Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa
File: xFw3i9momcwZpm_b16PSY0vwDfo.roa (raw, json)
Hash identifier: wlrKbug2zdwoQwPUH/HT+NE8kf1Usqx/rR9kzGCD3QQ=
Subject key identifier: C4:5C:37:8B:D9:A8:99:CC:19:A6:6F:DB:D7:A3:D2:63:4B:F0:0D:FA
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14BA
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa
Signing time: Wed 11 Sep 2024 02:23:44 +0000
ROA not before: Wed 11 Sep 2024 02:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24373
IP address blocks: 45.252.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5306 (0x14ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C45C378BD9A899CC19A66FDBD7A3D2634BF00DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:c8:47:e5:d1:54:97:0e:82:45:84:3c:56:
a5:fc:15:d2:3f:71:ae:55:2b:45:50:e8:41:d9:b8:
75:aa:34:b7:90:2f:21:ec:9c:29:b3:c1:9f:05:6b:
9e:f8:b7:6a:e4:ef:60:f8:0e:00:11:f5:53:56:99:
c0:d4:b9:1f:21:b5:40:63:7d:21:9a:f1:41:43:b0:
de:61:05:3d:34:46:f9:b5:fa:37:aa:a7:31:7c:1d:
95:83:1e:ee:72:61:94:76:9e:7f:72:bd:19:9f:8d:
61:2a:dd:59:26:4e:ca:07:72:a8:b5:98:6b:48:9d:
8c:d1:b8:1f:6c:9b:c2:3a:4c:1b:0b:33:74:65:8e:
75:8b:21:64:83:cc:11:8c:a8:25:8d:b3:bf:fd:36:
0d:72:61:59:ed:ed:b3:95:28:f4:a4:c9:b9:d9:8d:
30:99:5d:e4:37:16:13:d2:3a:04:86:fe:5e:42:f6:
66:db:9e:c7:54:37:c4:74:5e:82:f2:15:0a:58:93:
70:d5:6e:95:31:f5:ef:34:5c:08:0c:08:1f:9a:c6:
b9:18:9b:8f:aa:1d:48:59:8c:3c:c3:4d:f1:ad:41:
87:ca:e4:be:8b:3e:b2:a6:0d:32:c0:72:99:9d:5a:
70:61:1a:05:98:0d:ba:dd:e7:7a:c3:97:a1:d4:c9:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:37:8B:D9:A8:99:CC:19:A6:6F:DB:D7:A3:D2:63:4B:F0:0D:FA
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xFw3i9momcwZpm_b16PSY0vwDfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ee:ed:b8:31:8b:d3:4c:35:cb:50:27:f6:cd:8d:62:72:ea:
9c:76:28:50:7d:36:cd:69:8f:55:15:a5:6d:3e:6a:c4:5f:17:
65:7c:4e:0c:fc:d7:f9:ad:60:2d:99:60:af:26:38:4e:95:44:
b8:51:57:a8:71:71:2e:e5:91:a7:93:19:45:58:bf:76:86:66:
b4:73:9f:98:15:e5:73:51:ae:99:f8:3f:3e:9d:41:66:ed:6c:
99:b2:64:b2:7f:4c:a9:8b:fe:97:36:f4:b2:ab:28:9a:d7:56:
27:b4:a5:7c:aa:d4:46:ae:ea:29:05:84:ce:28:9c:57:40:ff:
2f:53:53:69:b5:aa:bc:21:97:67:ef:2c:94:2d:46:cf:1b:31:
be:87:be:0e:60:6b:c1:28:1c:f5:50:eb:67:9c:c3:1d:c1:a8:
11:ed:bf:da:c8:0f:a2:09:8c:1a:7c:6f:39:a4:d4:f7:3a:62:
6d:09:75:dd:da:d3:d5:26:2c:34:9c:77:a2:9e:be:f8:c9:2a:
8b:d8:3f:7a:cb:3c:ac:fb:ef:52:38:40:55:f2:30:d7:c1:97:
4d:5f:71:ff:83:3e:38:1e:0f:29:bd:33:ad:de:42:94:6b:fe:
5c:7c:d2:dd:38:ef:69:3c:ce:9a:2a:a6:71:9f:5b:0b:d8:1d:
3b:e5:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:24 2025 by rpki-client