Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa
File: JXmBakuXV8WTsRqM-BlDFdSJpxU.roa (raw, json)
Hash identifier: jryzYiHEliDXWyF2GocPVFbbHuAAVGuM8F5o6DvyAmY=
Subject key identifier: 25:79:81:6A:4B:97:57:C5:93:B1:1A:8C:F8:19:43:15:D4:89:A7:15
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 142B
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa
Signing time: Sat 27 Jul 2024 07:46:16 +0000
ROA not before: Sat 27 Jul 2024 07:46:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 45090
IP address blocks: 124.220.0.0/14 maxlen: 24
175.178.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5163 (0x142b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Jul 27 07:46:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2579816A4B9757C593B11A8CF8194315D489A715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:14:b4:ec:61:90:8f:79:8f:3a:5b:65:9b:
89:42:8c:5d:9b:31:9e:6d:96:7a:19:58:e2:b4:6e:
58:96:6b:4c:a5:2d:2d:7b:be:f4:67:f4:8d:50:4f:
6e:2a:3b:41:a3:39:cc:9c:eb:11:d0:d6:38:74:9d:
0c:26:27:3a:04:0b:fe:29:8e:7e:9a:81:b3:36:03:
94:eb:a9:21:1c:a1:22:cf:37:48:c1:54:bb:fa:25:
ed:60:99:54:7d:64:88:11:9a:ab:98:3c:ce:a5:3d:
11:ad:a5:1e:55:7d:d6:27:14:3d:d5:64:16:e4:b0:
ae:17:cc:20:69:ff:11:7a:d6:09:28:f0:c9:f6:f2:
11:ae:79:39:d7:43:1f:6e:a8:d2:3d:c2:e0:33:dc:
d9:59:c6:bf:5c:0d:93:2e:0a:db:3d:a2:c0:c8:08:
fe:1e:21:c9:c7:f2:ed:f8:16:42:b4:7a:10:e8:e8:
60:72:c8:69:fa:b8:de:a9:3a:f3:3f:5f:bc:d7:20:
87:37:93:25:a8:96:22:08:70:5e:7c:db:21:6e:9a:
b7:2a:9a:66:27:76:74:f7:ae:d2:c5:11:b4:d8:c9:
0d:ef:88:39:98:4a:f4:1f:f1:f0:68:d6:53:eb:e8:
8d:1b:44:96:37:c2:74:99:61:8b:be:7b:37:7b:f1:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:81:6A:4B:97:57:C5:93:B1:1A:8C:F8:19:43:15:D4:89:A7:15
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/JXmBakuXV8WTsRqM-BlDFdSJpxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.220.0.0/14
175.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:e5:0d:3f:e9:cb:ff:85:50:b5:cb:20:0e:59:f5:59:77:f5:
26:c8:52:e2:a2:58:9b:7b:dc:10:cb:06:33:54:7d:98:9c:84:
aa:f4:a0:b2:7d:51:2d:27:28:0e:fd:a0:b3:5f:94:2f:8d:e9:
79:73:8a:f8:e4:ee:41:46:93:7f:c6:29:4b:77:dc:40:13:75:
32:a8:1a:5b:5e:77:d6:07:84:d7:b8:d2:cc:e5:20:ae:e5:40:
4f:85:20:41:03:37:3b:5c:22:95:04:1f:74:58:08:29:70:a5:
bd:fd:88:bc:2c:80:f6:f6:ca:35:c3:9d:95:b9:3c:df:31:9b:
9f:f2:4d:54:d0:9d:93:38:5a:3b:b3:a9:6d:62:3c:7b:cf:ad:
76:01:85:5f:54:b5:80:c7:f9:7d:22:e8:f5:db:fb:43:4a:57:
12:31:c7:e3:15:b4:f3:f4:d7:ea:3f:78:0d:de:a7:3a:0a:3d:
81:ca:6d:3d:5e:e6:72:05:8f:be:cc:4e:e1:40:15:03:53:72:
92:09:07:2e:cb:cd:14:1c:9c:bf:0a:c9:cb:39:d6:18:97:54:
98:e4:e6:c8:35:87:c0:6f:4a:ce:49:9f:f9:95:8f:95:a9:a6:
fc:60:0d:2d:a8:37:6c:bf:1f:9f:44:de:ed:66:af:d0:85:56:
e7:e5:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:55 2025 by rpki-client