Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa
File: UlsKJh8-l61nmNPUTqcKlx-u-KA.roa (raw, json)
Hash identifier: nMYdC8CD5EojoEU6mob51RVBkuWa89PrSC3r5J3rwV8=
Subject key identifier: 52:5B:0A:26:1F:3E:97:AD:67:98:D3:D4:4E:A7:0A:97:1F:AE:F8:A0
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14F8
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa
Signing time: Wed 11 Sep 2024 02:26:13 +0000
ROA not before: Wed 11 Sep 2024 02:26:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5368 (0x14f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:26:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=525B0A261F3E97AD6798D3D44EA70A971FAEF8A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:5b:da:1f:e8:1a:a4:23:5f:ce:7f:2d:d8:
29:56:06:93:da:79:59:66:76:e8:09:e3:52:5e:83:
a1:c9:4e:7e:21:2b:a4:bf:35:d1:eb:20:6d:4a:b8:
57:9c:9d:34:08:63:8d:bc:c1:3a:f4:de:1d:3b:70:
23:86:ef:9c:07:a4:db:06:2b:43:c7:87:3d:86:d2:
ac:50:13:a2:a4:f6:77:53:fb:30:6c:4e:a5:f2:e3:
b8:86:a4:42:5f:1f:24:08:90:43:76:69:56:8f:9c:
39:25:d2:78:33:0a:16:49:94:b9:01:39:74:b6:22:
a3:67:c7:b6:a9:ed:1f:96:c0:35:8d:03:b8:fb:32:
95:28:14:2c:f2:97:f0:0a:7d:52:f8:a4:f0:96:9e:
e0:8f:bb:d2:4c:d4:20:8d:4a:6b:70:31:1f:8b:fb:
ae:d2:3d:b9:32:1c:8b:07:9b:64:52:dd:91:09:13:
78:55:a2:0d:17:00:34:65:27:83:5a:c8:40:99:33:
dc:08:60:48:37:23:83:67:55:0e:61:9c:91:0d:ef:
9e:7a:6e:ab:d1:18:42:dd:9a:a4:73:16:fa:0e:ea:
ef:bf:22:10:a3:8a:14:c0:4a:bf:3e:cd:81:4b:97:
08:5f:43:64:6b:a4:6c:19:56:c2:f8:13:6e:5b:59:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:0A:26:1F:3E:97:AD:67:98:D3:D4:4E:A7:0A:97:1F:AE:F8:A0
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/UlsKJh8-l61nmNPUTqcKlx-u-KA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:66:02:a5:f5:5d:fd:d1:35:9d:d1:d7:f9:b6:e3:f1:74:ac:
e9:a8:96:92:f0:77:2a:ee:61:44:5e:11:d4:fc:b5:c1:ed:a3:
3a:62:04:de:5a:a3:49:8b:1e:f3:be:f3:84:6d:aa:ea:71:04:
d3:7d:f8:31:6b:63:69:54:36:08:13:b3:81:e9:00:ad:c2:40:
0f:69:42:71:f8:d7:eb:ac:ae:47:1b:25:5a:f7:b4:7d:61:b4:
eb:55:c0:29:49:24:36:f0:6a:46:89:c2:ed:6e:f7:ec:ba:fa:
29:fc:40:f7:ff:38:9d:14:a7:f2:c2:be:af:ff:9e:91:0d:d4:
a9:e0:71:8f:78:53:70:3b:7f:05:50:c9:22:4c:a9:6a:ef:84:
7d:3e:ac:4a:d0:a2:6f:2f:f3:31:81:df:25:5a:46:25:dc:09:
46:5d:a8:e8:f6:96:e2:5f:0a:cb:4a:0a:87:95:0b:a9:3b:e1:
94:0e:06:1b:f6:b3:15:57:eb:7b:f3:b6:a1:69:9b:78:ec:d4:
86:c0:42:bd:55:8e:29:f6:07:9b:3d:56:2d:0a:cc:e5:cd:d4:
5d:89:d6:34:32:8e:15:c0:f8:82:11:4d:8a:0d:62:98:e5:7a:
f3:50:dd:56:38:5c:51:b8:7c:b4:73:b7:e7:eb:87:f0:7b:7a:
90:b5:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:46 2025 by rpki-client