Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa
File: zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa (raw, json)
Hash identifier: ZjJLCfqbOICAb/bUdjVN0s78ALnnEMyxgH0ZL30ibxY=
Subject key identifier: CD:CF:CB:A8:E8:02:FD:64:CC:27:9E:86:4D:CB:09:07:5C:92:52:46
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14A5
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa
Signing time: Wed 11 Sep 2024 02:23:35 +0000
ROA not before: Wed 11 Sep 2024 02:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59803
IP address blocks: 2406:1e80::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5285 (0x14a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CDCFCBA8E802FD64CC279E864DCB09075C925246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:8e:ea:05:17:ed:e5:9a:3c:b4:70:e6:f4:
1a:50:4f:9d:34:c0:e7:d9:02:5f:56:a9:a0:a5:2c:
fc:1c:48:01:cd:0f:68:b9:4b:b1:08:b9:55:62:b2:
b3:01:7e:5c:07:30:22:e5:dc:a3:b2:5f:0f:3f:43:
5e:7d:f8:5a:d2:00:81:8b:78:80:26:52:0b:a6:29:
06:f4:b8:57:09:70:8f:a0:2d:4b:2e:77:1b:f6:ec:
22:c9:3e:f3:25:de:79:db:fe:e0:13:c9:40:ee:e2:
aa:b3:3c:7d:f7:64:8e:d8:9e:5c:1d:b7:28:bb:bf:
aa:66:cc:d0:2e:c3:6d:64:88:e4:6a:8c:16:e2:77:
4a:e4:42:0a:c1:ce:e4:2f:d3:9f:19:e1:dd:54:19:
f8:d9:c2:65:a9:e4:ff:a2:b9:8e:f7:0c:c9:86:97:
57:31:9b:d4:cd:8b:8d:44:d9:9e:b8:88:4e:a0:3f:
60:ba:48:9a:0a:86:cf:dc:f3:c7:df:2f:84:b0:ce:
96:28:79:a0:88:9e:02:27:26:64:c4:9c:89:51:e2:
08:76:db:cc:0a:af:7c:6f:63:0f:d9:4c:91:a3:64:
00:6e:88:f3:62:a9:bd:eb:eb:32:db:41:ba:de:4d:
db:8e:f8:c9:93:e4:8a:94:e3:44:3d:ab:45:44:ad:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:CB:A8:E8:02:FD:64:CC:27:9E:86:4D:CB:09:07:5C:92:52:46
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zc_LqOgC_WTMJ56GTcsJB1ySUkY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
2a:0a:18:50:85:90:e9:a0:7b:69:ec:85:1b:4a:c8:b5:6f:82:
b9:0f:97:15:06:8c:d9:bb:62:91:cc:e2:6b:e3:9d:5d:2b:73:
8b:7e:95:47:c0:77:ba:56:52:bb:cf:e9:87:17:8f:be:9f:f9:
8e:3b:ca:a1:8b:25:a8:f3:ea:4f:e3:e9:ab:f1:21:53:7f:a0:
72:a3:10:ed:91:fb:f3:53:24:55:64:51:a3:65:3e:02:f5:83:
16:41:85:ae:1e:39:5c:7d:5e:c3:94:d0:c6:0d:78:71:fe:35:
6e:18:68:78:41:d5:7f:3f:eb:ca:a0:97:bc:41:9b:bd:6c:f7:
8e:e2:9b:97:4b:72:04:7c:03:97:ac:be:76:02:fa:cc:39:78:
35:57:2e:c5:62:93:1c:ec:5a:70:99:b2:d1:b2:db:0d:db:ce:
ef:eb:c3:f0:77:f3:bb:3d:a6:cc:4c:c3:5b:ed:44:26:ac:7b:
61:6b:4e:c3:de:54:25:c0:10:f6:f9:1c:9f:46:5c:c2:1f:2d:
c0:25:89:b6:dc:bd:24:33:39:8f:61:32:9e:e2:8b:ec:c4:19:
4a:a0:47:e6:5f:ea:df:13:d0:c5:34:cf:ef:ba:9f:e6:ad:44:
9f:8d:f2:0c:3c:43:13:87:09:7d:72:a3:bb:4b:55:6f:82:dc:
04:44:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:45 2025 by rpki-client