Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383038.roa
File: 3131392e3136312e3132302e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier: 8AOsRiIk458xu1tUUMEyCCn9l6Xymu1dt8TCElx97rk=
Subject key identifier: 2A:53:66:14:94:3B:06:CE:67:3F:59:CE:A3:CC:7D:D3:CD:8A:C4:92
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 256899DFFC22F7632C3326F8A431C8D8EE08FEEC
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383038.roa
Signing time: Mon 11 May 2026 11:02:51 +0000
ROA not before: Mon 11 May 2026 10:57:51 +0000
ROA not after: Mon 10 May 2027 11:02:51 +0000
asID: 4808
IP address blocks: 119.161.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:68:99:df:fc:22:f7:63:2c:33:26:f8:a4:31:c8:d8:ee:08:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 10:57:51 2026 GMT
Not After : May 10 11:02:51 2027 GMT
Subject: CN=2A536614943B06CE673F59CEA3CC7DD3CD8AC492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:c1:a9:26:7d:06:50:ef:7a:4d:b9:f8:19:
16:28:d1:9e:70:76:12:ba:07:41:10:84:59:51:d9:
ed:0a:b9:34:82:01:d6:10:9d:65:ba:af:30:34:b5:
ce:c9:c4:49:90:3b:b3:ee:94:0c:02:0e:01:9d:35:
0e:1f:dd:44:d6:b3:45:0d:74:82:a6:b5:38:53:aa:
c6:ff:d9:33:10:07:1f:6d:28:ee:94:7b:22:6f:3f:
02:1e:9e:bb:79:97:89:fd:d6:96:be:86:4d:ba:bc:
91:88:31:00:f9:da:6b:11:ec:d4:95:f8:15:a8:7d:
73:00:ec:03:b4:cc:2f:59:29:dc:a9:26:76:bd:f8:
fa:ba:f2:79:b1:20:e0:91:dd:28:d9:22:69:c0:62:
5d:43:95:0b:a0:46:42:b3:97:e8:2a:96:b0:14:44:
a6:7f:d1:78:74:df:32:bc:99:36:6e:24:41:ba:9f:
42:93:d4:e7:87:2d:2d:a3:8a:57:bd:e6:f2:14:20:
3f:cb:f9:e8:4d:a3:4e:b9:9f:ad:4e:91:36:cb:00:
6e:fc:46:34:c7:a5:41:fe:f8:8d:4e:59:a3:47:84:
74:af:70:e5:e7:40:2f:c6:54:74:d7:4e:40:5e:52:
5f:ea:24:a2:07:02:e5:f8:68:6c:a2:b2:93:f1:b6:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:66:14:94:3B:06:CE:67:3F:59:CE:A3:CC:7D:D3:CD:8A:C4:92
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3131392e3136312e3132302e302f32322d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.161.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:91:49:c0:0e:cc:a4:c1:a0:c7:e9:cf:ba:76:39:28:c5:a5:
c6:5a:bb:db:78:8d:09:5c:fd:d8:f7:b6:db:83:26:da:f2:6f:
6c:0b:87:6f:1d:0b:8a:1c:5a:db:96:07:2a:b2:21:c0:ee:a0:
62:92:5d:d4:33:ac:32:82:31:d9:e9:d0:57:bb:b9:1e:60:ee:
28:e2:3a:a2:91:8e:a0:e0:d6:e5:63:84:6c:ca:73:1c:bf:f1:
6e:86:20:38:d6:a7:87:0b:75:98:df:f8:4a:90:0c:cf:bf:7d:
48:f6:40:7a:5b:cf:05:77:36:12:92:32:23:9f:1a:6b:cf:4c:
3a:d4:d3:90:8c:65:05:b4:0b:79:b3:a1:05:35:9f:3f:7b:34:
14:18:c1:4c:38:14:52:60:24:02:67:18:e5:ef:a4:a9:e4:c4:
fd:43:eb:2a:0a:fe:90:85:bb:37:53:1c:1b:29:74:d8:31:20:
43:3a:55:44:cc:89:93:5d:4f:33:c2:ee:28:67:4b:01:bc:46:
b4:e2:70:8d:15:9e:10:8b:6d:11:54:b3:0b:c7:4f:69:70:1e:
f3:50:27:60:17:0e:b0:f8:f5:e9:b5:f7:24:96:d1:a2:f6:26:
36:d7:36:ba:0e:01:6a:9c:97:5e:4b:a1:7c:01:e1:6a:14:01:
37:3f:78:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:23 2026 by rpki-client