Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/XppMntSBXtG_VBrhnuZKdlafMuE.roa
File: XppMntSBXtG_VBrhnuZKdlafMuE.roa (raw, json)
Hash identifier: P2X/vukJ2txpBOL6nzO1CQyd0SLNHAg5gR7z/rt7azw=
Subject key identifier: 5E:9A:4C:9E:D4:81:5E:D1:BF:54:1A:E1:9E:E6:4A:76:56:9F:32:E1
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 06E5
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/XppMntSBXtG_VBrhnuZKdlafMuE.roa
Signing time: Thu 20 Jul 2023 06:02:55 +0000
ROA not before: Thu 20 Jul 2023 06:02:55 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 211392
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jul 20 06:02:55 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5E9A4C9ED4815ED1BF541AE19EE64A76569F32E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:b5:02:53:87:98:51:06:f1:87:65:95:7c:
2f:81:20:bd:83:ff:18:73:9b:5f:df:c7:ff:d9:d2:
76:13:65:61:83:06:39:3b:37:50:1b:1a:a0:6c:a5:
13:5a:42:af:31:2a:ba:bd:8b:9b:57:74:6f:51:af:
f0:25:a5:cf:c9:e3:5b:77:8d:b1:36:9d:e8:b0:a4:
e0:8f:19:78:e8:7f:1b:0c:f2:2f:da:75:ee:53:f3:
fb:28:8b:d4:a8:54:73:1c:7b:fc:99:4a:45:be:62:
a1:2b:f1:e1:fd:90:c8:be:bd:aa:81:d5:9a:78:54:
83:38:33:c5:0b:63:bd:8f:f6:bc:39:a0:f1:5d:5b:
0b:32:4d:a9:9e:7a:b2:b5:21:b3:8a:a6:07:af:10:
40:06:18:7a:41:40:6b:0e:17:c2:c2:61:a9:86:57:
7c:43:98:4f:05:03:7a:c2:51:3c:d4:5f:54:64:b5:
d4:90:b3:d6:77:d1:08:2a:6f:85:c5:22:53:8a:f2:
79:ab:41:6c:67:cb:1a:84:96:50:d8:3b:62:13:97:
e1:0e:0e:f2:74:e3:be:55:54:22:18:07:8e:ec:9a:
e5:39:19:a7:31:6e:e3:e5:71:a6:d2:2a:1b:a8:09:
00:58:79:49:0f:b5:1c:4b:2a:74:6b:e8:0e:c6:e9:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:4C:9E:D4:81:5E:D1:BF:54:1A:E1:9E:E6:4A:76:56:9F:32:E1
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/XppMntSBXtG_VBrhnuZKdlafMuE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:66:25:88:ba:99:76:24:9d:3f:4e:b6:ee:f5:6a:d4:8c:a5:
d4:93:32:c4:dc:29:e4:5c:41:ce:86:4a:1d:4b:3e:9a:04:9e:
4c:87:fb:f6:76:64:12:0c:a3:c0:87:55:07:61:a0:63:e4:f5:
ec:4c:90:ff:47:51:14:42:95:13:6e:02:f6:d7:9d:09:bf:9e:
04:51:3f:c8:17:2d:aa:35:18:df:c5:30:9f:3c:57:08:ff:81:
bf:af:fe:57:10:8a:0e:e6:84:f2:40:b3:72:66:e1:65:74:b5:
ae:13:05:75:0e:66:0e:11:a1:67:67:75:d2:47:4e:ca:9b:56:
48:20:86:58:2a:5c:4d:32:77:70:e0:b2:41:34:23:a8:1c:6a:
fa:58:b1:64:1a:32:e0:eb:b4:c4:d7:5d:e0:2f:f2:31:4c:5e:
f4:31:a0:0c:05:46:45:8b:b5:f4:7b:81:16:d2:aa:c3:27:a0:
ad:1e:d1:74:f4:86:eb:71:c3:c8:39:25:ec:ff:14:58:44:26:
44:cd:99:8b:eb:dd:e6:69:17:d2:6a:81:f5:18:a5:bc:17:fa:
2f:e3:45:58:bc:2b:72:79:f2:b1:cf:1b:36:7d:43:01:fb:08:
44:00:12:69:38:11:68:48:6c:d1:7d:88:c7:9f:8e:19:0e:90:
47:54:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:09 2025 by rpki-client