Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/ieFhe39rNxKAp4_Xz1q1Cm8mkFE.roa
File: ieFhe39rNxKAp4_Xz1q1Cm8mkFE.roa (raw, json)
Hash identifier: oqpSfZdLyh1aqiHW5bFoSo7qy3wTJrhjOhiWoo+bAVg=
Subject key identifier: 89:E1:61:7B:7F:6B:37:12:80:A7:8F:D7:CF:5A:B5:0A:6F:26:90:51
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 0270
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ieFhe39rNxKAp4_Xz1q1Cm8mkFE.roa
Signing time: Wed 31 Jan 2024 03:06:02 +0000
ROA not before: Wed 31 Jan 2024 03:06:02 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.247.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Jan 31 03:06:02 2024 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=89E1617B7F6B371280A78FD7CF5AB50A6F269051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:44:b0:89:6b:bb:69:ad:fd:81:25:59:f3:
ce:55:10:bc:9b:b6:2b:75:10:12:3c:a0:b2:fb:5c:
ee:c1:f6:84:7d:1c:27:b5:a0:30:9b:fb:aa:a8:cc:
9c:8c:59:d2:d8:c5:d4:a1:22:af:c3:32:3a:50:8b:
85:27:a4:98:4f:5b:c5:c8:b5:a0:74:af:38:0c:b8:
1b:4b:9e:f5:9c:cb:1c:f8:e7:ad:de:7c:c4:d2:bc:
bc:0e:d2:eb:3c:98:d0:b6:b5:13:60:4f:f8:a1:e2:
1c:4a:06:7b:7c:0f:a2:d3:76:ba:8f:41:ed:62:e4:
6b:a9:3b:1a:5a:ff:ad:cb:66:fc:ba:e8:e9:4a:d2:
e5:11:b2:ad:7e:ab:d7:8e:de:a9:d5:70:14:ef:cb:
fd:b9:70:61:ce:c1:71:ca:64:3a:a7:ff:a3:fc:70:
7c:34:6b:5b:1e:28:7b:ce:49:4b:15:83:a2:b5:99:
ae:ed:b1:5e:a3:b4:76:f0:88:8b:9c:41:d6:1d:fe:
5e:d1:12:1d:d0:a7:4e:b4:c0:6c:6a:99:e8:c5:5c:
2e:c9:9b:d8:1b:18:22:cf:24:f7:4c:44:b6:ff:19:
dd:c1:c1:fe:e8:68:69:7b:3d:dc:97:2c:2b:37:f4:
0d:a6:a7:6d:56:eb:91:3f:f9:4d:31:a7:f1:f2:8c:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:61:7B:7F:6B:37:12:80:A7:8F:D7:CF:5A:B5:0A:6F:26:90:51
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/ieFhe39rNxKAp4_Xz1q1Cm8mkFE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d8:e0:ed:0f:af:6c:77:16:36:9b:bb:91:0b:58:70:87:ed:
b3:f8:94:2e:d3:17:e2:c8:97:b6:d8:5e:cd:d2:43:ae:dd:55:
1b:ed:8c:a8:90:0a:44:89:29:99:c1:57:41:5f:e4:2a:1f:65:
4f:ef:94:8f:88:48:62:c6:8d:93:8c:1f:1b:0f:44:e4:9c:fc:
cc:f8:f7:c9:84:2f:dd:9a:10:da:57:d8:b0:cd:3b:0e:47:a6:
fe:50:f6:8c:0d:3e:b4:8e:dd:c7:68:fa:46:1a:97:79:66:e9:
e0:f5:66:2b:49:8a:46:e3:bf:b3:99:5b:18:da:ae:4b:a0:1a:
22:e5:b8:df:d9:35:18:d5:1d:a9:8a:3e:67:8a:d7:7a:50:b9:
ae:35:34:74:2b:b3:3b:30:de:9f:cd:c0:c2:8f:76:7c:65:71:
db:9d:47:cb:e0:3a:26:4b:f7:3f:4a:fb:5c:5f:d7:2f:6d:0a:
73:2a:27:ca:a9:56:d5:d0:4d:41:5c:2e:94:67:6c:8a:af:62:
6e:c0:e2:ff:48:56:36:dd:b2:4b:f7:df:53:49:b8:f2:96:e4:
c3:1c:35:89:50:00:fd:0f:09:f8:61:b8:3d:5a:3d:ce:2f:f2:
35:35:20:67:42:18:c3:59:31:e0:fd:a4:13:67:f2:29:47:09:
61:b1:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:46 2025 by rpki-client