Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/_AAUUPgiJ5X3ZeZndMRx60G-R0k.roa
File: _AAUUPgiJ5X3ZeZndMRx60G-R0k.roa (raw, json)
Hash identifier: dG4wcSptT3UXhRz0GE2+R39yVg10l7QUdzSPx0u3/9I=
Subject key identifier: FC:00:14:50:F8:22:27:95:F7:65:E6:67:74:C4:71:EB:41:BE:47:49
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 34
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/_AAUUPgiJ5X3ZeZndMRx60G-R0k.roa
Signing time: Wed 02 Mar 2022 01:39:15 +0000
ROA not before: Wed 02 Mar 2022 01:39:15 +0000
ROA not after: Fri 24 Feb 2023 02:38:33 +0000
asID: 37963
IP address blocks: 47.112.0.0/16 maxlen: 24
47.113.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Mar 2 01:39:15 2022 GMT
Not After : Feb 24 02:38:33 2023 GMT
Subject: CN=FC001450F8222795F765E66774C471EB41BE4749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5c:4e:33:e0:10:de:23:39:c7:59:f3:b9:ee:
03:03:a3:d0:8d:e8:d8:e0:14:a5:68:c3:b7:14:91:
b9:af:39:65:5d:d1:e8:b4:41:00:4d:ca:64:9b:c5:
ad:bb:98:3a:d8:9d:67:8f:43:d9:06:29:d1:bd:86:
5a:69:64:3a:76:42:f6:d3:12:47:15:d2:78:e9:ac:
93:1c:34:9b:be:9b:6d:64:7e:51:75:4f:31:b8:72:
48:51:3b:56:fc:f3:24:91:77:28:ef:f3:d8:f5:a5:
88:19:bd:9c:a7:5a:a3:08:4c:e2:20:9e:a1:7a:cd:
b9:ae:cb:3e:8b:e7:4f:85:f9:06:e3:f5:03:f7:99:
45:ae:60:76:c8:04:6b:db:ad:b2:84:6d:55:be:9a:
f0:65:58:6f:e1:cc:73:ea:cf:e7:c4:73:9a:f5:e7:
fc:06:a0:ec:fa:a6:81:a6:e4:a3:6f:83:f2:9c:69:
19:0b:9b:a6:82:08:7b:a0:38:59:99:fd:40:73:33:
5b:09:f5:c9:e4:0d:7f:9d:65:30:61:f9:71:8d:5d:
cd:49:19:61:0f:10:3c:3b:5e:94:92:91:ed:6c:04:
70:67:7d:82:87:8a:29:8b:6b:1b:60:27:b7:91:56:
b4:65:a5:f6:7d:68:80:c7:09:f9:f5:f7:ed:03:05:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:14:50:F8:22:27:95:F7:65:E6:67:74:C4:71:EB:41:BE:47:49
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/_AAUUPgiJ5X3ZeZndMRx60G-R0k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
03:9a:83:d4:96:18:7e:c2:59:d6:9d:d9:10:15:c3:0b:4a:1a:
1a:94:fe:27:5f:b5:dc:f9:43:79:f6:67:8d:92:ea:3b:db:9e:
7c:2b:53:3e:90:f1:13:43:64:e5:c9:7b:2a:03:fb:6e:72:b3:
62:d1:c5:74:e8:96:9f:27:0a:b7:fe:bf:8f:44:d5:b6:11:52:
b7:47:95:56:a7:e7:57:1e:6f:3a:a9:c3:d4:35:7f:0d:4b:23:
a4:e3:4d:d4:43:b4:78:c4:31:a6:32:9f:63:4d:3f:ef:60:d0:
1b:fa:c7:38:a8:b2:fb:4d:1d:9e:52:c5:44:2b:60:65:91:25:
e0:38:8f:a8:cd:6e:69:1c:e6:2d:a3:0c:6c:d7:6a:7a:51:8a:
c0:87:2a:17:ee:1f:15:0c:d2:6a:6c:20:15:17:4c:2c:77:b4:
16:64:ab:06:87:04:0d:12:75:c9:53:83:46:5d:e6:b6:6b:a3:
54:d9:c5:78:5c:59:27:98:69:ef:8d:0c:19:7a:0f:71:2e:f7:
8c:6a:f7:14:37:27:44:6e:0b:1d:b4:67:72:43:04:8b:87:f4:
1f:25:0e:d7:c3:7a:4f:8e:4f:00:8c:da:5c:a1:c5:8e:1f:94:
a0:80:ea:5f:70:ed:0a:6c:75:02:e3:28:0f:d2:fc:59:6d:1f:
23:eb:db:0d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTBB
OUNCMDI5MzdCNTdEQ0U2NkExN0ZCODQyMTZEN0FCRTc2NDM0MB4XDTIyMDMwMjAx
MzkxNVoXDTIzMDIyNDAyMzgzM1owMzExMC8GA1UEAxMoRkMwMDE0NTBGODIyMjc5
NUY3NjVFNjY3NzRDNDcxRUI0MUJFNDc0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO5cTjPgEN4jOcdZ87nuAwOj0I3o2OAUpWjDtxSRua85ZV3R6LRB
AE3KZJvFrbuYOtidZ49D2QYp0b2GWmlkOnZC9tMSRxXSeOmskxw0m76bbWR+UXVP
MbhySFE7VvzzJJF3KO/z2PWliBm9nKdaowhM4iCeoXrNua7LPovnT4X5BuP1A/eZ
Ra5gdsgEa9utsoRtVb6a8GVYb+HMc+rP58RzmvXn/Aag7Pqmgabko2+D8pxpGQub
poIIe6A4WZn9QHMzWwn1yeQNf51lMGH5cY1dzUkZYQ8QPDtelJKR7WwEcGd9goeK
KYtrG2Ant5FWtGWl9n1ogMcJ+fX37QMFsKECAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBT8ABRQ+CInlfdl5md0xHHrQb5HSTAfBgNVHSMEGDAWgBTOCpywKTe1fc5moX+4
QhbXq+dkNDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTcv
emdxY3NDazN0WDNPWnFGX3VFSVcxNnZuWkRRLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC96Z3Fjc0NrM3RYM09acUZfdUVJVzE2dm5aRFEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTcvX0FBVVVQZ2lKNVgzWmVa
bmRNUng2MEctUjBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AS9wMA0GCSqGSIb3DQEBCwUAA4IBAQADmoPUlhh+wlnWndkQFcMLShoalP4nX7Xc
+UN59meNkuo72558K1M+kPETQ2TlyXsqA/tucrNi0cV06JafJwq3/r+PRNW2EVK3
R5VWp+dXHm86qcPUNX8NSyOk403UQ7R4xDGmMp9jTT/vYNAb+sc4qLL7TR2eUsVE
K2BlkSXgOI+ozW5pHOYtowxs12p6UYrAhyoX7h8VDNJqbCAVF0wsd7QWZKsGhwQN
EnXJU4NGXea2a6NU2cV4XFknmGnvjQwZeg9xLveMavcUNydEbgsdtGdyQwSLh/Qf
JQ7Xw3pPjk8AjNpcocWOH5SggOpfcO0KbHUC4ygP0vxZbR8j69sN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org