Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e20313331333134.roa
File: 3230322e35372e3230342e302f32332d3234203d3e20313331333134.roa (raw, json)
Hash identifier: mjn67cyNB69gfLannTSLRXOZQ2V3cHQYfyKW3rzaH4I=
Subject key identifier: 2E:98:2C:29:E4:84:F2:9E:2C:8D:60:40:32:A7:21:48:12:D4:11:05
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 29048345965EE6C2563F0593771A46C8EE1D2E21
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e20313331333134.roa
Signing time: Mon 11 May 2026 11:10:18 +0000
ROA not before: Mon 11 May 2026 11:05:18 +0000
ROA not after: Mon 10 May 2027 11:10:18 +0000
asID: 131314
IP address blocks: 202.57.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 May 2026 09:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:04:83:45:96:5e:e6:c2:56:3f:05:93:77:1a:46:c8:ee:1d:2e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: May 11 11:05:18 2026 GMT
Not After : May 10 11:10:18 2027 GMT
Subject: CN=2E982C29E484F29E2C8D604032A7214812D41105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:62:97:85:b0:7e:b8:e3:9d:2f:2f:ff:c3:
35:10:46:fe:6b:37:38:70:05:38:ca:02:ef:2a:c3:
37:ae:06:71:25:e8:4b:df:d1:9b:2b:f4:05:85:d5:
35:d4:7e:a9:1b:cd:42:20:08:f3:d3:0a:28:a6:57:
48:34:9b:33:b2:6b:99:3a:ee:50:6e:32:e2:04:e8:
f5:4c:57:10:f2:8b:7b:a1:b0:2a:2b:43:18:89:3b:
1a:d4:fa:df:b0:66:45:dd:67:96:a9:4a:ac:a8:90:
6b:54:22:f4:4c:74:33:a0:18:f8:59:54:94:62:ae:
1e:a1:52:75:12:04:61:4f:b9:2c:8a:80:b1:a6:13:
a0:51:a1:09:29:16:8b:11:d4:13:8d:0a:43:b5:e8:
1d:8a:cb:a9:45:41:6a:26:5c:4e:18:31:48:c5:c5:
5d:56:4f:41:2c:61:a5:19:90:c1:8f:7c:1a:08:0e:
ad:ee:32:f0:20:61:6f:cf:00:75:5e:fa:81:4a:eb:
3a:7b:cb:29:c4:9f:b9:fa:6c:ed:a7:11:18:39:3b:
39:60:41:ef:cc:3d:eb:a9:5f:73:ff:44:2f:67:16:
a3:54:9a:57:43:c0:ff:38:94:ba:56:e7:63:1f:18:
ec:c4:00:7b:7f:0b:7e:2c:22:63:09:49:0a:23:91:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:2C:29:E4:84:F2:9E:2C:8D:60:40:32:A7:21:48:12:D4:11:05
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3230322e35372e3230342e302f32332d3234203d3e20313331333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.204.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:d1:54:81:e2:f3:07:50:a7:96:54:1b:67:88:27:e5:5c:26:
e5:63:8e:97:bb:75:30:cd:32:7b:ee:97:0a:30:93:15:1e:78:
26:f3:83:e3:9a:df:cf:be:32:a7:b5:a7:33:5b:90:33:69:bd:
61:38:ff:da:11:b6:e5:f3:83:a6:33:02:ef:e0:97:ab:90:9d:
ca:b8:fa:19:30:15:ba:c6:94:47:d1:ad:2c:6a:84:23:1c:89:
f3:ab:b9:82:ca:a7:ea:ef:c3:00:07:ef:1c:d2:13:74:93:ae:
0c:8d:70:41:0a:ef:54:b8:ab:5c:59:d8:62:7f:74:55:cb:9d:
6f:65:e5:ef:50:9c:0d:da:77:c2:10:ff:a0:6b:66:bc:1b:da:
1f:40:16:64:0b:23:50:36:b1:39:2e:28:f3:7e:37:fc:6c:2c:
1e:47:29:b5:fa:e2:9f:b7:e2:8e:ec:c7:d3:13:8a:6e:9d:a6:
f2:ca:e7:81:5a:ef:70:c2:a2:6d:a3:d6:65:48:cd:6e:89:da:
46:11:09:a4:15:60:42:41:83:20:26:eb:9b:99:57:4a:61:65:
0a:ff:9f:21:d9:70:a9:56:80:78:6d:95:10:7e:53:64:a0:35:
4f:d8:16:da:7d:2d:35:25:da:db:54:49:81:18:09:10:a2:37:
a0:18:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:32 2026 by rpki-client