Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
File: 3uCPUof2aTE85pkPEXQBsXmEiuE.cer (raw, json)
Hash identifier: 3UnmcloyWDTV/frqf+Ed+gsrUoVDA/PSIaQKpwhvNlQ=
Subject key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:38 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.120.96.0/22
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48271 (0xbc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:56:38 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DEE08F5287F669313CE6990F117401B179848AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5e:da:44:e1:c1:f3:3e:9d:5e:70:73:ed:fc:
af:06:c7:8d:74:df:0e:04:2a:36:34:0a:42:64:d8:
55:56:89:40:db:b1:0c:3d:6f:89:37:e8:38:da:4c:
af:51:6f:42:b3:6d:65:ef:43:15:68:9e:86:e8:c1:
a7:b7:1a:d4:36:bd:2d:87:9e:35:5f:85:4d:13:12:
d5:1e:e2:e6:93:7a:eb:30:72:6e:cd:f7:00:60:4d:
6a:92:e4:de:c5:37:b9:bc:40:80:e3:cd:26:fc:eb:
01:72:1a:5d:d0:07:85:b1:b9:4f:85:85:28:50:3a:
07:f1:a6:c5:29:f1:e4:88:5b:96:28:e8:ce:ee:4f:
0a:ce:e3:84:8f:60:6e:7e:37:df:49:38:bf:54:e5:
c2:97:77:88:33:55:82:c0:75:2c:a6:f9:62:c6:8d:
eb:21:5a:6a:f3:38:40:11:40:b2:b9:d7:8d:f0:b1:
c4:d0:b2:7b:ca:8f:fc:d3:a5:bb:bd:0c:8e:92:65:
a0:ca:98:d4:c6:93:25:79:15:5c:25:f6:f4:b8:9a:
e6:ce:5f:bd:69:0d:4d:50:62:ab:44:9c:9f:6d:88:
31:20:5c:2f:31:84:58:7c:6c:8e:6d:31:27:b9:d7:
f6:79:cc:99:0f:7f:9b:e9:c9:7f:8c:0a:5b:95:96:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b4:b3:03:d7:1b:c6:0d:ce:dc:f4:fb:c4:66:c6:f8:3d:c4:
2c:fc:6c:d1:50:9b:27:08:a3:7d:0c:8d:13:f3:af:4f:4f:2d:
83:88:c1:ff:cd:ee:76:e1:6a:6a:7e:2a:b4:76:61:5f:07:d9:
25:06:b7:65:46:4e:f1:ab:6b:0c:9f:dc:8b:fa:1b:97:cc:e4:
b0:d2:d5:35:76:56:85:f3:d0:af:0a:3a:28:28:af:73:35:c6:
1c:84:39:e9:82:e9:db:4e:b7:38:7d:e7:5b:d4:f1:3a:44:9e:
49:d6:2a:ad:55:26:4e:53:a5:8a:17:b3:53:fd:f7:eb:3f:a6:
03:35:cc:63:18:71:e4:07:19:33:bf:39:1f:12:1e:a5:86:d2:
af:9c:ff:a2:9c:d7:74:cd:70:1b:ed:ab:5e:32:55:2d:f3:95:
8f:f2:03:dc:0b:2b:9d:69:09:9e:f9:9f:b0:63:a4:06:02:9a:
0a:bb:0c:ea:6a:7c:cb:37:07:6c:c2:61:06:63:19:41:f6:93:
a5:36:ce:44:ba:2b:ab:fd:c2:10:1d:51:05:54:ee:b0:f4:99:
16:f5:55:f3:8f:49:07:66:f9:9b:87:e2:c6:a9:a0:1a:0b:4c:
97:e8:9b:7f:f6:bc:ec:dc:32:65:f3:fd:c2:af:0c:5c:c6:0b:
00:12:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:53 2025 by rpki-client