Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa
File: YJBTfTlw-fIDibHzMj-3KBCxzAY.roa (raw, json)
Hash identifier: ArKFXCxhMLygDtDwqNJAjFIfg78fWmgyjFfc2rB0NsI=
Subject key identifier: 60:90:53:7D:39:70:F9:F2:03:89:B1:F3:32:3F:B7:28:10:B1:CC:06
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1524
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa
Signing time: Wed 11 Sep 2024 02:30:12 +0000
ROA not before: Wed 11 Sep 2024 02:30:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.6.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5412 (0x1524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:30:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6090537D3970F9F20389B1F3323FB72810B1CC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:41:dc:bd:7e:40:df:d5:7c:11:39:ec:67:
cc:af:bb:22:b9:98:19:12:77:f9:30:2a:c7:fe:4b:
08:e2:14:58:33:7c:83:53:fd:8b:02:26:ec:44:3d:
f0:0b:b9:7d:6f:c7:aa:d9:7e:4e:d4:ca:43:3d:7a:
cb:5a:43:d9:b6:ba:5a:b2:a8:e6:97:c4:bc:3f:55:
51:69:c9:ff:fd:5d:b3:c7:ac:e6:b4:92:80:bb:42:
9c:4a:a6:36:08:4b:98:eb:5c:07:a4:ac:90:49:8d:
b9:55:55:36:25:a7:8b:c3:9c:54:96:1c:32:6f:f0:
9d:5c:ba:cc:e4:60:8d:52:09:94:e7:2a:b7:f2:8e:
07:89:e4:89:d2:2d:ab:a1:c4:02:2f:4a:2d:d0:fc:
7c:8c:70:24:76:a2:d7:88:b7:eb:45:3b:c2:21:63:
f7:e2:65:30:03:a2:2e:f9:64:45:9a:e1:07:39:e9:
74:21:9b:2c:43:27:cc:0e:86:c6:30:7b:39:6a:9e:
5f:d2:fa:f8:27:5b:e7:5f:e1:9e:9a:07:f9:1f:73:
83:dd:88:7b:5d:48:cc:3a:43:cf:55:cb:6e:bb:de:
9d:b0:05:96:d8:11:19:ed:50:5b:95:42:63:b8:c1:
fe:3f:3f:5b:1d:45:96:3c:2c:e7:3b:40:e1:f8:4e:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:53:7D:39:70:F9:F2:03:89:B1:F3:32:3F:B7:28:10:B1:CC:06
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/YJBTfTlw-fIDibHzMj-3KBCxzAY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.110.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f5:e2:78:af:77:59:5d:be:ba:6e:b0:39:d3:6d:74:06:36:
f5:2d:c6:c4:27:b4:c9:ab:79:4c:4d:12:6f:ad:2d:e5:17:f8:
d2:11:87:c8:e2:1c:0b:20:1a:bf:f5:92:94:0e:1f:d6:d4:79:
9a:f0:7f:d6:05:aa:e4:00:26:a1:49:25:a2:de:27:7a:31:31:
d2:cc:bd:7e:97:48:19:7e:90:f7:68:b6:6c:01:80:73:9e:d8:
97:5b:1b:2f:75:48:75:96:81:5f:6a:98:5d:23:70:0c:2c:ee:
6d:36:ca:94:d6:f6:e6:d5:bf:a9:da:79:b1:04:a8:8d:75:37:
09:c1:c6:16:ac:c0:64:3e:e1:55:5d:c8:e1:9b:63:20:4f:3d:
7c:e6:5e:58:6a:f2:d8:4b:6f:bd:b2:a2:a7:4d:48:99:3f:52:
11:15:39:d1:22:a9:12:ff:4a:50:51:2d:67:37:6d:16:52:d7:
f4:db:01:1b:a4:2b:96:3b:41:af:b5:25:5e:52:bc:98:c7:02:
5b:90:c4:0f:c8:37:53:d4:3f:a7:50:b3:71:54:b0:3f:50:60:
f9:2c:03:0a:fa:ea:6a:51:69:3f:b7:04:d4:1b:4d:5d:e4:7e:
cc:f4:aa:69:3a:1d:46:e2:35:75:85:9b:8f:b0:b5:46:d5:55:
9a:cf:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:18 2025 by rpki-client