Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/TCqDJy5NJekYQWF2-n02qtjFZaM.roa
File: TCqDJy5NJekYQWF2-n02qtjFZaM.roa (raw, json)
Hash identifier: UQ9C2uIIntwWQsOJLblA6MklUeifLUfVX+9DjdbcmZQ=
Subject key identifier: 4C:2A:83:27:2E:4D:25:E9:18:41:61:76:FA:7D:36:AA:D8:C5:65:A3
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0E1E
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TCqDJy5NJekYQWF2-n02qtjFZaM.roa
Signing time: Sat 27 Jul 2024 07:45:18 +0000
ROA not before: Sat 27 Jul 2024 07:45:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4812
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3614 (0xe1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jul 27 07:45:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4C2A83272E4D25E918416176FA7D36AAD8C565A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:2c:bf:b8:64:61:3d:24:a3:a0:10:f3:9a:
7e:d4:3b:87:19:e3:8a:bd:2e:56:a7:33:ab:e5:27:
b8:2b:7d:ff:1c:c2:06:73:c0:ac:70:13:a2:71:93:
e1:e3:c2:59:75:2c:de:fd:99:f9:36:0c:c8:e2:5f:
34:41:81:10:99:17:54:9c:da:44:84:1c:c4:21:7c:
91:12:47:92:cb:90:47:81:2a:ff:7b:94:3c:1d:38:
ca:16:88:a2:20:9f:fe:fa:d3:e1:ff:6f:07:cf:78:
90:5d:b3:5c:c0:02:af:0b:5e:7e:a5:10:5f:3c:33:
32:cf:4c:99:55:3c:01:3b:47:55:de:11:7d:83:c0:
14:44:d5:0c:79:d7:06:27:a3:8b:1d:0a:8e:61:14:
39:95:6d:c0:98:19:b0:c6:a7:18:46:be:40:7f:df:
b9:7e:4f:99:11:5f:1c:a7:31:68:70:6e:7b:09:8a:
02:a7:55:41:f8:1d:b0:80:08:60:6f:17:af:d5:93:
be:91:4e:c7:65:c4:5b:67:45:4c:55:1e:56:24:70:
a9:2c:12:21:f8:0a:80:17:37:15:89:23:22:54:a8:
41:89:a4:f4:4c:be:08:fa:cb:6f:ad:10:22:48:85:
2d:ea:ac:05:ad:79:ba:15:cb:b8:c8:d7:7c:8c:dc:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:83:27:2E:4D:25:E9:18:41:61:76:FA:7D:36:AA:D8:C5:65:A3
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TCqDJy5NJekYQWF2-n02qtjFZaM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
82:6c:22:a3:c1:c3:ca:89:5f:f1:51:ea:d5:a4:74:60:78:24:
7e:03:e8:9b:19:4c:27:95:e0:4a:d3:51:a3:39:e6:ba:11:52:
a6:e1:12:12:45:75:cc:43:79:63:54:29:72:ee:bf:e1:5c:8e:
86:35:3a:c3:d8:9e:de:66:04:ed:2b:c7:c1:6c:8e:55:1e:9c:
dd:e7:71:2e:b1:7b:57:90:ca:e1:6f:39:54:ca:69:0b:f8:04:
79:c6:7e:c2:75:ac:db:67:6b:02:f5:da:27:68:23:44:5e:43:
e7:2f:3c:a8:88:e8:7f:46:bf:3f:8e:53:7a:a1:09:73:3c:22:
e2:74:3c:78:0b:57:bd:f3:70:b7:fe:6b:7d:81:37:ae:6c:b0:
fe:4e:9e:aa:6a:ed:7b:9f:7a:7c:c6:c7:53:b3:4c:ae:7f:70:
65:2a:26:e4:8d:9d:a6:f7:a9:09:67:6c:3d:37:dc:84:41:21:
e4:ed:16:e2:1a:c6:a7:ec:1f:ca:2c:bc:c3:6c:2b:16:6c:5d:
4b:d0:75:04:f8:42:21:ed:47:58:34:e2:23:40:1b:09:2b:62:
0e:e6:5c:b2:53:a9:f1:42:22:77:79:7a:1d:17:b0:64:5f:fe:
99:bc:83:19:09:d7:90:c3:fc:29:82:ac:ca:0d:f2:a8:85:5d:
38:21:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:59 2025 by rpki-client