Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa
File: y10ORlGidjrpfkLfLpPjn1Egg2A.roa (raw, json)
Hash identifier: 2YnnhjcfraPbKAbskr3ANZy598Im5Zu0tVVk3t5unog=
Subject key identifier: CB:5D:0E:46:51:A2:76:3A:E9:7E:42:DF:2E:93:E3:9F:51:20:83:60
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0E1B
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa
Signing time: Sat 27 Jul 2024 07:45:17 +0000
ROA not before: Sat 27 Jul 2024 07:45:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 209242
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jul 27 07:45:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CB5D0E4651A2763AE97E42DF2E93E39F51208360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:76:ba:d5:63:25:e0:87:ae:99:b5:cc:47:
df:69:67:ef:e2:c1:aa:6d:9b:f2:c7:6f:69:2e:f0:
67:7f:44:9f:32:a0:2b:fd:72:df:eb:bf:e1:86:28:
fc:a2:3e:8c:5a:97:0b:ff:a0:bc:9a:e1:b7:6f:bc:
0d:15:27:ca:a0:19:5f:b4:ff:02:b6:43:3e:77:03:
31:76:cf:5f:1a:6b:63:34:5d:16:6b:09:30:04:af:
d1:c1:82:c1:ba:2f:fb:97:e6:16:69:f2:54:05:23:
e3:a7:70:02:f4:ef:eb:8e:ee:47:4b:e8:55:be:9a:
11:ed:cc:61:fe:f6:e6:9f:e2:ac:8d:10:30:c2:6a:
13:a5:0e:f9:1d:10:93:b7:ee:b8:8b:ef:33:b6:1c:
2a:f6:d4:4d:3d:53:13:fd:da:59:75:4e:be:e5:bf:
0e:3e:f1:0d:cd:2a:62:33:12:b4:b9:00:60:f6:b1:
ba:17:48:dd:4b:e6:fe:31:1b:a7:6a:a3:c5:d6:98:
fa:0d:26:24:8e:c1:e1:bb:ee:80:fb:2f:9b:2f:a7:
fd:fd:0f:1a:f1:80:f8:d2:61:20:f0:0a:78:25:29:
8b:25:ee:37:ef:f0:e5:e4:67:5d:0e:fb:5f:dc:9f:
aa:e4:d1:ac:0f:32:db:78:b8:85:3e:44:56:5f:ac:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:0E:46:51:A2:76:3A:E9:7E:42:DF:2E:93:E3:9F:51:20:83:60
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/y10ORlGidjrpfkLfLpPjn1Egg2A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:d0:80:aa:b0:63:a1:aa:e6:e7:c4:95:e9:db:a7:03:2e:85:
c1:ef:fd:f7:3c:d6:c6:4f:19:6b:c4:1f:6e:b9:35:7b:c9:db:
10:2b:98:91:79:28:8f:cb:2e:24:87:f6:68:b4:75:e0:62:93:
1a:60:c6:29:cb:92:f6:50:4c:b9:48:fa:f2:97:0d:0d:97:f5:
ad:c9:9f:31:29:bd:02:53:9f:d5:0e:dc:1c:74:57:e3:9a:d4:
5d:12:a4:67:6c:7d:64:6e:76:25:ce:8a:8b:b8:81:b9:ee:6f:
fc:94:12:63:de:16:f7:bf:ee:25:50:ce:ff:0e:04:86:4c:53:
9e:ad:7a:7d:2b:56:39:dd:cb:ea:4b:45:88:d9:79:6d:9a:26:
c0:db:be:31:f2:40:9d:9a:01:9c:f2:af:d3:9c:b1:02:c8:f4:
30:87:32:3b:a3:06:f8:7d:f5:81:23:30:0e:d9:f7:b9:ae:32:
52:17:b2:90:7c:15:a0:7e:58:bf:fb:34:06:53:dc:2c:15:c1:
3f:ab:3a:51:d7:87:fe:8a:f6:f5:c0:62:a8:19:b3:f1:b0:e2:
bf:32:15:6d:26:4e:76:4e:44:a4:93:f6:5b:3d:82:4d:57:98:
08:01:b0:c5:f8:05:a4:ba:f3:83:42:27:b5:8e:d1:2c:78:4c:
65:a7:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:56 2025 by rpki-client