Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/CCK3vPfcmeUZE6DRGnZqJutRIOw.cer
File: CCK3vPfcmeUZE6DRGnZqJutRIOw.cer (raw, json)
Hash identifier: WNMoJI/I8LM6Qkd1L5CqrwFeNr9KrtdlfFsjY1xZlZc=
Subject key identifier: 08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BA21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 24 Sep 2024 00:20:56 +0000
Certificate not after: Sat 20 Sep 2025 07:41:26 +0000
Subordinate resources: IP: 103.227.100.0/22
IP: 163.53.188.0/22
Validation: Failed, certificate revoked on Fri 27 Sep 2024 02:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47649 (0xba21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 24 00:20:56 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=0822B7BCF7DC99E51913A0D11A766A26EB5120EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:80:5c:60:35:4e:81:21:42:45:a5:22:4a:
5b:c6:19:04:84:8d:75:a0:46:97:ae:f0:1f:0b:96:
77:6a:88:44:82:80:3b:4c:87:0d:23:a9:60:6c:14:
42:c1:c1:45:d6:57:04:4c:22:73:1c:4e:4b:ec:fe:
cf:5e:2a:4d:d6:a9:25:6f:db:ad:5d:d1:9b:bc:26:
75:1b:cc:bc:98:40:f9:5d:f4:70:8b:a7:3e:7f:a5:
e9:41:d5:6a:a4:ca:89:1e:ff:40:8c:6e:52:80:9a:
0d:de:03:25:25:ba:ef:56:85:0a:35:ea:b7:b7:9b:
9f:75:fb:73:99:03:a6:5d:5d:17:47:00:ef:af:73:
ee:ca:5f:75:67:2a:5f:82:03:3c:bf:14:cf:6e:24:
94:c6:28:01:c6:c4:86:40:c9:e9:af:e7:de:e3:18:
0e:c2:fd:f0:0c:76:80:65:cf:80:83:50:d0:8c:0e:
3e:8d:f6:5b:8d:02:7d:1e:bc:a8:b5:8e:89:e8:74:
fb:dd:20:3b:b8:69:2b:f0:6d:45:17:90:2e:45:ee:
5f:29:70:f4:de:8b:d6:e4:73:1c:87:26:90:9f:bc:
89:68:6b:46:16:1f:45:ae:c2:29:44:e4:a2:5d:5e:
ea:40:70:55:41:57:2a:72:23:b6:d3:41:5d:7c:e4:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:B7:BC:F7:DC:99:E5:19:13:A0:D1:1A:76:6A:26:EB:51:20:EC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/CCK3vPfcmeUZE6DRGnZqJutRIOw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.100.0/22
163.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
31:eb:82:b5:9a:8f:9d:f5:83:21:67:43:67:27:4c:53:09:39:
ae:b1:8c:07:ce:87:fd:ab:82:84:62:36:ff:1d:2b:b6:19:aa:
c8:0f:56:5b:2b:ed:a0:61:27:e5:5d:60:f8:27:17:d4:83:aa:
8c:70:1e:e4:23:1a:d2:16:f1:26:76:c2:d6:53:ec:83:15:b3:
da:fb:43:f1:7f:eb:92:b6:93:ea:8e:ab:7d:4e:e4:d9:fe:98:
b2:b0:95:f4:fe:20:9e:ee:cd:45:3f:f7:68:8f:4e:68:76:ba:
9b:df:46:f0:28:3e:c2:e9:cc:7c:88:38:5a:76:fc:85:95:d3:
cb:fc:7e:c0:c5:80:10:93:6d:a3:65:57:51:03:78:eb:28:20:
4d:77:6f:dc:38:04:f1:30:0d:26:b7:87:5a:6b:41:f5:1a:96:
46:23:ac:a2:09:00:ae:18:e6:e0:12:33:37:30:6f:0f:be:19:
5b:58:18:2b:c4:c4:1f:2c:06:6b:b1:2d:11:a6:9d:88:ef:e6:
b0:e9:d1:9c:ae:23:59:10:30:c4:ad:cf:2e:74:58:97:24:ba:
82:bc:98:70:cd:b0:28:e2:68:ad:ef:9f:59:42:15:f9:aa:b5:
ee:71:a4:a9:d2:f9:a3:44:9f:ee:e5:47:ac:9a:4d:5a:3e:88:
1f:75:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 03:59:55 2024 by rpki-client on console-fra.rpki-client.org