Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/6Jl1yJJ87cN_8rBfqskItXPjA4I.roa
File: 6Jl1yJJ87cN_8rBfqskItXPjA4I.roa (raw, json)
Hash identifier: Q8XIhncGIU3ZID00tKjUYJN7BY3Rg9AENyZ5bAtpV0A=
Subject key identifier: E8:99:75:C8:92:7C:ED:C3:7F:F2:B0:5F:AA:C9:08:B5:73:E3:03:82
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 091B
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6Jl1yJJ87cN_8rBfqskItXPjA4I.roa
Signing time: Tue 26 Mar 2024 03:58:40 +0000
ROA not before: Tue 26 Mar 2024 03:58:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 62387
IP address blocks: 123.98.24.0/22 maxlen: 24
123.98.36.0/22 maxlen: 24
123.98.52.0/22 maxlen: 24
123.98.92.0/22 maxlen: 24
211.149.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 26 03:58:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E89975C8927CEDC37FF2B05FAAC908B573E30382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:00:2b:c4:e5:ff:e0:ba:ca:94:7e:dc:31:
c3:4d:9c:f7:0c:5f:c4:03:96:cd:5c:47:83:cd:30:
3f:0d:7d:c5:c2:e8:76:f3:ce:f5:69:63:27:d3:ae:
ab:74:b4:03:aa:45:ad:ea:4e:ec:1a:e7:61:06:93:
04:3a:1e:94:fc:87:e7:dc:e4:2d:ca:c7:5a:3a:a8:
d2:30:4e:7e:f6:04:1c:c8:a7:b6:a6:93:c8:b6:7f:
3c:a6:df:3a:2e:e3:5b:ae:e7:99:20:20:e9:66:0a:
09:84:c6:dd:15:a0:ad:32:e5:11:b0:36:69:0c:38:
68:5c:05:42:15:63:a2:26:b2:ef:0d:bc:28:f7:59:
05:25:a9:f6:f9:b0:14:5e:b5:b7:8c:d7:af:fe:d2:
91:38:d9:0d:ab:ff:29:90:b3:3d:13:e5:bb:0c:4b:
0d:ae:47:73:67:2f:c2:56:4b:6f:e4:0d:7f:3d:34:
ae:77:9e:47:fc:0c:77:a1:da:8e:16:50:69:e6:4a:
7e:55:03:c0:d4:b0:49:9a:84:4d:fa:c3:4d:d0:d3:
a8:7b:af:6e:e0:4f:f9:75:19:2e:53:00:f1:cd:44:
0a:4a:02:db:82:fd:f4:a0:f8:cf:97:86:99:28:9d:
cd:d5:01:10:0c:19:e0:67:63:21:4e:9a:9d:3d:96:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:75:C8:92:7C:ED:C3:7F:F2:B0:5F:AA:C9:08:B5:73:E3:03:82
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/6Jl1yJJ87cN_8rBfqskItXPjA4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.24.0/22
123.98.36.0/22
123.98.52.0/22
123.98.92.0/22
211.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:fd:db:62:0d:10:7f:c1:af:9a:5e:8d:4c:6c:c2:a2:97:6c:
92:e4:68:f5:72:95:0a:9d:5f:ec:e7:d4:4f:6a:ac:cb:6a:3c:
a6:ad:2d:c1:87:2b:72:fe:e7:2a:39:af:89:2e:4c:5f:0b:8a:
06:b7:09:85:6e:e8:56:d1:3a:41:b3:88:f0:5d:4c:92:3d:7e:
f3:1c:f5:78:f1:c1:0e:9e:e0:e5:9c:9d:f9:ea:1c:f4:74:da:
2c:99:b8:78:d1:10:98:6a:d2:f0:46:db:83:83:50:8d:99:49:
43:85:b6:3d:06:9b:1a:0d:0d:7a:e2:3b:80:36:01:ac:bb:92:
bd:77:b1:df:d7:a2:b4:08:02:9b:55:b7:8b:c8:6b:19:f8:e9:
26:da:fb:42:02:70:db:bf:a3:33:29:bf:d5:0f:e7:99:2c:92:
a2:63:33:32:db:b1:bf:ed:8a:18:30:96:eb:97:29:d9:99:83:
a5:4e:74:90:ed:82:e2:57:61:c3:c4:71:f1:74:7b:8e:06:24:
4b:0c:b4:ab:62:a6:7c:be:a2:b5:8e:ae:06:f8:96:2b:af:df:
a7:cb:fe:de:83:35:b5:ed:b1:84:bf:de:61:f4:83:89:2b:a7:
30:3c:e8:02:c3:20:de:a3:3b:d2:af:af:ac:9e:e5:10:60:ab:
34:35:6d:77
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICCRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDAzMjYw
MzU4NDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4OTk3NUM4OTI3Q0VE
QzM3RkYyQjA1RkFBQzkwOEI1NzNFMzAzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/wQArxOX/4LrKlH7cMcNNnPcMX8QDls1cR4PNMD8NfcXC6Hbz
zvVpYyfTrqt0tAOqRa3qTuwa52EGkwQ6HpT8h+fc5C3Kx1o6qNIwTn72BBzIp7am
k8i2fzym3zou41uu55kgIOlmCgmExt0VoK0y5RGwNmkMOGhcBUIVY6Imsu8NvCj3
WQUlqfb5sBRetbeM16/+0pE42Q2r/ymQsz0T5bsMSw2uR3NnL8JWS2/kDX89NK53
nkf8DHeh2o4WUGnmSn5VA8DUsEmahE36w03Q06h7r27gT/l1GS5TAPHNRApKAtuC
/fSg+M+Xhpkonc3VARAMGeBnYyFOmp09lvPTAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU6Jl1yJJ87cN/8rBfqskItXPjA4IwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzZKbDF5Sko4N2NOXzhy
QmZxc2tJdFhQakE0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4D
BAJ7YhgDBAJ7YiQDBAJ7YjQDBAJ7YlwDBALTlUwwDQYJKoZIhvcNAQELBQADggEB
AB/922INEH/Br5pejUxswqKXbJLkaPVylQqdX+zn1E9qrMtqPKatLcGHK3L+5yo5
r4kuTF8Liga3CYVu6FbROkGziPBdTJI9fvMc9XjxwQ6e4OWcnfnqHPR02iyZuHjR
EJhq0vBG24ODUI2ZSUOFtj0GmxoNDXriO4A2Aay7kr13sd/XorQIAptVt4vIaxn4
6Sba+0ICcNu/ozMpv9UP55kskqJjMzLbsb/tihgwluuXKdmZg6VOdJDtguJXYcPE
cfF0e44GJEsMtKtipny+orWOrgb4liuv36fL/t6DNbXtsYS/3mH0g4krpzA86ALD
IN6jO9Kvr6ye5RBgqzQ1bXc=
-----END CERTIFICATE-----
Generated at Sun May 18 03:06:23 2025 by rpki-client