Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa
File: x940-zVs16xNbCFZjdjxqkCdDfw.roa (raw, json)
Hash identifier: xsd94GvRXrdO/ewQ/Fm35K3KyjxnjN7InB2kms4Ns+A=
Subject key identifier: C7:DE:34:FB:35:6C:D7:AC:4D:6C:21:59:8D:D8:F1:AA:40:9D:0D:FC
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 0D21
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa
Signing time: Tue 12 Dec 2023 00:01:28 +0000
ROA not before: Tue 12 Dec 2023 00:01:28 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 18811
IP address blocks: 180.223.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Dec 12 00:01:28 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=C7DE34FB356CD7AC4D6C21598DD8F1AA409D0DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:09:83:f0:7e:4b:37:14:00:6e:87:5f:16:
1e:aa:44:75:65:5a:3d:57:5d:03:f4:eb:39:8f:ea:
ef:e1:7f:99:8d:12:aa:ea:c4:76:eb:58:35:d4:65:
6d:d1:fc:c6:8f:4d:15:13:7c:47:97:7c:de:9f:75:
fc:b6:3a:33:dd:16:1c:58:2f:d3:bf:d9:e8:14:ce:
d1:dc:37:a9:5d:a4:41:06:b8:a0:fd:4e:0f:5c:a2:
5c:c9:5f:55:1f:d9:9a:08:00:57:0d:0d:c6:0f:1c:
3b:7a:70:08:07:1a:ba:ed:7e:36:a9:c8:9a:a5:2c:
22:eb:2b:6c:61:fb:ad:2e:c6:29:24:f9:23:5e:2e:
49:2e:c3:45:83:07:55:f8:ad:c8:21:55:3e:95:8f:
79:cd:c7:f1:8b:79:1c:b2:2f:f9:3c:2a:71:43:6a:
e7:2b:56:aa:c9:92:3b:4d:df:ef:12:1d:86:e8:86:
be:e6:b7:6b:81:50:d5:99:ee:72:f1:e2:57:9b:b6:
ee:ee:39:03:c7:02:6e:8a:85:f4:94:b0:3c:02:d5:
86:3c:b9:0c:70:ef:6a:60:ae:65:72:eb:95:3e:cd:
75:fb:b2:8c:ce:36:f8:32:79:e1:44:be:a3:39:10:
58:fb:11:19:93:73:30:03:c8:4a:19:c7:9d:b0:41:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:34:FB:35:6C:D7:AC:4D:6C:21:59:8D:D8:F1:AA:40:9D:0D:FC
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/x940-zVs16xNbCFZjdjxqkCdDfw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:72:41:0e:47:7f:4e:58:93:4b:ad:25:98:76:81:32:ca:0b:
00:a4:c0:40:67:4b:69:77:88:99:0d:15:85:1a:0e:9c:0d:8f:
b7:97:94:09:ca:06:1b:a6:12:0f:b2:12:37:57:00:2c:4b:1e:
86:80:22:f4:6b:c9:b0:58:75:1c:1b:e8:86:27:f9:f4:77:b2:
31:90:48:ff:04:f2:cf:0b:5c:75:79:8f:89:41:7b:89:8f:e0:
a6:a8:c5:7a:5a:c7:3c:10:5a:61:0c:ea:43:2a:49:bc:7c:5b:
35:df:81:12:ad:c4:b6:81:31:37:7d:5d:16:a1:ce:35:c2:ed:
ca:fb:02:93:b3:f6:c9:1f:38:df:40:4d:18:1e:ae:df:41:d1:
15:3b:a8:12:57:0c:c0:5b:dd:ec:60:3a:21:80:46:37:1d:ff:
8e:c2:f6:e8:4c:4d:b6:07:76:14:30:a8:5a:59:b7:35:4c:75:
76:21:98:39:b5:7b:90:b4:5b:0d:de:1c:84:45:db:fd:f2:36:
03:27:ed:5b:e1:0c:9e:71:75:72:8d:14:13:aa:2d:d2:ee:4c:
7c:bc:d9:e8:53:d7:68:81:78:72:0d:be:6f:ff:f6:30:49:7d:
47:4c:e7:1c:fb:bb:7c:7e:d3:1c:76:26:66:f2:98:70:55:06:
76:37:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:13 2025 by rpki-client