Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6zR3PukNEUw3aCOix8uKN9vKjDs.cer
File:                     6zR3PukNEUw3aCOix8uKN9vKjDs.cer (raw, json)
Hash identifier:          MuKQM8vPnSEaFRVjmf0NW4n4cpmy+07HjNW0rNEfh5o=
Subject key identifier:   EB:34:77:3E:E9:0D:11:4C:37:68:23:A2:C7:CB:8A:37:DB:CA:8C:3B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AA48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 09 Oct 2023 00:33:55 +0000
Certificate not after:    Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources:    AS: 139125
                          IP: 103.154.168.0/23
                          IP: 2406:5b40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43592 (0xaa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 00:33:55 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=EB34773EE90D114C376823A2C7CB8A37DBCA8C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:6e:42:90:d1:56:c5:1c:fa:50:35:1d:01:
                    26:fa:fa:6e:8f:ac:56:ae:c0:40:4d:8a:95:ba:97:
                    ae:7a:93:d3:0a:98:d9:b5:89:e9:6d:93:a5:09:47:
                    3f:01:a1:2d:a7:f0:00:98:5c:97:75:57:95:b3:6b:
                    a4:52:95:8d:b1:0c:62:a7:0d:01:99:ce:2b:60:58:
                    07:f2:b3:bd:69:b2:21:26:2a:c3:f2:dd:a5:5a:47:
                    c9:d6:3b:f4:d8:7d:27:75:d8:d7:63:c7:04:6e:cb:
                    98:f7:d3:db:5c:63:34:a8:db:42:f9:f3:ac:71:86:
                    49:e8:ca:39:64:b5:7e:07:58:58:97:cd:67:65:ff:
                    9d:4f:76:83:6d:6a:b3:f6:9d:55:28:63:36:b3:00:
                    35:62:8e:5e:e9:96:ea:a0:ec:86:14:97:af:7c:79:
                    cf:0a:44:eb:89:63:5d:61:cf:cb:d9:43:7b:ff:9d:
                    ce:7d:00:cb:a2:08:b1:a4:59:a3:e0:58:1a:2e:b6:
                    b0:92:c5:19:ef:22:8d:c9:9d:2a:ba:e2:88:f3:b7:
                    97:d3:29:cd:68:e2:b3:bd:54:64:b2:56:bf:14:a9:
                    59:a4:b1:09:a9:14:ef:a5:e7:1b:c7:eb:66:23:e5:
                    c5:69:10:b8:86:15:45:b3:4e:cb:7f:d4:22:3e:e4:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:77:3E:E9:0D:11:4C:37:68:23:A2:C7:CB:8A:37:DB:CA:8C:3B
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3009/6zR3PukNEUw3aCOix8uKN9vKjDs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139125

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.168.0/23
                IPv6:
                  2406:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:94:5d:6e:da:a8:94:03:48:e4:f3:ba:c8:e5:09:31:23:d6:
         88:0e:d3:db:d5:33:32:11:bc:49:2b:9d:69:ec:c5:12:e7:e9:
         5e:48:29:c0:20:fb:29:17:02:dc:5c:af:25:e3:23:d5:7e:80:
         13:8d:d1:16:94:31:48:bc:c2:6a:f9:d1:d1:59:b7:0c:60:bd:
         db:e1:8c:ae:98:6b:f2:ae:35:6c:32:f9:3d:d0:f6:6e:83:ad:
         87:dc:d2:82:c0:65:dc:ef:b0:8b:26:f8:a1:0f:b2:c2:a2:3e:
         77:a6:ce:60:ec:85:5f:7e:3d:88:bf:c8:f7:16:1c:ee:88:a3:
         94:ea:ba:65:7b:29:c5:01:f3:ad:56:c2:f0:33:32:bd:64:ab:
         ec:0e:19:00:10:40:2d:0c:6b:52:3d:a3:07:e2:c9:32:7a:f4:
         ad:0d:f3:73:06:c1:f4:1d:67:af:0c:c0:59:8b:e5:d4:71:88:
         48:3b:4a:5b:b9:7f:d9:f5:91:04:10:e2:d1:b3:47:3c:b5:1a:
         b9:c4:b2:21:18:4e:88:b8:32:4b:15:a2:94:0f:26:34:53:b0:
         b8:9e:cd:54:fb:94:f1:5d:8d:12:cf:6f:51:3a:4a:ba:dc:b4:
         49:ff:0d:7c:28:77:93:e8:d7:ca:4c:19:4e:9e:fd:5d:3b:f2:
         a5:97:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----