Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e3132382f32352d3235203d3e2034353338.roa
File: 3130332e3136352e3131312e3132382f32352d3235203d3e2034353338.roa (raw, json)
Hash identifier: uZvGTF4wcK7Dviu6qH7BuB6x6Xs8rDGcW0Z+NRq92CY=
Subject key identifier: 5A:50:EB:27:C2:55:64:05:29:89:7C:FB:DA:9B:B5:99:B3:28:BD:98
Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial: 0E4C8BA4D4FE7F3092366D6F9B386520D0C234F5
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e3132382f32352d3235203d3e2034353338.roa
Signing time: Tue 03 Jun 2025 03:27:17 +0000
ROA not before: Tue 03 Jun 2025 03:22:17 +0000
ROA not after: Tue 02 Jun 2026 03:27:17 +0000
asID: 4538
IP address blocks: 103.165.111.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 03 Jun 2025 06:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:8b:a4:d4:fe:7f:30:92:36:6d:6f:9b:38:65:20:d0:c2:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Validity
Not Before: Jun 3 03:22:17 2025 GMT
Not After : Jun 2 03:27:17 2026 GMT
Subject: CN=5A50EB27C255640529897CFBDA9BB599B328BD98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:5b:2f:a3:c8:0c:18:3a:42:86:65:c9:ca:
77:20:31:b1:3f:28:ca:ba:8c:47:48:40:18:60:a4:
68:0d:7e:67:1d:43:9e:64:d4:5a:2b:aa:4d:b4:da:
68:10:4a:5e:a1:93:29:8a:aa:b7:40:e9:14:0f:0f:
a5:10:a2:84:50:64:83:63:9c:d2:7a:cb:07:8d:ad:
79:c4:69:35:a1:b2:76:ad:4f:1a:1e:1d:6d:ae:fd:
c2:f3:57:c2:ae:b1:bc:dc:c1:f9:56:74:0f:3e:1b:
b9:42:26:a6:99:b2:74:60:04:d1:a3:47:47:ad:25:
09:60:72:e8:44:97:20:9f:f3:85:aa:95:78:5c:db:
39:e8:86:09:84:6d:6c:26:db:4d:86:c0:3c:71:85:
ac:e0:3d:7f:ea:4d:02:d1:79:28:6d:56:c6:b8:3c:
5c:3f:28:c6:a0:e7:aa:d3:a7:04:b5:74:22:1c:3a:
a2:a5:b5:9c:62:8d:3a:7a:ed:c5:ca:59:98:59:30:
fe:3d:d4:e6:56:b2:cf:59:6f:77:a6:3c:77:d5:2f:
18:97:12:3b:5b:3e:fc:0f:2a:1a:c0:da:ea:18:45:
3c:db:ec:61:87:01:78:66:ff:13:e5:a5:bc:a9:4f:
40:4d:33:11:5c:cd:43:f7:f9:96:d4:11:77:87:ac:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:EB:27:C2:55:64:05:29:89:7C:FB:DA:9B:B5:99:B3:28:BD:98
X509v3 Authority Key Identifier:
keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e3132382f32352d3235203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.111.128/25
Signature Algorithm: sha256WithRSAEncryption
52:4a:f8:a1:4c:c5:02:e8:a1:92:2b:20:92:e7:ba:ec:55:39:
9f:bb:e0:9c:4a:82:d3:44:e3:f6:84:a3:a9:d1:2a:32:fd:8a:
9d:ed:28:7c:93:e0:d5:c4:97:20:7a:ea:c5:aa:dc:a6:1e:15:
