Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa
File: _B8K7SE6SPsF_m6wEaYjNebAjmE.roa (raw, json)
Hash identifier: qyLuBJ5j56SwypjDf5PWG1o3QUf+WF1J5H45CfodgCI=
Subject key identifier: FC:1F:0A:ED:21:3A:48:FB:05:FE:6E:B0:11:A6:23:35:E6:C0:8E:61
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1534
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa
Signing time: Wed 11 Sep 2024 03:57:52 +0000
ROA not before: Wed 11 Sep 2024 03:57:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139259
IP address blocks: 103.220.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5428 (0x1534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 03:57:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC1F0AED213A48FB05FE6EB011A62335E6C08E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:8d:5f:74:77:2c:7c:a3:6e:fe:33:20:9c:
38:d4:ca:4e:d7:6f:c3:2c:a9:53:4e:ef:93:40:a4:
5b:9c:f0:f9:b6:d8:1b:63:47:8a:1c:c5:11:44:a1:
f1:97:a5:95:b1:5e:65:9d:49:98:e2:84:d2:b1:a0:
47:e2:a6:ac:db:c3:2b:01:55:2b:bb:db:79:91:4d:
5c:7c:f0:82:ec:8c:cc:9b:ff:96:3f:4b:5b:61:23:
b7:da:bb:98:6f:7b:48:54:ab:bf:d8:4f:03:f6:2d:
3e:af:0a:54:bd:2b:c4:60:49:51:50:d2:24:c1:f1:
d2:3d:b4:19:d5:6c:ae:6f:95:c9:db:79:02:46:69:
6f:a1:1b:fb:3e:79:5b:07:2d:b7:7a:93:90:41:97:
98:8f:5a:4d:8f:ff:f6:d4:73:9d:d5:50:f4:37:d4:
23:4b:0d:b5:3e:9d:54:27:ad:d3:6b:fc:58:ba:12:
b0:a5:0b:28:2a:4a:e6:13:90:35:ee:c3:7a:14:aa:
ec:5c:47:8b:fe:0e:81:63:93:e1:57:42:3f:15:99:
15:1d:9c:f5:47:ed:87:f7:2f:d6:01:9a:5a:d2:1a:
90:4c:e7:5a:51:c8:ed:76:35:40:71:9f:9d:ed:55:
c7:0e:d9:e7:44:3a:38:4e:14:2d:e6:4a:20:65:90:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:0A:ED:21:3A:48:FB:05:FE:6E:B0:11:A6:23:35:E6:C0:8E:61
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/_B8K7SE6SPsF_m6wEaYjNebAjmE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2d:f2:58:e2:a4:bc:0b:9c:06:f3:81:f1:ea:5c:9c:9f:d2:
6d:cb:8d:3b:5f:06:d2:0a:18:ff:ff:5f:1a:97:a7:94:e6:3b:
e0:22:51:6d:2f:8a:2b:5b:82:5e:ec:7f:eb:0b:cd:2f:43:d5:
45:f1:79:95:02:01:5a:03:58:f2:00:46:4c:2a:16:4b:ae:09:
a9:2e:d0:3f:68:89:37:04:a4:4d:7f:08:8f:ae:58:e2:4d:fc:
b2:00:c8:f9:c1:de:7e:84:13:b4:7c:cd:d2:25:98:ab:31:b1:
0b:b1:88:a5:01:7d:b8:a6:d0:b1:b7:c7:23:2d:d4:d2:59:dd:
68:c7:50:73:79:46:24:9f:ab:19:c2:07:e4:a8:f2:4b:91:75:
f8:1d:0e:a6:9e:f5:3c:63:de:01:8f:21:73:1b:ee:12:75:b5:
42:ce:5f:1f:be:24:6e:b3:f4:7f:c1:d6:a2:d9:0c:d2:ab:cc:
0f:4f:22:47:c5:8b:94:49:a7:7f:59:87:0a:db:60:bc:d0:8b:
90:06:57:50:59:e0:cc:7c:df:c4:3b:ab:e7:ef:42:d5:bc:0b:
6f:40:b5:02:fa:2d:4f:f3:97:f7:80:7b:42:cd:06:c9:49:b5:
e7:ce:45:54:0c:8d:b5:8a:71:82:38:6c:a4:95:73:37:69:dc:
3d:fa:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:33 2025 by rpki-client