Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a363a3a2f34382d3438203d3e20313434363939.roa
File: 323430613a613830313a363a3a2f34382d3438203d3e20313434363939.roa (raw, json)
Hash identifier: Ry1lKEFSS2/L0Snk7S/WMdjtxHHcb/yCWJJkz9R1VS4=
Subject key identifier: 34:6D:C3:BC:22:16:72:3C:E8:13:59:16:59:5A:39:DE:38:2A:3D:A1
Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial: 7AEEAFD07270C8369260D55470DBEE61CE46FCAD
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a363a3a2f34382d3438203d3e20313434363939.roa
Signing time: Tue 03 Jun 2025 06:15:00 +0000
ROA not before: Tue 03 Jun 2025 06:10:00 +0000
ROA not after: Tue 02 Jun 2026 06:15:00 +0000
asID: 144699
IP address blocks: 240a:a801:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jun 2025 07:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ee:af:d0:72:70:c8:36:92:60:d5:54:70:db:ee:61:ce:46:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Validity
Not Before: Jun 3 06:10:00 2025 GMT
Not After : Jun 2 06:15:00 2026 GMT
Subject: CN=346DC3BC2216723CE8135916595A39DE382A3DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:52:f8:c6:06:6a:2e:63:cf:1c:1e:41:3c:
82:14:94:d4:5a:0e:22:40:1b:a5:25:a3:e1:24:b5:
76:5d:f2:f0:b3:ca:1c:bc:b4:66:40:5f:69:cd:39:
e3:92:31:43:db:f0:2b:b6:8d:53:ee:4c:b1:04:01:
e8:77:e9:f1:cb:f3:73:b4:6b:32:1e:47:0c:b6:79:
27:ab:68:77:13:58:ac:04:a1:6b:59:92:63:33:23:
27:51:a9:b8:f1:05:26:33:7f:b8:4b:00:66:f1:62:
39:a8:de:a8:d4:dd:8a:41:31:08:f0:b2:bd:59:2d:
05:19:e3:02:dc:54:df:15:c7:a2:b5:06:2d:c3:3b:
ba:bd:25:98:c5:f8:dc:e9:b2:27:f2:d9:b2:c2:f8:
ba:6b:c3:ce:60:74:40:0b:d9:69:d3:5e:ab:ae:47:
e3:97:e4:38:fc:a6:b4:4c:f5:29:29:0a:a7:3f:5e:
8a:f7:a2:ea:8f:90:b0:9f:03:75:82:2e:c2:49:f3:
93:b7:56:ed:6d:0b:d0:55:b2:81:f7:89:04:dc:2b:
b2:2e:1a:b3:95:5e:3c:a3:55:25:c6:46:c4:b6:57:
26:40:6b:c1:89:65:7a:33:4a:33:2c:d6:fe:b9:e9:
49:8e:ea:ca:73:fc:9c:c2:20:41:02:66:f3:a4:04:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:C3:BC:22:16:72:3C:E8:13:59:16:59:5A:39:DE:38:2A:3D:A1
X509v3 Authority Key Identifier:
keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/323430613a613830313a363a3a2f34382d3438203d3e20313434363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a801:6::/48
Signature Algorithm: sha256WithRSAEncryption
85:b4:3b:ec:7f:c0:7a:09:8d:00:51:50:22:8e:e3:93:71:e2:
d8:ce:54:9d:80:ba:31:d3:93:a0:01:54:22:6e:15:27:1c:d0:
4a:cf:29:eb:eb:2e:0d:e1:0d:f3:8f:28:67:8a:f2:9b:30:d3:
38:b2:f9:b1:d3:3a:c1:72:6a:e3:81:a9:4f:d0:2b:0a:3d:73:
75:8e:45:dc:28:16:14:87:39:8a:6a:af:3f:22:8f:d9:df:9f:
86:72:f9:e8:45:44:06:91:7e:10:5b:bb:01:fb:94:19:d7:d8:
82:44:28:44:3d:27:2c:95:dd:47:06:7e:cc:bf:6f:78:af:ae:
f1:9f:85:59:35:aa:b4:de:b1:44:09:60:ad:24:f6:06:97:b6:
90:9f:b8:75:12:2f:93:2e:e1:1a:18:d9:23:98:f5:b1:72:35:
28:25:06:db:ab:37:f0:7a:bc:54:c6:32:ef:f4:03:72:3d:14:
66:94:a3:64:19:7e:6b:24:6e:47:c0:1c:7b:6b:0b:24:11:58:
e2:38:be:78:b2:c9:ac:72:e5:49:37:96:e7:7e:74:43:48:cd:
26:0f:54:07:f6:6c:58:05:e7:3d:6b:3d:32:9f:bf:a1:42:b0:
f3:ac:92:b3:8f:02:08:c4:36:92:3d:39:67:e3:86:43:70:f7:
99:68:ca:a8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUeu6v0HJwyDaSYNVUcNvuYc5G/K0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw
REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDYwMzA2MTAwMFoX
DTI2MDYwMjA2MTUwMFowMzExMC8GA1UEAxMoMzQ2REMzQkMyMjE2NzIzQ0U4MTM1
OTE2NTk1QTM5REUzODJBM0RBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQOUvjGBmouY88cHkE8ghSU1FoOIkAbpSWj4SS1dl3y8LPKHLy0ZkBfac05
45IxQ9vwK7aNU+5MsQQB6Hfp8cvzc7RrMh5HDLZ5J6todxNYrASha1mSYzMjJ1Gp
uPEFJjN/uEsAZvFiOajeqNTdikExCPCyvVktBRnjAtxU3xXHorUGLcM7ur0lmMX4
3OmyJ/LZssL4umvDzmB0QAvZadNeq65H45fkOPymtEz1KSkKpz9eivei6o+QsJ8D
dYIuwknzk7dW7W0L0FWygfeJBNwrsi4as5VePKNVJcZGxLZXJkBrwYllejNKMyzW
/rnpSY7qynP8nMIgQQJm86QEk+ECAwEAAaOCAgAwggH8MB0GA1UdDgQWBBQ0bcO8
IhZyPOgTWRZZWjneOCo9oTAfBgNVHSMEGDAWgBTRJIYHsN3Qohbo1/rF4sLndwoR
OTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp
LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEyMTZF
OEQ3RkFDNUUyQzJFNzc3MEExMTM5LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8wU1NHQjdEZDBLSVc2TmY2eGVMQzUz
Y0tFVGsuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8v
cnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzEvMzIzNDMwNjEzYTYxMzgz
MDMxM2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNDM2MzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQKqAEABjANBgkqhkiG9w0BAQsFAAOCAQEAhbQ77H/AegmNAFFQIo7j
k3Hi2M5UnYC6MdOToAFUIm4VJxzQSs8p6+suDeEN848oZ4rymzDTOLL5sdM6wXJq
44GpT9ArCj1zdY5F3CgWFIc5imqvPyKP2d+fhnL56EVEBpF+EFu7AfuUGdfYgkQo
RD0nLJXdRwZ+zL9veK+u8Z+FWTWqtN6xRAlgrST2Bpe2kJ+4dRIvky7hGhjZI5j1
sXI1KCUG26s38Hq8VMYy7/QDcj0UZpSjZBl+ayRuR8Ace2sLJBFY4ji+eLLJrHLl
STeW5350Q0jNJg9UB/ZsWAXnPWs9Mp+/oUKw86ySs48CCMQ2kj05Z+OGQ3D3mWjK
qA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:44:04 2025 by rpki-client