Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/14hw8yHKOAAbH0fdAXXgueHCGL0.roa
File: 14hw8yHKOAAbH0fdAXXgueHCGL0.roa (raw, json)
Hash identifier: H2GUij/2+GPbX5vYQgO6+eQHtZDQ1b57xoGUGrZAR2k=
Subject key identifier: D7:88:70:F3:21:CA:38:00:1B:1F:47:DD:01:75:E0:B9:E1:C2:18:BD
Certificate issuer: /CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Certificate serial: 14A2
Authority key identifier: 9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/14hw8yHKOAAbH0fdAXXgueHCGL0.roa
Signing time: Thu 11 Jul 2024 03:20:52 +0000
ROA not before: Thu 11 Jul 2024 03:20:52 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
119.16.0.0/16 maxlen: 16
125.169.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282 (0x14a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A5C74AE3F8CD3B679AC56C473F450378591926B
Validity
Not Before: Jul 11 03:20:52 2024 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=D78870F321CA38001B1F47DD0175E0B9E1C218BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:a2:19:c1:84:ab:90:2c:78:fd:03:bb:15:
55:b9:62:85:ad:76:77:38:73:71:14:20:14:06:49:
8d:a0:4f:c7:33:ca:16:21:41:c3:1f:ba:b9:92:6e:
0f:57:93:b0:2b:4b:21:30:0b:7c:e4:93:49:6f:32:
89:78:3c:9a:6b:b1:13:a9:76:c8:83:0d:5a:b3:c7:
82:0e:75:e8:3e:8c:8d:e2:9d:50:e0:82:a3:18:fb:
e9:a3:5b:68:fc:6c:ae:8a:80:78:11:9f:31:59:ea:
66:8a:41:48:5f:d1:1d:74:23:3b:28:ec:47:ff:32:
6e:cd:00:51:d4:7a:3f:b9:3b:f4:82:1c:b8:84:79:
27:91:90:cc:b7:21:65:b0:7d:45:38:b2:e3:21:7b:
a0:ea:9c:0f:b5:cd:eb:97:ae:60:1f:14:98:29:26:
64:0c:08:68:db:98:02:2a:ea:e0:9a:74:63:f7:a2:
ed:20:5a:d0:c9:b3:6b:f3:ed:7b:b4:a5:e7:54:7e:
36:3b:fe:10:90:d0:ec:09:ba:ef:a0:0d:7a:be:12:
d9:64:a7:28:d7:20:47:4b:c7:18:2a:a2:8d:a8:3a:
3d:d0:4b:a8:be:67:66:f3:82:68:53:b0:8b:08:50:
12:d2:dd:0b:36:a7:7a:7c:29:85:ee:95:82:1b:0e:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:70:F3:21:CA:38:00:1B:1F:47:DD:01:75:E0:B9:E1:C2:18:BD
X509v3 Authority Key Identifier:
keyid:9A:5C:74:AE:3F:8C:D3:B6:79:AC:56:C4:73:F4:50:37:85:91:92:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlx0rj-M07Z5rFbEc_RQN4WRkms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mlx0rj-M07Z5rFbEc_RQN4WRkms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/14hw8yHKOAAbH0fdAXXgueHCGL0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
119.16.0.0/16
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:73:35:3d:a6:47:dd:db:99:8c:e1:b7:91:4b:09:98:0e:35:
5a:23:ec:9d:f4:42:17:d4:c3:a6:6f:f1:02:b5:3c:12:48:d5:
c4:6b:ec:a5:82:ff:f8:5e:37:60:49:a0:cc:24:2a:6e:8d:6a:
f6:bd:7b:71:85:04:a7:55:d0:42:f4:ed:62:82:03:47:1a:d5:
9b:0c:5a:2c:3a:37:bf:64:0e:ec:c7:67:7f:06:47:20:16:28:
53:bf:d2:a2:4e:9a:94:dd:3f:8a:cd:a2:48:35:56:1d:84:69:
44:a2:be:b8:b5:c5:e2:da:dc:e1:5b:ad:f0:6b:cd:5b:75:ff:
72:ec:39:ce:7f:f9:04:3e:ce:21:ed:36:b8:cd:07:51:8e:f7:
68:32:60:f8:c4:83:e9:57:31:b2:98:f3:61:b2:28:47:35:56:
e5:a3:f6:e7:fe:c6:53:b3:55:76:62:dd:f7:eb:5d:36:97:17:
4f:3a:a7:68:14:9e:e5:a0:ec:7c:4b:9f:ae:60:50:61:92:74:
24:78:11:52:f7:2d:12:33:9c:62:d8:a5:f2:2a:f3:1e:5f:f4:
af:a9:f7:4b:57:14:e7:2f:72:e5:e6:0b:01:b2:a5:6d:ac:bf:
38:5b:93:be:b5:12:b9:64:1c:ef:fd:c4:0d:bf:c8:21:37:7c:
ea:12:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 02:16:58 2024 by rpki-client on console-fra.rpki-client.org