Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/9vJJshznWe3TL2HuUIV5jUHZ4Ok.roa
File: 9vJJshznWe3TL2HuUIV5jUHZ4Ok.roa (raw, json)
Hash identifier: vmv5QJOtTNEyf9RB1QMhEqo0wGWQzk7aCwnKUpc28zE=
Subject key identifier: F6:F2:49:B2:1C:E7:59:ED:D3:2F:61:EE:50:85:79:8D:41:D9:E0:E9
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 141E
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/9vJJshznWe3TL2HuUIV5jUHZ4Ok.roa
Signing time: Fri 19 May 2023 05:54:09 +0000
ROA not before: Fri 19 May 2023 05:54:09 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 207461
IP address blocks: 49.128.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5150 (0x141e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: May 19 05:54:09 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F6F249B21CE759EDD32F61EE5085798D41D9E0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:0f:27:78:c9:c0:03:a8:e0:93:8d:f4:6e:
e5:5e:8c:e8:22:ad:c9:32:6d:bf:8b:84:a2:56:67:
13:92:d1:af:6a:e5:79:01:d3:db:ae:3e:a0:6f:3a:
a6:b9:80:e4:a5:e6:82:fb:7e:21:e1:60:c9:53:f2:
2c:70:3c:c5:c6:82:c5:71:1d:8d:b6:84:71:3a:36:
91:b3:84:8a:8c:7e:5b:1a:a6:d9:f1:3d:5f:65:a3:
d4:b7:c7:dc:ce:88:e9:07:55:92:52:79:2c:bd:39:
f9:56:5c:26:92:ec:5e:23:f0:f7:d3:49:88:4c:77:
45:37:1f:75:58:f1:38:87:30:4a:0b:11:7c:81:ff:
14:7d:bb:e6:32:88:b7:b4:62:c9:fa:39:cd:1d:2e:
bc:b4:72:69:e2:fa:44:2c:be:55:52:67:ec:7f:d4:
c5:0d:89:8f:95:5a:f6:50:96:f6:f7:be:30:3c:11:
00:14:6e:1f:d7:f3:be:6d:30:01:58:63:89:1c:6e:
8c:d3:bb:d0:c2:b3:4f:d9:77:e3:d3:26:43:4b:47:
14:2a:b0:ef:e5:68:86:7f:d5:bf:a8:bf:d5:23:c6:
a5:37:77:a7:ce:70:33:9f:d2:5d:17:44:be:2f:7d:
92:0e:97:9b:18:bc:dd:d9:36:45:88:b0:b2:23:00:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:49:B2:1C:E7:59:ED:D3:2F:61:EE:50:85:79:8D:41:D9:E0:E9
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/9vJJshznWe3TL2HuUIV5jUHZ4Ok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:3d:17:b8:8e:c9:3d:21:86:99:2e:f5:5b:3e:7c:52:75:15:
65:76:af:23:60:97:dd:1d:f9:62:c0:72:0e:6f:98:c9:a5:17:
fa:f3:38:f6:dc:3c:12:91:d1:b7:c0:66:03:e3:63:93:fc:dd:
4d:25:13:83:2f:e3:32:ff:f2:17:60:23:6c:71:11:58:34:16:
30:b5:10:57:14:c3:36:c5:ef:63:71:b6:40:9e:bd:7c:f9:4f:
3a:e5:cf:2a:5a:ef:43:3a:c6:0d:5b:0d:4f:13:67:fc:1c:57:
2f:dc:f3:f1:3f:90:88:22:cd:c3:b9:97:b1:cb:38:42:56:33:
4b:87:85:5e:f0:72:69:4f:37:53:9e:fc:54:70:0e:13:71:35:
f3:67:c3:ac:df:ff:24:60:b0:3b:c1:b8:bc:be:f2:e9:c0:b9:
bc:06:e9:72:22:b0:b7:b2:85:16:1b:35:cc:6f:64:4d:9c:5f:
7c:46:4a:89:5a:69:a4:70:db:6a:c9:be:75:78:86:2d:92:1c:
5d:ab:bd:e2:cd:56:77:45:fc:31:43:89:ef:2a:37:71:f8:09:
05:6a:44:9b:71:7b:04:77:21:04:17:69:0c:c8:fe:0d:fa:86:
6d:4a:95:e2:d2:51:82:6e:9f:c5:9b:77:3c:ee:71:f1:b0:d5:
71:40:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:06 2025 by rpki-client