Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2P0wEmBd2oDHj4k1lkjXtICZzc4.cer
File: 2P0wEmBd2oDHj4k1lkjXtICZzc4.cer (raw, json)
Hash identifier: 3JnCZWona0rH8ukuiWd8ck7HWvDxruzCscmzl4oz7MM=
Subject key identifier: D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:33 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 160.20.18.0/23
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14275 (0x37c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:53:33 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D8FD3012605DDA80C78F89359648D7B48099CDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:39:ab:c8:c3:d3:e4:47:bd:8b:c4:9d:59:
ac:79:8a:07:a1:13:24:a9:ac:af:37:21:39:a9:6b:
c1:88:8b:97:34:b6:6f:2c:c5:8f:34:38:f5:86:55:
e2:a6:9b:19:77:86:6a:59:c7:ed:cf:c8:1a:be:cb:
36:fc:65:83:e1:da:73:0a:59:b6:5b:db:51:4c:6f:
f5:bb:b2:09:cb:f0:bc:cc:11:9d:ab:d5:91:88:8a:
47:fe:5d:09:36:0d:ed:c3:bd:a0:f6:f4:a9:5c:4c:
b5:2b:ae:90:5b:72:d8:a9:bf:2d:c6:3a:fe:c4:87:
6c:25:fb:f3:a4:08:7e:1f:41:c6:ae:a7:11:06:33:
90:f8:5d:71:64:11:6c:63:5f:8e:c0:a7:38:54:42:
d3:75:b0:18:9d:1a:78:79:3b:67:18:ab:67:1a:c7:
3d:71:0a:17:c4:4a:e2:62:63:25:5c:4a:f5:86:75:
60:fd:22:03:47:b1:d8:ae:7c:86:b2:84:0a:78:72:
46:26:b2:ae:43:ed:b8:b5:2f:27:92:04:36:d1:e8:
f5:54:62:93:c0:11:25:19:8d:8c:94:b3:2e:82:a9:
a1:29:65:29:b4:17:24:c1:d9:21:64:1f:30:da:64:
e7:cc:ee:4e:70:c6:77:ef:8e:00:94:b1:9c:6e:0d:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:30:12:60:5D:DA:80:C7:8F:89:35:96:48:D7:B4:80:99:CD:CE
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/2P0wEmBd2oDHj4k1lkjXtICZzc4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.18.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:a0:db:73:82:5d:8c:f3:16:1e:5f:78:84:10:d7:35:8b:d0:
b5:be:6e:f2:dc:63:5f:b9:11:45:1c:5c:c3:ef:73:62:29:77:
c3:14:fb:a3:77:e2:05:27:4e:0a:6a:b6:cb:59:76:26:e9:2d:
92:95:a5:de:ee:ce:26:75:cc:19:89:93:0b:dc:9d:17:93:e3:
38:7f:d2:a8:fd:c9:e3:e9:f8:e6:66:56:60:23:cb:76:86:fc:
b2:48:cd:51:26:fd:0a:23:25:5b:c4:88:1c:fe:59:64:6b:92:
58:84:da:20:51:c1:7d:4a:e9:a9:52:45:b9:c9:bb:3f:7f:6c:
54:02:92:06:f9:47:ab:45:40:99:c1:9e:d9:4a:49:5a:4b:c5:
e8:d5:41:6a:c0:04:86:0c:35:dd:e4:83:16:21:7b:5c:8c:f4:
eb:32:56:7c:d9:20:4a:9f:3a:68:99:92:e8:d1:17:83:7a:79:
d8:03:ee:1b:59:01:e2:bb:a6:86:7e:1b:e8:5d:e0:a5:f0:86:
0e:e3:83:9c:99:e5:d5:52:9f:c5:97:de:01:2a:44:71:ce:9a:
1b:dc:ca:b6:f5:83:cc:28:39:ee:4f:65:57:2b:55:f6:4b:6a:
b3:c6:0d:2d:e5:c2:ed:4e:72:84:09:cf:8b:42:23:4a:39:fa:
eb:58:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:12 2025 by rpki-client