Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/rsA_ppiMesx0QjaAHub9-GsUG9w.roa
File: rsA_ppiMesx0QjaAHub9-GsUG9w.roa (raw, json)
Hash identifier: an+rCFjG1J66FOJy7MF2QI8xBfZj/Mbf59K0YMOBdr0=
Subject key identifier: AE:C0:3F:A6:98:8C:7A:CC:74:42:36:80:1E:E6:FD:F8:6B:14:1B:DC
Certificate issuer: /CN=7B099066BD2AF234293C87917B33B1AB861970EF
Certificate serial: 090F
Authority key identifier: 7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/rsA_ppiMesx0QjaAHub9-GsUG9w.roa
Signing time: Tue 07 Jun 2022 02:16:41 +0000
ROA not before: Tue 07 Jun 2022 02:16:41 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63199
IP address blocks: 139.159.104.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319 (0x90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B099066BD2AF234293C87917B33B1AB861970EF
Validity
Not Before: Jun 7 02:16:41 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=AEC03FA6988C7ACC744236801EE6FDF86B141BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:5c:06:22:2a:7c:1f:d3:fd:7a:39:fd:c7:
e8:66:d3:47:fa:d3:ba:94:2b:09:69:b3:4d:e4:cc:
5a:61:e5:75:bf:5a:1a:fc:db:0d:ef:be:98:88:81:
4c:3b:c3:b1:3e:d8:3f:12:9f:de:a8:e5:03:16:e9:
a1:24:68:a3:79:b0:fb:0d:b5:42:1d:4c:95:a4:3a:
27:86:2d:81:68:f8:51:f6:82:6b:80:b5:49:2d:4e:
73:c7:79:ad:c5:29:0a:bd:e6:b6:0f:60:7c:1d:f5:
9c:57:71:c1:c0:10:56:39:46:36:6e:5c:8d:eb:82:
5d:d1:34:3d:2d:67:0c:06:2c:07:17:af:d3:00:b6:
c9:bb:2f:9d:eb:6c:6f:2a:f6:17:a4:03:9f:74:38:
83:10:e8:b6:54:4a:33:34:f0:59:98:7d:51:37:cc:
c7:44:ee:97:cb:7a:f7:c6:48:3c:6a:1b:49:5b:0f:
7f:8f:36:af:48:87:fa:0d:80:bd:91:38:bb:31:52:
60:41:47:fa:ec:f4:dc:70:cf:de:39:e1:45:7d:03:
b4:27:44:ec:67:a5:80:56:aa:ac:22:21:eb:da:21:
04:74:c6:e1:8e:5b:62:29:45:ba:7c:1f:16:cd:e6:
9b:3b:45:83:bc:c9:83:ce:7e:55:ff:d8:0f:a2:90:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:3F:A6:98:8C:7A:CC:74:42:36:80:1E:E6:FD:F8:6B:14:1B:DC
X509v3 Authority Key Identifier:
keyid:7B:09:90:66:BD:2A:F2:34:29:3C:87:91:7B:33:B1:AB:86:19:70:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ewmQZr0q8jQpPIeRezOxq4YZcO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ewmQZr0q8jQpPIeRezOxq4YZcO8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/rsA_ppiMesx0QjaAHub9-GsUG9w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.104.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:2a:65:ca:5d:db:e2:d8:ad:23:f0:05:43:8b:93:12:4b:39:
6f:66:22:c2:35:7c:12:65:0d:5b:6a:ca:fc:10:c0:ea:19:b3:
aa:8e:27:b8:9a:85:2f:a0:1e:70:4c:12:3f:e9:28:0c:1c:44:
33:b1:6c:7a:68:d5:da:57:36:35:cd:9a:97:31:e2:c3:88:1d:
52:85:16:b0:e0:f7:fd:9f:dc:4d:ee:8b:ea:6f:47:06:ff:26:
d2:35:a1:72:13:5d:1d:73:7f:8f:aa:77:47:94:11:dc:19:f6:
e4:72:f8:03:d3:04:4e:32:11:24:35:a9:98:96:98:34:12:df:
7d:19:e0:1a:fe:21:04:27:3d:64:94:a2:12:6c:ed:b5:9e:cc:
5c:4a:8d:16:44:e8:46:82:53:00:af:d3:02:ca:64:6a:b6:16:
f5:e6:77:36:31:20:ed:67:bc:4d:57:f2:22:55:6d:cb:18:db:
b9:53:83:fe:e1:7a:bf:86:f8:29:52:d6:dc:f1:02:76:70:cf:
bf:76:a2:e5:fb:ea:4d:b2:af:41:51:a8:d0:8e:97:4e:fe:5e:
f4:aa:fe:00:29:9d:b4:4d:61:12:38:d7:0b:df:b7:f6:99:ed:
cc:18:4e:5a:88:54:aa:3f:18:be:8e:87:ae:3d:44:55:88:54:
b4:a4:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org