Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/tIhRkNU30W7b3zaqi_VjpsIXodE.roa
File: tIhRkNU30W7b3zaqi_VjpsIXodE.roa (raw, json)
Hash identifier: ucYGDhIPvwXUzYIdIEEqFd89o3hNbnQrcKOzUcr5Two=
Subject key identifier: B4:88:51:90:D5:37:D1:6E:DB:DF:36:AA:8B:F5:63:A6:C2:17:A1:D1
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 113D
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/tIhRkNU30W7b3zaqi_VjpsIXodE.roa
Signing time: Tue 20 Jun 2023 03:28:13 +0000
ROA not before: Tue 20 Jun 2023 03:28:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 996
IP address blocks: 103.203.100.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4413 (0x113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jun 20 03:28:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B4885190D537D16EDBDF36AA8BF563A6C217A1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:15:d4:1c:19:14:dc:78:32:65:8a:c1:d4:
89:9f:f0:b4:48:07:8a:cf:ad:af:49:52:f7:a4:e6:
44:17:ea:af:4a:51:48:94:0e:59:54:c7:b4:6e:f9:
05:1c:85:af:43:a6:cf:22:87:4c:38:fe:51:60:23:
99:dd:ff:cc:77:3a:25:08:50:17:81:b3:29:3b:ba:
32:c6:a8:fa:27:e3:56:91:05:5f:15:cb:fa:1b:1f:
f6:20:00:e6:c6:40:5f:37:f4:75:d1:ce:37:6f:21:
cd:df:fb:b2:68:bb:e2:17:63:ba:52:fe:4d:1a:c8:
18:a5:6f:e1:4e:22:3b:ef:7c:9f:13:15:15:93:2c:
65:9a:a3:bb:3b:d3:3c:d0:c7:59:e7:07:e5:ee:21:
21:34:1a:c0:96:bd:51:1b:6b:61:5c:12:0c:39:32:
13:e8:76:54:e0:23:4b:5c:a1:9a:52:d6:96:92:cc:
fd:36:28:40:bc:51:59:4b:8c:ab:1f:a4:90:5b:97:
a0:60:ee:fe:20:23:37:1a:2e:5c:4c:15:8f:1e:96:
af:bc:06:f1:72:ce:04:a5:fb:7a:b7:a3:90:7c:5b:
c1:6a:ed:de:fe:9e:7a:4d:d4:e3:84:fd:b6:c9:d1:
90:86:ac:b7:30:09:8d:fd:ed:ed:8d:20:29:1a:81:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:51:90:D5:37:D1:6E:DB:DF:36:AA:8B:F5:63:A6:C2:17:A1:D1
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/tIhRkNU30W7b3zaqi_VjpsIXodE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:12:92:0d:10:7f:5e:d4:d7:2c:3e:36:79:0c:16:e9:95:e7:
6f:69:7c:79:d8:c8:43:34:16:e7:c8:1e:ec:a1:e8:0e:2f:7a:
98:f4:64:0e:9b:4e:aa:c1:67:ac:61:26:ed:7c:b2:18:6a:34:
95:05:c9:1f:bd:b0:ce:a5:e5:e7:d0:0e:fd:31:a5:91:c5:2e:
5b:c9:6d:e4:d1:22:74:f8:ad:e9:45:f9:41:af:9c:5c:56:1e:
78:a9:ff:50:01:b6:9b:04:d0:cc:2f:cf:2d:2f:46:e4:a3:34:
a1:f6:76:e4:6c:52:4d:6b:f7:10:a6:98:d5:44:0f:b4:e8:80:
4b:b6:c2:31:77:ad:d0:0a:5c:33:32:0f:a0:94:68:ac:ce:ae:
3f:30:0a:e4:d8:68:19:dc:90:c7:ac:6b:7a:f8:35:d7:f6:4a:
06:be:ce:a0:3c:e3:9d:b3:fe:9d:58:aa:1c:7d:71:0d:ed:9d:
6a:97:c1:83:c8:20:33:5a:d7:7b:82:95:e6:35:5b:c7:d4:ec:
3a:15:2f:7a:76:04:07:e0:07:12:fd:3b:ae:af:e9:a6:10:e3:
c2:98:0c:85:0a:18:c7:22:c0:2e:c7:cc:ca:c9:7a:4b:2e:db:
0f:75:99:5d:59:8e:27:9d:88:19:f8:32:e9:70:39:e3:a3:c4:
67:84:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:36 2025 by rpki-client