Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa
File: kjJM0y2oMYDfjy3wXpWpnyuNviI.roa (raw, json)
Hash identifier: WeUoKU26x82u6neTsxe4JUSptPM1sxzrvySPulzAAjk=
Subject key identifier: 92:32:4C:D3:2D:A8:31:80:DF:8F:2D:F0:5E:95:A9:9F:2B:8D:BE:22
Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Certificate serial: 0D91
Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa
Signing time: Wed 13 Mar 2024 01:21:21 +0000
ROA not before: Wed 13 Mar 2024 01:21:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59043
IP address blocks: 103.56.184.0/24 maxlen: 24
103.56.185.0/24 maxlen: 24
103.56.186.0/24 maxlen: 24
103.56.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Validity
Not Before: Mar 13 01:21:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=92324CD32DA83180DF8F2DF05E95A99F2B8DBE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:99:ce:6c:12:68:8f:b2:70:10:d5:9b:d2:
ae:17:89:49:cd:03:ba:0f:fa:dc:22:0a:67:22:ed:
44:14:04:7e:e4:1b:3c:be:35:72:83:7c:3a:1b:b2:
5a:4c:b3:52:de:fc:0a:0b:b1:3a:ff:f8:a9:69:53:
e8:d0:27:38:2a:8e:37:3c:2b:9a:db:fb:f5:89:60:
ee:c5:6c:13:6d:6d:e0:aa:78:d5:4f:59:22:a7:42:
53:8a:64:f3:be:79:b8:a6:e6:5c:53:c8:8b:63:dd:
cd:ae:c6:65:42:22:54:5e:25:b5:5c:b7:46:66:71:
a6:31:40:2a:3c:5a:9f:0d:c7:ca:42:47:cd:f1:5f:
20:b1:d3:05:d9:af:5e:09:55:b0:5a:e1:c9:b6:f6:
ff:ae:49:f6:f7:f1:f2:5b:c0:94:c0:fc:2c:b7:c1:
45:8c:12:0c:4b:f1:29:a5:d6:66:07:b3:35:18:78:
fe:39:66:c8:c1:85:b2:e4:15:04:79:5d:b6:73:cb:
2d:a6:c2:0e:aa:c2:bd:d3:ee:ff:00:70:01:11:19:
62:76:56:c8:21:36:b4:6f:40:aa:47:3f:78:86:52:
0e:af:fa:49:93:93:76:96:3b:90:d3:11:5a:e4:66:
b5:ce:5c:e6:5b:45:07:27:8b:f4:a8:73:d9:7d:48:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:32:4C:D3:2D:A8:31:80:DF:8F:2D:F0:5E:95:A9:9F:2B:8D:BE:22
X509v3 Authority Key Identifier:
keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/kjJM0y2oMYDfjy3wXpWpnyuNviI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c0:12:f3:5b:61:e9:cf:10:03:3d:a8:98:38:b2:69:5e:42:
77:d3:e2:b7:eb:39:79:a4:c0:26:c2:24:ce:4e:72:ae:75:6c:
43:d9:22:79:08:53:45:df:dd:4a:52:71:dc:b5:cf:03:0c:b0:
ce:08:28:71:b3:5d:ae:93:8b:95:ab:75:fb:fb:19:14:25:b5:
6c:58:0a:db:94:76:80:a0:4d:8e:4c:bb:ef:aa:cc:95:81:46:
26:8f:a9:16:9a:d4:7e:36:b9:04:02:2a:56:c9:c5:11:88:ae:
f5:ad:02:39:3b:f4:92:3d:86:61:65:6a:45:3f:55:e0:85:88:
40:fd:58:09:0a:36:02:35:e4:a9:bd:2d:a4:e0:72:c4:c0:02:
bb:ff:d5:b5:82:e7:d4:98:9c:22:49:2a:98:51:6c:38:3c:84:
72:78:ef:87:3e:0f:d5:77:d0:01:3f:68:71:8a:87:99:6e:2b:
98:89:f3:58:44:05:de:55:ad:71:31:90:d3:34:69:73:c3:ed:
3f:47:b0:c6:c9:a2:40:f9:5f:a0:10:70:47:e5:44:b7:12:72:
03:ef:bf:97:5b:1e:30:f0:f7:14:4b:15:9a:44:5b:37:ed:78:
0f:56:cf:d5:d7:be:24:90:b9:07:1f:99:6a:d2:53:4e:b2:4b:
02:53:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:42 2025 by rpki-client