Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa
File: fWWcqMr1Rx36saVyyGcw4W_y8KY.roa (raw, json)
Hash identifier: Z/ntlef4VuosHAeVPaauLd7lkjfboFyCmFuuFmoe5kE=
Subject key identifier: 7D:65:9C:A8:CA:F5:47:1D:FA:B1:A5:72:C8:67:30:E1:6F:F2:F0:A6
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1701
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa
Signing time: Wed 13 Mar 2024 01:21:52 +0000
ROA not before: Wed 13 Mar 2024 01:21:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136958
IP address blocks: 42.240.128.0/20 maxlen: 20
42.240.144.0/20 maxlen: 20
42.240.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5889 (0x1701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 13 01:21:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7D659CA8CAF5471DFAB1A572C86730E16FF2F0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:54:6e:c8:07:a3:31:6a:69:4c:b8:17:a6:
c5:ec:5d:b7:91:03:e7:7e:59:03:86:41:db:e7:88:
91:b9:a5:48:c4:47:63:f4:1d:0e:51:87:6b:e1:b5:
ec:bc:e1:74:88:da:25:de:32:e9:bf:43:ed:1c:59:
9e:49:f3:eb:66:53:61:fb:85:fe:c9:02:9f:8c:5d:
3e:b3:54:a5:5b:e3:a0:4a:05:84:1e:8e:e7:f3:e9:
cd:08:14:29:67:75:54:fc:a1:ff:fb:77:b1:ee:42:
30:18:d9:40:c1:ac:de:37:9f:72:65:03:ec:cc:c2:
67:f8:56:64:59:52:a5:81:b3:c2:94:2b:f7:81:de:
fe:5d:0c:04:51:7b:18:3f:09:a7:cb:48:90:e9:4f:
3b:0b:7a:a2:5b:8b:d3:3f:05:fc:0b:cc:74:15:b7:
d6:8e:97:27:77:d9:f3:63:17:e5:a4:a7:f5:dc:d4:
5b:51:de:c1:5a:77:ea:76:bc:07:58:91:b3:24:73:
2c:14:e9:97:59:ad:8d:a0:ca:a7:5a:33:22:f5:52:
99:4b:f6:5c:05:d8:52:46:c0:f9:b9:3c:69:51:b0:
89:c1:54:cf:69:58:28:12:93:23:ac:3c:00:9f:6b:
b0:b7:72:09:d8:87:00:4f:14:e2:f7:69:7a:a4:18:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:9C:A8:CA:F5:47:1D:FA:B1:A5:72:C8:67:30:E1:6F:F2:F0:A6
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/fWWcqMr1Rx36saVyyGcw4W_y8KY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.240.128.0-42.240.175.255
Signature Algorithm: sha256WithRSAEncryption
47:94:fe:37:8c:61:f9:05:68:87:29:c6:35:f9:ff:05:3d:24:
7d:06:13:72:5d:ef:98:21:69:43:aa:d9:7d:29:b1:66:44:dc:
83:65:9e:4f:2c:58:68:ed:e8:73:e2:d7:46:e1:67:16:14:c6:
cd:8b:1e:43:25:f7:79:f7:14:4f:41:49:2c:f1:57:56:91:d6:
79:8f:c8:e8:58:40:0f:ef:c1:49:e6:6f:1d:2b:5b:e8:d3:ec:
1b:23:95:e3:73:e7:e1:a9:87:99:2c:b3:c1:a4:fb:b8:a2:4f:
13:d7:d4:09:2d:05:fc:ae:6a:62:89:54:eb:a3:75:b2:af:cd:
8a:1c:08:b8:e6:c0:9d:d2:69:5e:5d:69:e6:98:ae:0e:80:8e:
f9:3e:8d:37:cb:8d:88:d4:07:33:e1:6b:06:cc:be:c2:20:ed:
a8:85:f2:ca:e2:60:de:56:d0:ff:21:b7:81:d9:8b:8d:ea:61:
1a:2e:ed:d5:40:73:21:42:0c:11:0e:2c:e7:31:ea:5e:8c:b5:
0d:6d:54:e0:b2:4e:9c:a6:8c:04:82:a8:1c:ef:a7:cb:a7:0d:
73:b3:26:ca:67:2c:56:c0:31:ed:e5:1e:71:51:97:9d:a1:32:
d2:05:4f:19:12:2c:da:a2:e3:44:6a:60:b2:ed:67:22:6b:b5:
1f:6f:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:59 2025 by rpki-client