Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/BiYIOE8SR0bGahwd0yUk6GYAlGA.cer
File: BiYIOE8SR0bGahwd0yUk6GYAlGA.cer (raw, json)
Hash identifier: AyPXLGgsYA4rDRVJUHgYRbIPc+wu9OxiCSl6qszyXgs=
Subject key identifier: 06:26:08:38:4F:12:47:46:C6:6A:1C:1D:D3:25:24:E8:66:00:94:60
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A928
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:27:24 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.103.252.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43304 (0xa928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:27:24 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=062608384F124746C66A1C1DD32524E866009460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:59:aa:d7:bb:12:83:9d:72:96:aa:c4:43:
dc:17:cb:76:34:b0:09:ff:dd:54:68:25:98:c1:b6:
15:b5:17:68:2d:c6:bd:8e:4c:1e:94:9a:35:6b:58:
7e:47:6c:df:5d:2b:9a:d3:b9:56:5c:6c:24:c5:19:
47:6a:6f:42:ff:4e:b2:de:5b:f8:a7:96:79:6e:80:
c1:e3:e9:e1:4f:3f:92:30:00:13:31:b3:4d:24:8f:
b1:26:ec:b0:d9:a4:40:4d:3a:f6:88:12:97:e2:52:
12:33:78:ff:29:c8:86:ca:0b:2b:1e:f7:aa:4f:c5:
12:95:53:30:87:b7:8d:b9:17:a5:81:cf:55:f8:75:
2c:5e:d9:a5:e2:68:81:aa:a5:ee:a5:37:8b:7c:f0:
e9:09:74:d7:ab:05:2e:28:f8:07:ab:29:87:4f:4c:
01:af:94:2b:29:5f:9b:e4:04:f6:89:b6:70:6f:f2:
6e:8a:0f:86:09:cf:f8:f9:06:16:68:14:e0:c2:3c:
07:f2:b3:17:b0:81:87:46:38:2d:77:10:56:03:cf:
3b:10:21:ba:28:e5:04:65:7d:b3:01:0a:4f:73:ad:
b3:70:0d:13:da:7f:4a:81:8f:be:f3:1a:87:48:b3:
b6:91:98:a4:48:84:48:f4:d1:3d:b2:70:91:df:5b:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:08:38:4F:12:47:46:C6:6A:1C:1D:D3:25:24:E8:66:00:94:60
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2634/BiYIOE8SR0bGahwd0yUk6GYAlGA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.252.0/22
Signature Algorithm: sha256WithRSAEncryption
15:f8:eb:7b:db:4d:8e:8a:98:8c:98:3a:82:37:4a:40:1a:8d:
32:4b:f1:73:f5:15:be:fe:61:7e:89:2b:f5:f1:ef:cb:f8:fc:
fd:08:b7:00:5f:98:86:5c:29:dd:09:e2:d6:6b:44:cd:1d:e7:
00:3b:67:7a:f8:51:ec:5b:97:65:ec:8e:97:38:7a:55:9c:5e:
84:69:5d:53:36:d3:2b:66:47:b3:1f:b5:3e:68:70:88:2b:9e:
8c:10:de:f3:f0:38:48:6e:fb:8c:79:d6:48:eb:54:c4:41:e5:
56:35:0c:0e:44:ad:4f:70:f3:79:66:b5:ff:2d:a3:dc:89:3b:
df:96:f8:f3:71:ef:56:16:67:7d:a0:a7:ae:a7:d6:06:5d:9f:
54:40:ec:8e:24:57:80:35:a6:17:2c:4b:15:0d:b0:6d:48:b7:
e3:76:18:19:f6:6f:9a:dd:c4:d6:68:2f:1d:2f:8e:27:f9:6d:
d8:d1:fd:f2:e4:88:0f:77:32:fc:0f:e0:b7:6e:ec:07:c1:f0:
54:30:82:e2:94:4f:65:53:dc:44:8b:38:7d:08:c9:c4:03:07:
89:94:ed:f4:83:73:87:6d:ba:fd:86:dc:72:f8:39:db:8a:66:
74:d3:28:f7:2a:8f:58:97:be:3d:21:50:46:03:52:6b:02:1f:
a3:ca:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 07:14:29 2023 by rpki-client on console-fra.rpki-client.org