Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/C5kEyGAskuwXaB8GsxIW3LAvD8M.cer
File: C5kEyGAskuwXaB8GsxIW3LAvD8M.cer (raw, json)
Hash identifier: koc4SQrq9YmaEYfIxseffIUTrwVson93Y4shULnVQQg=
Subject key identifier: 0B:99:04:C8:60:2C:92:EC:17:68:1F:06:B3:12:16:DC:B0:2F:0F:C3
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 31EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:22:18 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 157.10.218.0/23
Validation: Failed, certificate revoked on Mon 01 Apr 2024 23:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12783 (0x31ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Feb 1 01:22:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B9904C8602C92EC17681F06B31216DCB02F0FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:88:17:12:17:e1:ce:bb:d4:74:7d:0d:74:
33:7b:1f:89:b3:b2:72:c3:5a:f0:0f:da:de:04:83:
a0:64:2e:39:0b:8a:47:4d:83:19:9e:5e:eb:2a:60:
97:55:8f:94:72:53:41:9c:46:cd:f0:eb:08:0c:22:
59:97:43:3c:77:60:76:5d:3d:e8:06:52:f0:0d:e8:
c7:ee:fb:58:82:41:53:4e:9c:f5:5b:34:bb:61:62:
ff:df:77:9a:75:90:7f:28:ff:08:a0:b3:50:c6:6b:
66:fd:67:a8:fe:34:be:06:be:b6:3c:f3:30:76:91:
98:b2:be:43:45:52:23:aa:a1:d0:c7:91:05:3e:01:
78:f5:75:da:13:7e:2f:e8:3a:12:53:68:5c:96:66:
f4:82:90:3e:19:71:0a:c9:d6:b8:9d:16:7c:93:cc:
0c:de:38:2f:6c:67:a5:d6:44:34:cd:2a:7c:d1:29:
14:f9:90:1c:58:c3:67:f3:d4:d9:4e:1b:63:9c:6a:
97:cc:02:22:1e:62:af:43:9d:de:bf:5c:90:e5:bc:
c2:ca:1b:b7:9f:2b:6a:7b:24:f8:88:07:d1:12:0b:
d9:b2:c9:70:03:b6:d4:8f:ed:a5:f9:dd:e9:9f:3e:
4a:06:d7:46:0c:c3:b0:09:31:90:d2:c9:93:b4:f9:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:04:C8:60:2C:92:EC:17:68:1F:06:B3:12:16:DC:B0:2F:0F:C3
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/C5kEyGAskuwXaB8GsxIW3LAvD8M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.218.0/23
Signature Algorithm: sha256WithRSAEncryption
74:4d:99:3a:9c:35:08:54:20:19:80:ea:a9:70:2d:78:cf:16:
83:f0:56:d4:65:df:fb:4b:15:d4:f8:1a:f1:e6:a8:8a:2c:84:
a0:e1:b1:5d:7c:d8:d2:69:b8:d6:79:c4:c9:09:8f:0f:77:1d:
85:47:a2:4c:b4:42:36:58:f5:d1:2e:4b:f6:11:d8:71:fa:8a:
ab:e1:0f:4c:97:df:0a:1b:13:95:5c:cd:8d:78:de:c3:86:f0:
90:92:96:e4:f0:8e:09:ee:87:96:bc:d4:c7:dd:e0:53:a3:12:
79:7f:a8:6f:c7:be:c8:ac:74:23:0e:a1:e2:de:bc:2e:41:a5:
f3:8a:e5:60:0e:89:75:97:06:9f:91:10:bf:b7:d1:e4:97:a3:
ca:9c:25:7a:5c:ba:e3:de:5a:2e:de:0b:1f:bf:96:d8:a5:23:
ec:87:e5:1e:71:20:d4:57:de:8f:42:7c:00:59:e0:ef:b2:ff:
a5:06:45:72:89:41:e3:70:c2:13:94:49:f8:63:ad:f4:13:28:
48:4e:51:35:0b:04:47:18:23:d1:10:fc:49:2f:e6:4f:d8:64:
e7:2c:20:84:51:17:72:a0:c1:53:18:19:e9:d9:80:d4:a2:c8:
30:9e:52:78:d6:e5:26:95:bd:21:e8:3b:c0:f1:1e:1e:a7:7b:
95:aa:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 03:07:02 2024 by rpki-client on console-ams.rpki-client.org