Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32352d3235203d3e2034353338.roa
File: 3130332e3136352e3131302e302f32352d3235203d3e2034353338.roa (raw, json)
Hash identifier: s9ckCsNumihNv2MsKpKD01GwOYU0agD/UmBkgWg7Zco=
Subject key identifier: 15:65:CB:44:08:6D:B4:B8:F0:D0:D5:ED:DB:40:30:89:82:79:5C:C0
Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial: 55AEF4F4AF3DC82CE4EC21377FA2DDF77FB9BB74
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32352d3235203d3e2034353338.roa
Signing time: Tue 03 Jun 2025 03:27:17 +0000
ROA not before: Tue 03 Jun 2025 03:22:17 +0000
ROA not after: Tue 02 Jun 2026 03:27:17 +0000
asID: 4538
IP address blocks: 103.165.110.0/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ae:f4:f4:af:3d:c8:2c:e4:ec:21:37:7f:a2:dd:f7:7f:b9:bb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Validity
Not Before: Jun 3 03:22:17 2025 GMT
Not After : Jun 2 03:27:17 2026 GMT
Subject: CN=1565CB44086DB4B8F0D0D5EDDB40308982795CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:b5:7b:97:83:0a:04:87:62:d0:59:c6:ec:
a2:a3:53:8e:f3:4d:d4:41:bd:5f:f0:e9:7a:78:dd:
89:47:c0:27:2a:aa:d4:69:09:98:61:f0:24:e0:97:
50:c3:9f:96:45:81:bf:c9:4b:01:1d:be:e1:a1:2d:
4e:ca:30:08:31:e1:2c:a1:88:56:12:95:96:36:9e:
6c:8a:14:79:c0:dc:1e:9a:c7:9e:9f:38:b2:3e:cb:
90:18:e4:bf:45:35:b3:cd:7b:68:02:b2:33:cd:44:
d3:bd:2b:9e:19:33:7a:b6:b4:ca:85:6a:fe:c6:c8:
b1:f9:5c:9c:94:c9:12:b0:22:e0:e9:c8:08:b6:5e:
a9:f3:f8:91:08:0f:e1:65:15:5a:e9:e0:ae:2e:05:
8e:af:d9:1c:80:44:b5:87:74:63:64:0c:07:2a:2c:
e4:d4:ab:a5:e7:56:17:f1:ae:6c:87:4c:91:cf:c5:
9b:5c:94:4c:69:c7:61:2a:65:4a:08:16:b2:8a:5f:
c1:c9:15:d8:de:c9:76:d8:0c:98:0b:ed:fc:d4:a7:
05:f4:89:76:0f:a5:4b:f5:23:13:bd:be:e7:1a:be:
08:74:69:6c:a7:e5:00:c9:19:a8:55:e3:7b:66:59:
65:17:fe:8b:ac:0e:d4:1b:6c:a3:20:13:48:8e:38:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:65:CB:44:08:6D:B4:B8:F0:D0:D5:ED:DB:40:30:89:82:79:5C:C0
X509v3 Authority Key Identifier:
keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32352d3235203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/25
Signature Algorithm: sha256WithRSAEncryption
a9:80:6c:19:aa:0b:d0:26:ee:33:6c:fc:30:04:91:cd:87:2b:
b8:36:24:b1:bf:f6:66:43:fd:fa:82:e5:98:3c:4b:c7:2c:4c:
84:c3:34:ee:a3:04:0e:17:73:f8:d9:38:21:3d:ca:5a:bb:ca:
e9:b5:09:e6:1c:72:0d:46:1e:91:d5:f0:b5:78:28:bb:82:46:
cd:00:5f:fc:a2:7c:a8:dd:4f:de:d8:78:65:5d:23:ad:25:79:
bc:56:e0:5e:d1:b7:ee:e1:b9:c4:a3:d5:ed:fa:19:e4:8b:82:
ed:d5:0d:9e:7b:3a:38:b6:0e:cc:b4:73:33:49:f9:4f:d6:a3:
d0:fd:3e:8c:c3:9b:55:f8:51:ef:7a:a7:3f:7a:a2:71:f4:31:
69:87:52:79:1a:ee:bf:52:e4:eb:35:d4:61:8a:0f:ee:f1:3e:
1c:11:24:46:8d:5f:e0:28:90:92:29:44:5c:be:34:49:93:d5:
fe:e2:5d:c1:fe:1b:84:aa:b3:8d:08:91:10:be:05:90:3c:f6:
f2:c4:16:57:e6:3a:37:d8:af:f4:72:b8:18:9e:71:fa:f9:aa:
b1:0e:12:ad:c4:28:27:f5:d3:cb:45:66:c0:1b:8c:8f:3c:7b:
8e:6d:0d:ec:b9:08:f2:04:72:5c:52:c2:5c:67:54:49:f2:bd:
07:35:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:02:09 2025 by rpki-client