Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa
File: P6VXuCy_D3E9eP7AKVoaBWf78f0.roa (raw, json)
Hash identifier: d6PnjzaTTkPBcDUp/Z14BT9Nm1shrmxMg+k4Px1FcEw=
Subject key identifier: 3F:A5:57:B8:2C:BF:0F:71:3D:78:FE:C0:29:5A:1A:05:67:FB:F1:FD
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1501
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa
Signing time: Wed 11 Sep 2024 02:27:31 +0000
ROA not before: Wed 11 Sep 2024 02:27:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5377 (0x1501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:27:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3FA557B82CBF0F713D78FEC0295A1A0567FBF1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:9e:a0:e3:de:ec:a2:fc:4c:fd:7e:85:e1:
52:46:db:71:e0:dc:a2:14:a7:e3:f0:f7:7e:b0:50:
e3:02:8c:72:fd:0a:13:7f:71:cc:d6:cd:af:86:83:
c8:3c:13:2c:a8:fa:11:29:62:3d:bc:7b:88:5a:55:
fb:6b:8d:c4:a5:15:0f:84:58:5a:f2:42:2c:cb:80:
09:13:9e:53:06:e8:65:36:8f:75:65:af:96:3e:55:
33:bc:dc:ac:b9:20:00:84:6c:9d:11:23:dd:6f:ae:
33:40:66:af:b4:66:f9:d1:59:3b:b6:70:9c:e9:a7:
a0:8b:b2:a9:3c:72:40:02:66:28:a2:e1:f7:d0:63:
24:93:78:90:97:a3:95:6e:00:cf:32:2f:c7:85:db:
8d:d4:db:41:c7:bb:90:c9:55:3b:c7:de:ba:5c:ed:
3a:71:a2:1c:7c:a5:c1:d2:b0:00:1f:1f:ce:11:8c:
97:a5:e7:2e:4d:c2:54:07:69:1c:46:4a:9a:ac:fd:
48:dd:f7:4f:d7:01:3b:d5:e1:ed:2b:45:a6:2c:86:
f4:e0:20:5b:eb:61:b5:4e:fb:ab:29:bb:56:aa:80:
bc:77:8f:0c:3a:00:87:59:1a:4f:90:80:9d:ba:78:
a8:93:d1:d9:6d:86:38:ae:b4:b3:48:52:aa:8c:ac:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A5:57:B8:2C:BF:0F:71:3D:78:FE:C0:29:5A:1A:05:67:FB:F1:FD
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/P6VXuCy_D3E9eP7AKVoaBWf78f0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.32.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ce:4a:28:78:bb:80:6c:48:d4:92:3b:dd:c3:c9:ea:3b:15:
67:0e:ec:0e:73:f1:08:34:a8:42:f5:73:46:bc:7a:ed:65:a2:
d0:65:bb:d7:04:91:c3:92:52:2f:0b:2a:7f:07:92:85:54:4c:
6d:6e:c6:9f:9d:95:98:d1:42:4c:20:02:4d:7d:af:f4:b8:5b:
a8:e6:58:95:16:cb:43:83:05:cf:d8:9e:63:93:a2:5a:f4:bd:
bd:70:54:37:72:70:2a:38:8c:b3:13:40:9d:1e:37:1e:6d:c7:
47:9d:ea:69:2c:07:49:09:25:57:99:f1:53:fb:e8:0d:c7:77:
e0:19:f1:ff:ff:63:00:77:2d:54:40:e5:ce:e2:09:3f:73:0b:
f6:cd:24:45:a1:c7:76:5a:e8:0d:b5:99:46:9f:0f:cf:3e:23:
13:34:f4:e9:74:e0:e1:eb:ec:db:1e:15:99:ec:73:da:f7:c1:
b1:52:ab:65:b4:b2:6e:95:2a:bb:ac:fe:a9:2c:7e:66:83:22:
b5:37:09:58:76:fe:8a:89:19:cc:d3:81:19:f6:42:bd:c7:78:
8b:65:01:1c:74:07:31:99:ab:b0:23:18:c9:e8:4a:9a:ca:b0:
c5:c3:68:83:1e:59:a2:ed:15:9e:9d:ff:71:84:f0:88:2c:12:
7d:4a:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:57 2025 by rpki-client