Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6tJUw-SpgOFvjpHuPxTY3HL6ooo.cer
File: 6tJUw-SpgOFvjpHuPxTY3HL6ooo.cer (raw, json)
Hash identifier: U+ohomVGnUQAjw9O/m7cBgUKuN07Qm+02XM09IkZxlw=
Subject key identifier: EA:D2:54:C3:E4:A9:80:E1:6F:8E:91:EE:3F:14:D8:DC:72:FA:A2:8A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A9D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/6tJUw-SpgOFvjpHuPxTY3HL6ooo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:31:19 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.216.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43476 (0xa9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:31:19 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=EAD254C3E4A980E16F8E91EE3F14D8DC72FAA28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:b3:6c:08:0f:af:b8:fa:78:8f:e4:3e:e9:
72:ee:ac:0d:e6:be:28:7b:a4:6b:9d:4f:4f:58:4f:
3c:da:1d:c7:a0:38:56:78:ae:4b:03:75:12:5c:13:
81:53:18:59:bc:84:fc:17:81:3d:e1:b1:5e:92:d6:
57:a6:57:0e:10:fc:42:97:71:05:e4:29:54:b0:92:
f0:6a:f8:33:12:10:24:97:f4:86:73:79:19:d6:77:
43:fa:73:b0:06:d4:22:b9:71:08:b5:60:04:01:8b:
ed:68:2e:6f:3a:35:17:da:2d:3f:39:eb:c4:36:9d:
70:fc:2d:81:5c:ea:f3:8d:b8:b9:88:71:13:f7:99:
95:6c:db:d4:38:70:a3:b9:a6:98:61:91:47:bc:b4:
d9:6d:18:85:b6:7c:1d:c8:0d:da:4c:7c:70:80:d9:
5a:c6:62:1b:fa:77:45:7f:d4:7d:01:a3:39:f8:6c:
ed:1a:d3:93:4a:06:41:39:63:e1:82:e2:92:bd:5f:
3c:1a:6e:30:3e:be:19:52:1e:bc:cb:0c:d5:17:9c:
e9:e8:ee:f8:f6:cc:ac:49:c7:80:a6:93:c1:dc:96:
a9:bb:25:c3:c7:f0:61:67:6d:ae:f2:87:8e:6f:ef:
92:1e:42:50:74:0a:23:7b:f2:f8:33:d5:e6:f2:65:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:54:C3:E4:A9:80:E1:6F:8E:91:EE:3F:14:D8:DC:72:FA:A2:8A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2768/6tJUw-SpgOFvjpHuPxTY3HL6ooo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:6a:1c:79:57:46:ca:7b:aa:13:fb:4f:d2:f0:d2:ff:60:d2:
db:08:42:62:9d:66:d9:40:6e:2c:d6:f2:94:f3:c0:ab:5c:a7:
ed:42:23:ab:51:7a:13:bd:ff:96:d8:fb:c5:a3:8c:47:62:35:
03:ca:86:69:47:c3:72:43:4b:e2:d7:e5:9e:65:ba:d7:87:c5:
f8:1e:6a:ad:14:d0:d3:7d:f0:ea:d6:14:23:db:9b:64:3e:91:
a1:78:58:34:5e:c0:9a:a5:ec:a5:f1:12:dd:71:9d:bd:21:55:
3f:78:62:f3:b3:61:11:5a:99:c3:c2:13:e4:a7:08:d1:3f:79:
06:b5:9b:3f:5b:f8:7a:dd:f2:f9:ad:ec:37:c4:35:fd:bb:e1:
e6:5d:d2:df:32:99:52:61:c3:d4:3b:95:c3:a8:55:06:bd:21:
de:8e:b4:f4:bf:88:a7:9b:b4:28:a9:50:99:c7:a4:44:03:ad:
39:38:2d:7b:ca:f3:90:64:92:ec:63:22:7a:1a:41:49:d6:a8:
c9:c8:72:96:d5:8c:43:d5:96:c5:fc:a7:16:17:4a:e6:35:d7:
7a:e9:e4:94:24:98:d0:f4:8e:a2:33:4e:25:f3:ab:e3:8f:56:
68:a8:0b:1d:8e:cd:3d:6d:5d:85:f8:ac:77:ff:a9:fc:ed:9f:
06:e2:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:47 2024 by rpki-client on console-fra.rpki-client.org