Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa
File: de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa (raw, json)
Hash identifier: f5Zyk9hSJyxSkRvqbObW7SFoi7FoQH9z/or8Avgnl2o=
Subject key identifier: 75:EE:D9:4C:8A:9E:5C:01:D7:35:B2:DE:64:7B:1C:39:CF:6B:ED:84
Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB
Certificate serial: 06CC
Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa
Signing time: Tue 25 Jun 2024 09:55:48 +0000
ROA not before: Tue 25 Jun 2024 09:55:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 17621
IP address blocks: 103.96.224.0/23 maxlen: 24
103.96.224.0/24 maxlen: 24
103.96.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB
Validity
Not Before: Jun 25 09:55:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=75EED94C8A9E5C01D735B2DE647B1C39CF6BED84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:96:57:1d:5e:ef:9f:6f:ae:8b:c8:1b:ba:
44:0a:31:e3:92:e2:2f:e8:06:94:11:2e:a3:42:7e:
ed:45:12:d4:4a:ff:09:ad:f3:9e:62:b2:9f:53:03:
1a:98:39:dc:04:6b:c7:2f:ec:75:dc:f4:c1:5e:63:
ee:d3:49:4c:ee:a8:97:4b:c6:79:21:de:63:ec:9f:
75:90:92:40:d8:32:a2:a5:7c:a0:28:72:0f:86:c7:
9c:2c:78:ba:44:86:da:53:6c:b2:c1:9a:3c:fd:2d:
6e:41:34:fb:6e:b6:20:20:41:36:80:ff:e8:2b:a5:
a8:e8:95:fa:cb:18:ec:23:a3:45:86:fe:90:a8:d1:
01:e9:8e:4c:04:ff:bc:55:08:09:2a:f3:27:31:24:
79:b4:99:27:ec:03:c2:13:4b:73:57:fc:a6:48:12:
7d:69:8e:a0:1e:ab:0c:74:bf:56:fa:eb:21:80:5e:
1b:bd:1d:81:e7:d3:1c:1f:a8:84:fa:d2:c5:e6:e1:
2c:de:b2:5c:ae:35:e9:e1:b4:33:5b:a6:61:70:49:
1e:51:91:be:5c:f5:80:77:d6:06:d0:25:23:bc:0e:
63:c7:f9:90:14:42:95:38:65:70:c3:43:07:f8:86:
a6:12:2e:18:3e:20:b6:df:a0:f7:17:e8:1e:e9:82:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:D9:4C:8A:9E:5C:01:D7:35:B2:DE:64:7B:1C:39:CF:6B:ED:84
X509v3 Authority Key Identifier:
keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/de7ZTIqeXAHXNbLeZHscOc9r7YQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.224.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:e7:a2:99:49:61:b8:a6:dd:15:d9:dd:49:7f:a0:a3:af:23:
c5:74:70:f4:6d:c3:5b:1e:25:78:e2:59:da:3f:24:9d:cb:ad:
7c:67:67:af:75:02:28:a5:50:1c:00:71:6e:69:4d:fa:3a:f0:
c5:50:31:4b:73:2b:8d:01:5e:ee:38:bd:e6:c7:e2:b7:91:9f:
44:f4:de:5b:4a:b6:82:5b:31:d0:a4:9a:7a:3c:61:56:2b:39:
95:55:8c:78:c1:bd:e3:88:5b:07:84:bd:7f:c5:e8:05:cc:55:
64:55:87:35:69:9f:67:5b:bf:28:d8:a4:2a:57:77:b1:13:e5:
e5:a3:14:5e:04:2a:05:ed:2c:60:6e:70:c0:16:96:29:7e:53:
b5:1f:da:16:fd:1c:60:64:ba:a5:17:67:15:d0:5a:67:30:57:
8b:e5:04:8d:d2:c8:8a:01:53:1c:82:b2:f1:e6:87:d2:6d:e5:
5a:18:2e:0f:9b:cb:4f:89:4c:a8:39:6d:ac:31:39:21:03:d0:
52:4d:38:3d:da:67:53:e3:af:99:3f:a9:bd:cd:e6:f2:99:35:
a2:ed:8e:46:67:4d:f4:e3:26:f3:f5:e4:ad:4f:52:01:49:7c:
86:03:cf:e0:61:3c:df:ed:2e:d4:16:8a:1e:dc:26:b2:81:fe:
ff:de:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:12 2025 by rpki-client