Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0SIsg1ZJI5e9UFKksq0d30_t-B4.cer
File: 0SIsg1ZJI5e9UFKksq0d30_t-B4.cer (raw, json)
Hash identifier: o0PsJwL6CYngsLxmyr5Xowfaf95FThaLM3InqQ64DHc=
Subject key identifier: D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A8F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:26:08 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.248.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43248 (0xa8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:26:08 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=D1222C8356492397BD5052A4B2AD1DDF4FEDF81E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:01:11:60:8e:b6:0c:55:4d:6e:17:8d:17:
ee:62:6d:46:12:d0:12:ee:69:8f:72:80:ea:6b:ac:
1a:1b:76:d9:00:5e:dd:8c:94:5f:1b:4f:71:cf:c2:
30:80:35:bb:c7:be:71:8a:0e:e9:a5:ae:02:b1:b0:
df:70:c4:a1:e5:11:7b:73:c1:f2:f2:fd:be:e3:a5:
17:ff:a8:79:21:89:51:a6:77:75:8c:d9:5d:6c:67:
c8:42:d5:9c:15:bb:db:55:81:0a:42:a1:cd:75:94:
db:3b:98:2c:fb:18:72:9e:8b:0e:ae:90:92:d3:56:
71:c0:f7:5b:b1:e3:d4:cb:34:09:f9:bc:43:ad:ee:
f5:25:bd:2f:87:69:10:ec:aa:fe:bc:cc:d1:30:bc:
7c:e4:5b:37:6f:56:f5:7f:2c:95:45:88:7c:23:96:
12:ec:0b:c3:7f:bf:91:85:68:07:5a:40:a8:97:35:
0e:fa:0d:eb:bb:07:6f:3b:7c:c6:97:9c:08:dc:d8:
96:18:0c:15:25:b1:bd:d9:3a:ec:92:74:ab:d6:61:
96:0b:92:b8:81:28:97:9b:14:ef:26:df:0c:5e:5a:
39:7a:ef:bb:d0:af:fd:a0:41:a3:86:d9:10:ce:a6:
37:78:07:22:70:ce:5d:23:9d:7a:07:4c:e1:ab:ac:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:2C:83:56:49:23:97:BD:50:52:A4:B2:AD:1D:DF:4F:ED:F8:1E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2773/0SIsg1ZJI5e9UFKksq0d30_t-B4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:e7:1b:57:37:bc:e5:d7:80:b7:17:b2:81:0b:22:6a:b3:6a:
9d:db:09:fb:1f:36:90:1a:c6:95:62:47:f0:8f:86:22:5a:e6:
d7:2f:42:c6:f7:b7:41:98:52:16:92:7a:89:80:36:6d:b5:6d:
40:4f:78:bc:93:68:59:83:10:5b:77:11:6a:6b:84:24:94:c8:
49:3f:f6:01:d4:7b:37:28:72:58:31:74:1c:ba:06:66:55:59:
2b:be:76:bb:32:fe:9f:7c:45:66:09:6b:a9:52:99:6e:45:e7:
eb:87:06:aa:30:17:ec:76:7b:02:fb:b9:58:19:0d:3f:52:a4:
00:88:bb:74:4b:28:13:b9:81:8e:ec:1b:14:ca:d3:fe:bd:34:
1c:72:d4:f9:02:3b:fc:0d:dc:14:5b:76:c3:ea:91:30:c5:03:
56:b1:2d:00:2e:b6:ed:b3:1f:d6:0f:ec:01:ab:64:e3:ba:fb:
5a:a8:3f:e1:ab:3c:b0:e1:d6:0e:76:8f:28:47:10:d5:37:51:
1b:82:8d:f6:ea:c0:06:ff:fa:a2:75:e6:1d:21:06:8e:0e:ef:
1f:36:1f:3e:3c:b0:1a:0b:02:da:06:91:90:f5:4f:37:13:8f:
9f:ec:e0:3e:12:c7:4b:36:65:03:9d:39:ae:10:b7:e8:b9:53:
0e:f0:e9:4a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAKjwMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzEwMDkwMDI2MDhaFw0yNDEwMDgwMDE2MzNaMDMx
MTAvBgNVBAMTKEQxMjIyQzgzNTY0OTIzOTdCRDUwNTJBNEIyQUQxRERGNEZFREY4
MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFwERYI62DFVNbheN
F+5ibUYS0BLuaY9ygOprrBobdtkAXt2MlF8bT3HPwjCANbvHvnGKDumlrgKxsN9w
xKHlEXtzwfLy/b7jpRf/qHkhiVGmd3WM2V1sZ8hC1ZwVu9tVgQpCoc11lNs7mCz7
GHKeiw6ukJLTVnHA91ux49TLNAn5vEOt7vUlvS+HaRDsqv68zNEwvHzkWzdvVvV/
LJVFiHwjlhLsC8N/v5GFaAdaQKiXNQ76Deu7B287fMaXnAjc2JYYDBUlsb3ZOuyS
dKvWYZYLkriBKJebFO8m3wxeWjl677vQr/2gQaOG2RDOpjd4ByJwzl0jnXoHTOGr
rJ8VAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU0SIsg1ZJI5e9UFKksq0d30/t+B4w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3
NzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjc3My8wU0lzZzFaSkk1ZTlVRktrc3EwZDMwX3QtQjQubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3b4MA0GCSqGSIb3DQEBCwUA
A4IBAQAu5xtXN7zl14C3F7KBCyJqs2qd2wn7HzaQGsaVYkfwj4YiWubXL0LG97dB
mFIWknqJgDZttW1AT3i8k2hZgxBbdxFqa4QklMhJP/YB1Hs3KHJYMXQcugZmVVkr
vna7Mv6ffEVmCWupUpluRefrhwaqMBfsdnsC+7lYGQ0/UqQAiLt0SygTuYGO7BsU
ytP+vTQcctT5Ajv8DdwUW3bD6pEwxQNWsS0ALrbtsx/WD+wBq2TjuvtaqD/hqzyw
4dYOdo8oRxDVN1Ebgo326sAG//qideYdIQaODu8fNh8+PLAaCwLaBpGQ9U83E4+f
7OA+EsdLNmUDnTmuELfouVMO8OlK
-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org