Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/F-RBOI1zf_PTnXqDKdXOpHhL2BQ.roa
File: F-RBOI1zf_PTnXqDKdXOpHhL2BQ.roa (raw, json)
Hash identifier: RTF9kPilNJMBWuH30udNv4KXFXIdZU6wC0HdrM3yFmA=
Subject key identifier: 17:E4:41:38:8D:73:7F:F3:D3:9D:7A:83:29:D5:CE:A4:78:4B:D8:14
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 062C
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/F-RBOI1zf_PTnXqDKdXOpHhL2BQ.roa
Signing time: Thu 22 Aug 2024 03:44:36 +0000
ROA not before: Thu 22 Aug 2024 03:44:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 7018
IP address blocks: 58.66.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 22 03:44:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=17E441388D737FF3D39D7A8329D5CEA4784BD814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:ec:4f:99:29:c4:a8:2e:65:13:c1:f2:8d:
9a:d8:55:a2:29:7f:2a:a4:c9:3a:83:c9:79:1a:98:
60:a0:0e:8e:33:1f:d4:08:02:5c:65:d4:4f:6f:de:
2a:cc:88:d2:e1:90:f0:a9:fd:8a:8f:e1:1f:5a:37:
32:12:46:0f:59:86:9b:a7:7c:3c:ea:ed:24:ce:4b:
00:73:55:e6:0f:ab:94:3e:96:aa:70:72:0f:8d:ff:
df:71:88:2b:e3:b8:05:e0:65:1f:b2:b8:b4:2e:58:
fc:68:c3:8e:cf:ff:ed:cc:74:58:2d:5b:bd:ea:54:
ba:7a:f9:2d:74:b6:20:f0:a1:b9:80:09:0f:ae:45:
2e:ce:ac:3a:cd:de:15:c7:a4:8a:a0:d2:04:97:ab:
29:0a:ed:f7:ef:2d:d4:18:8f:1a:37:01:b4:59:56:
44:60:02:ad:0e:ce:4b:e0:0e:c6:8a:50:3f:7f:51:
47:b6:87:01:bd:66:02:a1:1f:ca:66:2d:b5:37:e1:
62:d4:36:4e:02:bf:f1:24:c6:04:c6:e1:c9:e9:f9:
01:95:d5:64:c8:f6:59:39:d5:06:ad:e2:ad:39:3a:
7d:fd:e9:cb:f3:80:70:ab:66:da:00:14:d3:3e:1b:
34:c4:26:77:cf:1a:46:d4:cc:67:94:78:11:7c:56:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:41:38:8D:73:7F:F3:D3:9D:7A:83:29:D5:CE:A4:78:4B:D8:14
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/F-RBOI1zf_PTnXqDKdXOpHhL2BQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:b8:a7:aa:d4:f6:66:b5:40:c5:d7:9f:9b:9d:c0:5c:e1:e2:
5a:2c:09:43:58:c1:f9:9a:2d:6f:89:c5:31:8a:09:ea:88:2c:
35:c6:25:78:95:6d:67:d4:8a:4f:fd:88:45:1d:55:0b:c4:f8:
35:31:2a:38:d9:29:8d:70:c7:de:bb:ce:fb:fd:71:39:b5:97:
5e:30:2e:20:5a:4a:98:c6:87:b6:6d:46:64:13:9d:22:e1:b0:
08:c7:55:19:c1:93:1a:07:ec:8d:fc:30:38:95:29:48:8c:04:
65:a7:cb:e1:55:e5:65:9a:19:c8:4a:89:10:4a:5c:38:8b:f9:
b9:68:9d:7b:27:db:54:89:67:46:80:f2:ca:bb:16:cc:6e:c0:
8a:2a:9e:8c:df:69:98:e7:1e:dd:4e:ec:95:ba:7d:52:02:31:
3b:54:52:d3:8f:17:48:27:30:e6:ad:bf:91:0a:46:04:18:31:
5b:c7:8e:e0:a5:69:e1:c3:40:5a:3f:82:e5:98:d4:2a:91:43:
b5:82:b1:3e:b4:db:d2:59:9f:4f:94:cc:13:42:93:50:0a:57:
93:69:be:b5:a2:52:66:36:5b:3c:ba:45:e1:c1:d5:5c:60:83:
91:9d:a3:c6:ac:5c:a2:82:86:92:bc:a6:ab:f2:8f:63:a4:7d:
9d:06:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:57 2025 by rpki-client