Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa
File: glzgp6KHUyq7NKJg0FSXXkdkT9w.roa (raw, json)
Hash identifier: 8oN+HKz/riZnaspNAl9zZpcm0Bfkahy6aep4KhhEUv4=
Subject key identifier: 82:5C:E0:A7:A2:87:53:2A:BB:34:A2:60:D0:54:97:5E:47:64:4F:DC
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14C1
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa
Signing time: Wed 11 Sep 2024 02:23:46 +0000
ROA not before: Wed 11 Sep 2024 02:23:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 138527
IP address blocks: 103.221.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5313 (0x14c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=825CE0A7A287532ABB34A260D054975E47644FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:97:ff:e0:53:39:eb:ba:73:0f:5f:f3:27:
77:24:5f:94:67:fa:79:70:f1:0c:30:42:9d:86:b0:
f2:f0:b8:98:73:82:d0:9c:3c:40:2a:3c:02:c2:76:
84:55:2e:48:60:61:62:70:7b:97:ab:df:78:b1:b4:
32:fd:4d:9e:5c:57:fb:67:81:1a:e9:39:40:20:bb:
e6:0f:ad:28:03:1b:5a:cc:83:f2:33:c5:c9:2f:d2:
6a:d2:5d:c4:f9:1b:c7:f4:53:17:9c:37:83:bc:f5:
c9:68:a9:33:58:9f:5d:80:af:45:0a:1e:64:1e:63:
99:91:99:99:2b:84:a7:0f:e6:44:0e:71:61:93:62:
eb:61:c1:ad:5b:a8:28:e6:6e:0c:56:93:23:57:12:
d6:1d:8f:c7:8e:60:27:6f:b0:29:a2:f5:59:fc:c1:
dd:86:77:0d:8e:a3:32:35:20:db:16:c7:89:6b:e9:
71:a8:40:65:af:e0:b3:1d:b2:c9:5c:dc:43:bc:69:
9a:c6:1d:f8:e8:ac:df:30:19:e1:8d:61:58:9e:7d:
6e:52:d7:dc:bc:cd:c2:c4:b1:33:a3:e2:7d:88:b7:
c9:62:92:22:17:3a:f8:55:30:ee:b6:50:84:fe:cf:
33:be:d3:c1:65:83:39:16:7c:dd:87:cc:d9:c1:25:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:E0:A7:A2:87:53:2A:BB:34:A2:60:D0:54:97:5E:47:64:4F:DC
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/glzgp6KHUyq7NKJg0FSXXkdkT9w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:13:a2:79:89:72:98:d4:9a:d3:ea:a7:77:3f:cf:33:82:96:
18:b4:c3:05:c0:94:9c:6f:27:b8:1e:e9:32:13:9c:32:f5:c4:
d8:e5:9b:71:a5:85:d8:bb:2c:77:61:3e:8f:e9:64:2d:d2:c1:
eb:77:7b:54:5b:fd:b5:8a:c3:90:cf:44:af:56:bd:f5:66:0e:
32:19:3a:31:bb:d5:3e:37:0a:ab:43:46:09:8c:d4:f0:f4:92:
f6:87:8c:7a:1f:e6:a6:5f:62:37:3a:ff:fb:ca:70:9c:6e:21:
99:15:44:24:e2:52:36:36:df:67:72:0d:03:50:72:64:b7:21:
79:9e:da:8e:25:92:38:eb:fb:6a:95:a1:0b:78:82:46:0a:77:
bc:b6:1a:0d:9b:47:03:b6:0b:46:62:a5:8b:22:30:1f:d6:68:
85:21:12:a3:57:47:84:a4:4b:40:3a:7b:0e:c2:a9:6a:75:31:
01:3c:4b:85:88:e4:2a:6e:fb:1e:fa:b1:f9:a9:aa:e7:eb:5b:
5b:96:3f:4a:94:fb:57:bb:bd:87:50:bb:13:79:56:1b:c4:58:
09:86:51:37:ce:a5:70:81:c0:9c:84:5b:0d:fd:6c:ca:a9:7a:
e9:4a:33:4d:1d:bd:62:a4:62:8b:64:f5:05:eb:91:7d:4a:ff:
36:c3:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:17 2025 by rpki-client