
e6:79:70:65:4b:83:da:cc:f7:26:4a:fd:32:23:49:85:63:52:
3b:f5:ae:b5:f4:bf:d3:c7:c6:85:d7:f1:75:64:f5:22:ab:6e:
4d:3f:d4:db:f2:c9:dd:1d:3c:e3:27:d8:8b:dc:d4:88:bf:1c:
9b:0e:b3:39:01:8e:46:25:ea:f7:8e:b1:bd:bc:60:4d:cc:99:
ee:24:3a:a6:f4:d8:33:1c:3e:aa:0c:44:d6:77:8a:75:b4:53:
ee:39:a9:eb:4f:c9:1a:fb:a1:7c:55:75:92:34:7e:cd:74:91:
51:8f:ee:65:c7:96:a3:66:5b:ef:b6:88:27:82:09:10:f1:78:
38:df:ed:6a:18:f4:c8:28:ae:8b:01:85:12:f9:65:bb:85:59:
4c:af:42:a7:67:07:53:3d:05:15:55:8c:35:90:b1:5f:14:58:
24:fe:fb:92:80:56:57:b5:b7:f8:b1:39:ca:6e:a5:e4:6b:57:
15:05:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:14 2025 by rpki-client