Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa
File: kOfg6CMy5yxcC4i_SEMMPux55wY.roa (raw, json)
Hash identifier: 5oQSr0+YNjZk2GrVJ6TCQ9gX5gakv0/xfXYDjuPcp4A=
Subject key identifier: 90:E7:E0:E8:23:32:E7:2C:5C:0B:88:BF:48:43:0C:3E:EC:79:E7:06
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 124A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa
Signing time: Tue 20 Aug 2024 12:56:44 +0000
ROA not before: Tue 20 Aug 2024 12:56:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 398704
IP address blocks: 180.223.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4682 (0x124a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Aug 20 12:56:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=90E7E0E82332E72C5C0B88BF48430C3EEC79E706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:0d:20:17:51:2d:f6:9d:f7:c9:b3:2d:17:
63:82:9c:0a:1f:7f:9f:10:3f:0f:79:18:f9:cc:75:
89:06:cd:28:db:b3:77:16:bd:c8:c7:a8:c3:41:c6:
3c:41:73:e5:a5:18:27:9d:b1:9e:70:5d:48:7c:f4:
13:9b:cc:2d:c4:19:26:47:5d:4b:c0:50:da:77:74:
4d:2a:f9:b1:71:2f:bb:79:be:82:61:7e:ed:ff:58:
bb:ee:d1:59:ff:1e:6a:7a:e2:e1:d1:60:a9:85:39:
38:b6:32:de:f2:95:20:c7:4b:5f:f9:ef:7d:04:2d:
02:74:ce:3e:25:6c:ef:61:09:45:2e:a3:e7:c7:04:
4a:e5:b9:41:2e:cd:b3:d5:4c:37:72:d1:b2:91:13:
c7:de:af:a7:71:76:ca:04:3b:dc:e7:14:4e:1d:da:
87:0b:85:2b:6d:36:3d:9a:70:f7:1d:47:7e:52:8d:
5f:7f:62:a4:84:93:36:e0:fd:ed:46:93:6c:16:a1:
a8:ba:bf:7c:4d:2e:83:62:ce:ba:12:48:b8:09:cb:
56:ab:19:a2:f3:84:59:6b:fc:0c:36:13:be:7a:cb:
d8:54:ba:3b:b6:f6:b7:56:b3:e0:80:28:30:d1:f3:
d7:52:00:e9:8f:7f:70:25:7a:18:35:58:95:45:60:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:E0:E8:23:32:E7:2C:5C:0B:88:BF:48:43:0C:3E:EC:79:E7:06
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/kOfg6CMy5yxcC4i_SEMMPux55wY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:64:8a:44:ad:09:ba:19:8a:cc:c5:a6:d1:5d:5f:db:70:56:
90:dd:5a:e9:e8:fd:b4:98:0a:8b:83:09:1a:2a:2e:f7:da:5a:
da:0a:b6:05:85:cf:1e:53:4e:4b:a8:65:6d:3f:1d:63:02:f5:
a7:06:97:24:29:1c:b3:86:89:62:2f:2c:0c:0b:03:a2:3d:f3:
ac:74:99:12:b7:8c:01:43:74:6f:64:bf:e3:1f:67:7a:4c:0e:
0f:11:01:6d:8f:9f:1e:7d:a9:ec:1e:3c:49:09:47:80:16:ff:
68:52:81:68:fd:b0:0c:51:7c:ff:ab:80:97:ca:0a:01:da:fb:
f9:00:05:4b:ff:f0:a9:5e:76:c5:8b:e7:a9:16:f7:7d:e9:fa:
12:df:da:f8:1c:e5:72:62:71:6a:8d:bb:51:a8:1d:d8:66:10:
80:3f:05:55:f3:e2:1b:a2:00:c1:a2:d5:24:1e:24:f8:29:12:
6b:55:be:79:ba:6c:e2:3a:3f:a0:2a:c0:b8:90:d0:bf:98:16:
f2:34:4e:e7:b4:66:9d:b1:8a:e0:da:bc:31:9b:17:4f:e1:9b:
a6:e9:7f:69:ae:4c:ce:99:4d:7e:15:f7:81:66:bb:af:24:1f:
0c:f0:41:fa:cc:c7:fc:ab:2b:29:df:a8:a8:aa:ed:4d:b4:a7:
53:51:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:20 2025 by rpki-client