Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa
File: uvpN6PaNyzfU0Negv55wnSUQ_lo.roa (raw, json)
Hash identifier: 53y//wIxceKjd0jfd+WkKFNEOEeSu/b8zSN6H8Je36s=
Subject key identifier: BA:FA:4D:E8:F6:8D:CB:37:D4:D0:D7:A0:BF:9E:70:9D:25:10:FE:5A
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0DEC
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa
Signing time: Mon 09 Sep 2024 02:58:35 +0000
ROA not before: Mon 09 Sep 2024 02:58:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136907
IP address blocks: 124.71.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3564 (0xdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 9 02:58:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BAFA4DE8F68DCB37D4D0D7A0BF9E709D2510FE5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:c2:73:af:d0:ff:e1:b1:8f:ce:42:4d:8e:
48:f0:2e:11:06:da:ec:7b:74:4d:b0:d8:1a:c3:5c:
b2:01:ae:f4:c1:9c:15:f4:96:d3:87:74:7b:b2:43:
5d:1e:30:da:42:6a:72:3d:b6:86:4e:9d:0f:f0:29:
62:b8:11:9c:21:58:8e:e3:92:3d:ad:a2:70:c6:8f:
f1:34:c8:75:0a:44:38:0c:ce:88:ea:00:24:23:60:
f8:2b:39:a3:62:0b:e1:a8:ff:e8:73:c2:a9:3d:12:
fd:39:11:fd:f7:d5:31:fc:a5:a1:56:bd:53:b3:d0:
60:85:27:be:fc:01:9d:7b:98:65:35:bd:81:75:ed:
9f:f4:f1:18:4f:e1:b2:50:96:45:22:3f:bf:bf:5b:
50:6c:58:51:3d:a2:e7:9f:4a:15:2f:b3:d9:56:ec:
b6:ba:66:bd:b3:33:76:f4:23:4f:64:f2:f6:a5:b4:
c8:c5:53:31:2c:1a:65:df:f4:b8:2b:b1:26:6e:8a:
8c:07:b4:c6:5a:6a:13:48:83:3e:a9:5f:3f:d8:a9:
33:d7:c5:f7:10:84:39:1a:c9:40:5b:89:53:79:07:
6e:62:b5:fc:15:47:ba:3f:5b:d0:0f:04:78:d8:52:
77:0b:b5:87:62:7f:c7:c1:51:48:82:14:04:56:a1:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:4D:E8:F6:8D:CB:37:D4:D0:D7:A0:BF:9E:70:9D:25:10:FE:5A
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/uvpN6PaNyzfU0Negv55wnSUQ_lo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.71.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:06:8c:fb:73:d7:a1:3a:1f:d6:05:2f:f0:b5:42:fe:c5:1f:
47:38:80:23:24:2d:b4:61:3f:01:66:86:a3:88:27:cb:04:74:
ad:76:fe:06:48:13:68:06:7c:b5:3c:90:a4:5c:14:da:e5:17:
b2:54:bd:29:2e:46:9d:fc:7e:59:0d:7f:4c:a7:a6:17:52:35:
28:5f:7e:1f:35:e3:91:a2:36:c8:b2:5c:f4:62:97:9e:27:29:
ac:ea:5f:2a:ee:42:d6:15:dc:b2:3f:b0:71:fb:42:ec:cc:c8:
2d:36:c8:cc:39:59:82:d4:ea:ce:f1:11:f5:6b:22:9a:c6:f8:
09:b1:47:aa:23:b1:39:6b:bf:69:ae:a9:3b:11:29:23:97:c9:
89:4e:55:ed:6d:6d:ab:05:3e:fa:f7:f6:61:3d:99:7d:d9:0c:
3a:1a:04:9f:8a:71:33:3f:bd:f2:70:9e:52:bf:ee:3e:74:3f:
b2:95:1b:39:49:88:7d:45:24:ba:e1:91:9d:00:48:b7:e9:0b:
bb:85:9d:8e:91:2e:ac:3e:8b:b9:5a:88:9d:d2:28:da:bd:6b:
26:43:3e:ee:46:cd:17:af:2b:21:bb:ef:91:ae:a0:f7:e8:28:
9b:6c:0c:c2:17:19:90:db:49:02:2a:0d:87:2d:13:bd:23:33:
23:4c:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:31 2025 by rpki-client