1c:a8:2a:63:1e:64:bb:36:aa:5f:2e:e0:02:9c:fb:85:3b:94:
e1:52:09:ff:d7:ca:64:91:0c:df:a3:f3:db:be:44:80:bd:d0:
a7:cd:35:98:c5:d0:f9:d3:34:db:ca:4b:12:df:07:9f:a4:cb:
05:13:a5:39:47:fb:16:b2:92:2f:43:6e:a8:19:95:55:04:dd:
b9:e7:d2:1b:f4:75:c1:b0:41:4f:50:8e:91:62:e8:a0:f5:67:
aa:c2:5d:d0:b4:ac:d1:c6:65:b3:ea:d4:96:df:04:63:d4:59:
e2:8f:e2:a4:81:ab:19:1b:46:a8:8f:dc:76:ef:7e:8c:60:4e:
b0:16:f8:35:e2:44:36:1d:44:08:e9:c1:a5:2a:a0:ea:63:4f:
d9:53:c7:1e:0b:cf:45:c4:fa:75:c0:08:68:3a:86:89:2d:61:
ef:11:3a:2a:05:14:ec:7b:02:e0:8a:38:37:c7:03:d7:8c:6b:
a3:7a:d3:ce:81:3b:7a:ca:77:00:b8:e3:b8:5e:96:0a:56:a5:
7d:da:2e:db
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDkyLpNT+fzCSNm1vmzhlINDCNPUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw
REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDYwMzAzMjIxN1oX
DTI2MDYwMjAzMjcxN1owMzExMC8GA1UEAxMoNUE1MEVCMjdDMjU1NjQwNTI5ODk3
Q0ZCREE5QkI1OTlCMzI4QkQ5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALMsWy+jyAwYOkKGZcnKdyAxsT8oyrqMR0hAGGCkaA1+Zx1DnmTUWiuqTbTa
aBBKXqGTKYqqt0DpFA8PpRCihFBkg2Oc0nrLB42tecRpNaGydq1PGh4dba79wvNX
wq6xvNzB+VZ0Dz4buUImppmydGAE0aNHR60lCWBy6ESXIJ/zhaqVeFzbOeiGCYRt
bCbbTYbAPHGFrOA9f+pNAtF5KG1Wxrg8XD8oxqDnqtOnBLV0Ihw6oqW1nGKNOnrt
xcpZmFkw/j3U5layz1lvd6Y8d9UvGJcSO1s+/A8qGsDa6hhFPNvsYYcBeGb/E+Wl
vKlPQE0zEVzNQ/f5ltQRd4es630CAwEAAaOCAf4wggH6MB0GA1UdDgQWBBRaUOsn
wlVkBSmJfPvam7WZsyi9mDAfBgNVHSMEGDAWgBTRJIYHsN3Qohbo1/rF4sLndwoR
OTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp
LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEyMTZF
OEQ3RkFDNUUyQzJFNzc3MEExMTM5LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8wU1NHQjdEZDBLSVc2TmY2eGVMQzUz
Y0tFVGsuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8v
cnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzEvMzEzMDMzMmUzMTM2MzUy
ZTMxMzEzMTJlMzEzMjM4MmYzMjM1MmQzMjM1MjAzZDNlMjAzNDM1MzMzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAEwBwMFB2elb4AwDQYJKoZIhvcNAQELBQADggEBAFJK+KFMxQLooZIrIJLnuuxV
OZ+74JxKgtNE4/aEo6nRKjL9ip3tKHyT4NXElyB66sWq3KYeFRyoKmMeZLs2ql8u
4AKc+4U7lOFSCf/XymSRDN+j89u+RIC90KfNNZjF0PnTNNvKSxLfB5+kywUTpTlH
+xayki9DbqgZlVUE3bnn0hv0dcGwQU9QjpFi6KD1Z6rCXdC0rNHGZbPq1JbfBGPU
WeKP4qSBqxkbRqiP3HbvfoxgTrAW+DXiRDYdRAjpwaUqoOpjT9lTxx4Lz0XE+nXA
CGg6hoktYe8ROioFFOx7AuCKODfHA9eMa6N6086BO3rKdwC447helgpWpX3aLts=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:59:15 2025 by rpki-client