Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer
File: 7N1zMsZabqPGQCPazgMgB9Tx1DQ.cer (raw, json)
Hash identifier: suZgMjii7RaenULtEeqMpVdI+naAZC9Le8E20W393LA=
Subject key identifier: EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 20 Sep 2024 07:49:34 +0000
Certificate not after: Sat 20 Sep 2025 07:41:26 +0000
Subordinate resources: IP: 2405:2340::/32
Validation: Failed, certificate revoked on Mon 23 Sep 2024 01:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47156 (0xb834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 20 07:49:34 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=ECDD7332C65A6EA3C64023DACE032007D4F1D434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:7b:87:43:87:cd:d9:31:8f:71:2a:30:fa:
d6:76:0f:1f:df:30:49:15:9b:d1:c5:ee:19:08:5c:
9b:65:c9:68:b0:ed:10:73:78:25:df:0b:4d:e5:5a:
d1:b9:87:3c:f4:b3:1b:cf:53:43:2b:70:35:70:32:
60:30:4e:2c:83:ac:5b:37:38:ad:75:4b:27:da:c3:
1a:c0:13:c7:17:be:cd:14:2d:b3:cd:69:f1:55:cb:
e2:85:e6:3d:a2:fe:4a:72:4a:db:d0:7e:2d:49:8c:
d3:ef:d7:78:3b:d2:0f:7a:b9:74:bc:6f:6f:f5:ce:
bd:89:55:81:dd:24:aa:fb:8f:a0:3a:79:bb:27:e5:
fb:81:70:07:63:e1:a2:a0:4a:31:ee:f3:07:2f:0d:
19:88:23:c0:6a:a1:57:d3:87:26:3b:bb:ba:fb:77:
3b:f7:3d:0e:21:e7:f1:d2:d3:7a:6e:61:83:09:50:
ff:52:f1:66:55:de:82:b5:2c:17:80:ab:b7:35:b4:
45:03:8e:83:45:ed:ed:89:c9:71:11:c5:ba:9c:6c:
dc:ea:7b:f1:16:00:57:da:c2:48:dd:67:12:d3:c8:
09:2e:7f:e6:08:e4:3c:e4:56:be:8d:96:91:36:75:
3f:97:02:93:75:74:1f:6f:87:a6:fb:8a:0f:4f:93:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:73:32:C6:5A:6E:A3:C6:40:23:DA:CE:03:20:07:D4:F1:D4:34
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2451/7N1zMsZabqPGQCPazgMgB9Tx1DQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:2340::/32
Signature Algorithm: sha256WithRSAEncryption
21:0a:2e:06:1a:b0:f6:af:00:c6:b5:58:4f:27:88:5a:21:8f:
da:50:b7:63:0f:65:02:3e:cb:c9:79:d3:df:82:1e:3f:9c:f1:
eb:ca:52:55:f3:b8:c2:d3:31:7b:40:a3:d2:54:59:95:b7:fd:
00:9f:b5:3d:db:64:0b:59:6c:5c:c8:9e:07:b7:ea:8c:56:ca:
3e:ce:ac:9d:0c:ea:af:bc:62:83:49:47:ff:d0:3f:e9:af:d8:
0b:10:6c:d5:e9:5e:b4:43:f6:44:7d:ec:8b:98:e8:c1:d8:ec:
7c:17:44:7e:8a:37:26:43:8d:aa:c1:32:5c:9d:21:19:3c:97:
be:de:49:e8:8a:64:e6:33:05:f3:9b:a3:a3:6b:c0:f2:76:00:
e5:ed:d5:0a:48:08:ec:89:84:e9:2a:53:f9:4e:ac:f9:a0:b9:
6e:ee:2f:90:7b:a1:ff:d1:3a:09:2d:06:88:b0:eb:d5:49:06:
7f:35:fe:81:1e:66:a6:e7:3a:da:64:73:7e:79:46:34:c5:68:
5f:84:5f:f0:6e:39:f7:42:45:93:79:3f:87:cd:39:87:e7:fa:
5e:aa:88:3f:16:4c:63:fd:99:a8:23:f9:5e:e4:b1:c7:6e:6c:
19:8f:25:28:3d:fb:09:49:2d:79:38:57:95:f4:d8:8c:df:7d:
75:ad:3f:bf
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDALg0MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjAwNzQ5MzRaFw0yNTA5MjAwNzQxMjZaMDMx
MTAvBgNVBAMTKEVDREQ3MzMyQzY1QTZFQTNDNjQwMjNEQUNFMDMyMDA3RDRGMUQ0
MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnM3uHQ4fN2TGPcSow
+tZ2Dx/fMEkVm9HF7hkIXJtlyWiw7RBzeCXfC03lWtG5hzz0sxvPU0MrcDVwMmAw
TiyDrFs3OK11SyfawxrAE8cXvs0ULbPNafFVy+KF5j2i/kpyStvQfi1JjNPv13g7
0g96uXS8b2/1zr2JVYHdJKr7j6A6ebsn5fuBcAdj4aKgSjHu8wcvDRmII8BqoVfT
hyY7u7r7dzv3PQ4h5/HS03puYYMJUP9S8WZV3oK1LBeAq7c1tEUDjoNF7e2JyXER
xbqcbNzqe/EWAFfawkjdZxLTyAkuf+YI5DzkVr6NlpE2dT+XApN1dB9vh6b7ig9P
k+qdAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQU7N1zMsZabqPGQCPazgMgB9Tx1DQw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0
NTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjQ1MS83TjF6TXNaYWJxUEdRQ1BhemdNZ0I5VHgxRFEubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAUjQDANBgkqhkiG9w0BAQsF
AAOCAQEAIQouBhqw9q8AxrVYTyeIWiGP2lC3Yw9lAj7LyXnT34IeP5zx68pSVfO4
wtMxe0Cj0lRZlbf9AJ+1PdtkC1lsXMieB7fqjFbKPs6snQzqr7xig0lH/9A/6a/Y
CxBs1eletEP2RH3si5jowdjsfBdEfoo3JkONqsEyXJ0hGTyXvt5J6Ipk5jMF85uj
o2vA8nYA5e3VCkgI7ImE6SpT+U6s+aC5bu4vkHuh/9E6CS0GiLDr1UkGfzX+gR5m
puc62mRzfnlGNMVoX4Rf8G4590JFk3k/h805h+f6XqqIPxZMY/2ZqCP5XuSxx25s
GY8lKD37CUkteThXlfTYjN99da0/vw==
Generated at Mon Sep 23 05:19:08 2024 by rpki-client on console-fra.rpki-client.org