Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a343a3a2f34382d3438203d3e20313434363939.roa
File: 323430613a613830313a343a3a2f34382d3438203d3e20313434363939.roa (raw, json)
Hash identifier: St0lZfo02AXMozv23OG9IV3XIMtIeKW4LmzrOXXY/j8=
Subject key identifier: DA:D8:F0:97:BB:F5:44:EF:26:1F:BB:41:B5:A2:D6:23:F5:5B:9A:20
Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial: 31D739023282D9A030BBC761280B2030BCEE8A6F
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a343a3a2f34382d3438203d3e20313434363939.roa
Signing time: Tue 03 Jun 2025 06:15:00 +0000
ROA not before: Tue 03 Jun 2025 06:10:00 +0000
ROA not after: Tue 02 Jun 2026 06:15:00 +0000
asID: 144699
IP address blocks: 240a:a801:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d7:39:02:32:82:d9:a0:30:bb:c7:61:28:0b:20:30:bc:ee:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Validity
Not Before: Jun 3 06:10:00 2025 GMT
Not After : Jun 2 06:15:00 2026 GMT
Subject: CN=DAD8F097BBF544EF261FBB41B5A2D623F55B9A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:43:d4:80:7f:a7:1c:46:bc:ad:7f:aa:9c:
8a:81:06:2f:91:2d:38:cc:6a:71:82:c1:fe:5c:cb:
f8:c1:91:3e:51:f2:de:c9:20:b3:8e:6d:da:d4:f7:
78:ed:ea:0f:41:06:76:03:91:60:38:d3:15:e9:cc:
cd:02:f1:9c:b0:e6:7a:4f:58:72:62:d9:f6:3d:3a:
81:f8:0c:f7:e8:69:ba:ca:85:55:b9:85:bb:bb:f6:
bd:54:ea:ca:b1:fc:fa:09:69:3d:5a:e2:d0:c5:1f:
9c:74:47:ed:bf:e3:c3:2e:b3:d4:53:99:23:c3:18:
a2:2c:3e:05:9d:88:36:80:67:cb:52:cd:e4:6c:d5:
85:b4:3f:ae:6b:c1:e7:33:d1:85:f2:b6:b1:5a:8e:
ce:80:67:ec:19:8b:1f:00:fc:04:4c:74:bf:f0:22:
36:ce:58:98:51:c5:23:11:39:cf:01:ea:fb:d6:0d:
f9:79:0c:18:f4:8d:46:9b:7b:9f:c1:c6:ea:98:f2:
d4:be:c1:cb:7f:06:3a:1b:74:c1:03:e3:03:53:f5:
fa:63:9a:91:67:af:d3:ae:dd:2a:dd:63:49:90:30:
8a:bd:88:23:3d:c1:7f:0b:3b:8a:35:aa:28:36:dc:
3c:44:34:c0:7a:2c:66:0b:2c:d3:59:5e:ed:7d:15:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:F0:97:BB:F5:44:EF:26:1F:BB:41:B5:A2:D6:23:F5:5B:9A:20
X509v3 Authority Key Identifier:
keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a343a3a2f34382d3438203d3e20313434363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a801:4::/48
Signature Algorithm: sha256WithRSAEncryption
6b:40:24:83:b4:22:d4:4b:c5:cc:bf:41:e9:1b:b6:37:4e:c6:
20:0f:d6:51:61:c5:d9:d9:8d:c8:3b:33:0b:4d:5b:b4:8a:44:
6e:8a:1a:0c:78:89:51:0c:f3:ca:cc:61:2b:bf:0e:dd:03:06:
97:a9:4e:85:bb:4b:ac:fe:b7:d9:cb:33:04:67:fc:f1:c1:54:
ed:8b:44:40:3d:58:36:03:ef:b1:f6:58:ee:7a:f2:59:29:a4:
39:7d:49:5b:16:fd:6b:2c:0d:7b:32:62:64:25:f7:8a:88:eb:
08:ad:6e:25:a0:6c:0f:ab:60:1d:8e:b5:c2:5d:94:3d:80:3c:
e1:66:ab:4c:7c:15:f9:b0:3a:7c:d7:b1:3f:cc:4c:84:d9:d8:
9a:5b:5d:59:df:f1:84:01:21:05:af:ab:38:e5:d6:e0:6a:b4:
d8:fe:36:fe:4d:e7:6c:e2:b6:b0:56:09:3f:20:03:72:2f:c0:
ea:cb:40:98:73:6a:5c:a7:1f:60:ad:24:79:92:34:24:37:38:
89:90:ea:88:27:76:ce:a8:50:f4:9a:f2:62:ec:e5:b2:3a:15:
78:a7:b7:c9:3f:d3:30:eb:59:a9:0e:06:6c:ac:89:da:6e:2f:
46:db:2c:e3:b6:b2:10:44:69:5c:b9:2b:51:59:c1:92:03:46:
eb:54:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:13:14 2025 by rpki-client