Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
File:                     78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer (raw, json)
Hash identifier:          EA3MQds5JO62xuJyygqqs4+1+VFk+5Z6kIkiiIg+9Fk=
Subject key identifier:   EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       B0F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Wed 27 Mar 2024 07:08:41 +0000
Certificate not after:    Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources:    AS: 55995

Validation:               Failed, certificate revoked on Thu 09 May 2024 07:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45296 (0xb0f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Mar 27 07:08:41 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:cc:39:e3:87:de:2a:ac:61:2d:60:f8:ab:
                    14:5e:71:6d:70:4a:37:b8:f0:1b:78:41:01:57:1b:
                    58:73:6b:fb:ce:ae:37:f1:cd:47:4a:2f:84:1a:fc:
                    71:b9:29:87:04:54:ec:e7:7e:92:91:dd:0f:b9:1e:
                    b4:00:f2:9b:ec:5b:01:c1:83:03:2f:3d:7f:9b:a9:
                    5c:a0:35:f5:4d:bb:df:14:d2:1f:e1:7a:f4:7b:d2:
                    18:40:63:d5:c2:2e:8e:63:c2:07:17:0c:2f:42:cb:
                    ff:4d:3e:d4:2d:ba:b7:44:9d:6d:11:1b:17:59:87:
                    e4:4e:0e:b4:e0:38:81:d5:23:4e:cf:87:88:14:a6:
                    17:b1:a0:35:26:f5:c9:4d:b7:92:93:c4:70:5c:f9:
                    f3:d3:d3:05:f6:69:b8:45:ab:4b:e4:96:02:29:e0:
                    d6:72:74:78:4a:77:39:2e:ad:d2:68:e0:1b:6e:47:
                    23:39:b0:09:26:5c:e1:30:93:e8:a2:cd:e8:85:d1:
                    ce:3c:17:42:0f:1a:ce:1e:36:7f:db:71:28:a1:2b:
                    85:a3:e9:81:b2:eb:2d:a4:5b:05:bd:d9:57:d4:53:
                    21:77:25:09:d0:1b:24:e3:12:a8:86:b0:a6:87:d9:
                    6f:ba:52:97:ca:04:c9:c3:2c:e4:a1:21:3c:a1:30:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55995

    Signature Algorithm: sha256WithRSAEncryption
         22:74:6a:a5:32:eb:27:71:3d:c1:10:8c:cd:ab:d8:f7:e4:f7:
         f8:41:fa:e2:2d:22:6d:87:3c:df:c4:32:4e:4f:31:58:25:11:
         ed:3b:37:04:26:2d:ff:ed:82:15:22:05:55:94:a9:76:d2:be:
         ff:94:a2:54:e8:2b:a5:7f:0a:48:3b:e7:6a:f1:47:63:e3:8d:
         01:db:e5:f8:9f:c7:50:9d:d3:a1:21:96:c2:63:42:3f:b9:9e:
         2f:f7:e3:ec:7b:22:07:ff:b2:8c:c3:1c:bc:9c:64:9f:07:12:
         76:35:99:a9:1f:15:c7:ef:ef:5c:86:12:58:de:5b:78:9a:87:
         c7:52:8b:86:65:15:23:23:a3:5d:8e:fc:47:21:5a:e7:a0:54:
         1c:18:c6:6f:16:d4:b3:1a:7d:ff:f9:7e:3b:04:ea:d1:25:b3:
         f3:a6:c1:de:b7:46:8f:94:b9:a1:56:cb:f2:4b:44:eb:9d:03:
         99:f0:eb:df:fe:5c:dc:1f:50:b8:ac:91:cd:a0:90:f2:ce:98:
         53:0e:dc:98:6f:25:46:6b:78:5d:fd:8f:7b:08:a5:5d:39:ea:
         2a:8b:1c:86:ec:49:1d:4d:6e:bc:60:64:f0:3b:01:89:50:0f:
         1c:82:58:3f:89:90:e5:c7:57:02:8c:e6:d2:15:7b:02:a5:48:
         43:5c:91:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:34 2024 by rpki-client on console-fra.rpki-client.org