Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa
File: N_ewYraz0UL3jM1mP8J6NYog2-0.roa (raw, json)
Hash identifier: 225+naSJoMjG58SP0lfREajU+H98CUL7E6jJpNVmVek=
Subject key identifier: 37:F7:B0:62:B6:B3:D1:42:F7:8C:CD:66:3F:C2:7A:35:8A:20:DB:ED
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 152F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa
Signing time: Wed 11 Sep 2024 03:57:51 +0000
ROA not before: Wed 11 Sep 2024 03:57:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.220.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5423 (0x152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:57:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37F7B062B6B3D142F78CCD663FC27A358A20DBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:a2:ae:c0:67:c1:5e:90:4c:a0:a7:84:08:
f4:2e:69:12:a7:56:16:0e:95:e8:34:77:36:af:d1:
85:78:89:30:55:62:99:9b:de:00:90:c3:47:66:f8:
bd:5d:a9:bc:cb:21:6b:e5:86:e1:23:79:36:fa:81:
ef:de:71:28:4a:5a:7f:29:3f:05:30:e4:21:7b:15:
a5:30:a0:4f:89:27:aa:2a:f7:52:24:13:5c:f7:31:
63:e8:bf:50:f0:21:cb:6d:d7:73:95:d7:23:34:3d:
49:7b:3b:b8:6a:f6:89:bd:30:85:26:0b:3d:1e:e0:
41:df:3b:d6:92:67:ba:84:d7:c7:67:d4:64:f5:b2:
81:b3:e2:85:87:2c:37:36:19:33:ce:87:11:d8:2a:
10:59:3c:e6:b5:4d:fd:fa:6c:91:30:33:d9:79:d5:
94:be:e2:f1:97:56:e8:6f:51:50:bc:ba:72:24:e4:
80:d6:8d:5c:5e:31:e8:3f:fb:de:59:4d:b4:31:3e:
a5:08:5a:33:e6:91:c3:b4:00:e3:20:57:db:f6:f0:
d5:d5:c0:1a:39:6e:e4:3d:12:9a:b0:27:7c:28:bd:
77:c3:18:ee:34:26:22:ff:64:5d:4d:e8:45:99:5f:
84:7d:48:14:63:6a:0d:d4:89:b9:ff:cc:64:25:c5:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:B0:62:B6:B3:D1:42:F7:8C:CD:66:3F:C2:7A:35:8A:20:DB:ED
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N_ewYraz0UL3jM1mP8J6NYog2-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.254.0/24
Signature Algorithm: sha256WithRSAEncryption
24:93:e4:00:93:8a:4a:4c:05:22:e6:29:33:25:10:9e:52:69:
19:01:d4:5c:fc:bc:ae:29:36:19:b5:53:2d:7a:63:a1:ba:c3:
17:a1:0f:c6:80:6e:59:83:e4:55:91:94:2c:96:30:7e:32:60:
45:b5:e9:fa:ee:b9:6d:b9:ea:d3:07:02:19:9a:3c:6c:6f:e1:
58:ae:7d:53:d5:83:8c:28:d6:1a:cb:91:62:50:c4:40:c2:9b:
54:99:00:a5:54:d1:6d:1a:11:23:8a:d0:82:f4:7c:30:ba:ae:
05:75:55:da:c5:82:57:bb:6a:66:80:f4:d3:d7:93:d3:01:c9:
cb:cd:e8:6a:ca:da:46:c5:15:62:48:18:f3:2a:05:18:95:fd:
85:93:84:26:b9:5c:b6:4f:d1:23:d0:ec:6f:fc:3c:90:b3:58:
2c:f5:13:4e:18:6e:69:51:ef:b5:91:e9:17:9e:e2:c5:e8:0a:
32:82:74:d5:ca:05:d9:bd:06:84:95:4c:a6:9a:c6:b7:b2:b0:
1e:0f:74:67:36:3a:1e:00:6f:f0:88:5a:22:5c:4f:1f:ae:89:
b1:1d:58:d1:83:45:49:b9:c6:b9:f4:34:c5:27:e7:0d:94:e5:
85:a6:37:f1:1d:07:88:dd:a0:4e:7d:ef:05:96:60:6c:94:c3:
7c:81:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:34 2025 by rpki-client