Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FguBQGl3AHVmkJf_Tx49cObNDAY.cer
File: FguBQGl3AHVmkJf_Tx49cObNDAY.cer (raw, json)
Hash identifier: 1pEl7E/yjy24Z3kJOoxuHpMBLiOX/g6EfSiRJ6c4vTE=
Subject key identifier: 16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BA79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:47:53 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:8820::/31
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47737 (0xba79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:47:53 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=160B814069770075669097FF4F1E3D70E6CD0C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:2a:de:19:0d:80:34:12:93:83:85:60:66:
90:fb:2f:d5:53:84:5b:0d:d6:67:20:35:86:1e:11:
f3:d8:4b:9d:70:4f:4a:9b:1a:61:fc:d0:53:6c:fe:
f7:54:b5:25:f9:c7:37:67:de:7a:52:df:4c:71:ff:
ec:20:e7:57:2d:36:ae:f0:87:d4:89:1f:1e:05:13:
38:4c:dc:e7:f5:fb:60:f2:bf:bb:e2:53:4c:ce:69:
7c:56:4f:27:3e:f6:f2:e4:92:ec:ae:af:43:f9:76:
6e:29:8a:c1:e5:4c:87:a6:d3:4f:7f:54:5a:88:2b:
85:e3:04:29:58:33:0a:8e:8c:d7:37:c3:69:99:42:
44:92:d6:65:8e:a0:74:2b:e7:5b:5c:17:8c:b5:15:
24:53:f6:c6:1b:8c:30:05:08:0c:4b:d3:74:57:50:
de:cd:14:01:10:92:0f:fc:f1:c1:c4:52:37:e8:d3:
56:0e:a9:a1:5a:2e:5c:99:31:fc:60:f8:9b:69:e0:
93:54:75:c2:ca:ae:1a:2b:a6:f2:54:a8:2f:6d:9e:
8b:fb:23:46:9c:62:25:aa:f7:e4:72:52:46:48:d9:
2d:2c:b7:3d:3c:bd:38:a3:b6:f1:bd:9d:a3:b2:35:
9e:af:01:af:da:4e:ca:72:94:69:be:c5:a8:4a:a5:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0B:81:40:69:77:00:75:66:90:97:FF:4F:1E:3D:70:E6:CD:0C:06
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/FguBQGl3AHVmkJf_Tx49cObNDAY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8820::/31
Signature Algorithm: sha256WithRSAEncryption
5f:56:db:b2:36:51:41:49:16:84:99:c1:76:b2:82:ee:49:66:
2d:a8:d6:b7:17:54:9a:3a:23:f5:37:3c:a8:69:fb:88:d7:ac:
a5:cd:2a:02:2d:e6:56:03:a5:5f:16:b2:f4:e0:8d:02:91:cd:
97:af:f2:7b:34:69:ea:83:be:18:6e:63:64:ac:a4:b3:93:9c:
54:35:04:42:6e:de:1e:9d:9e:b1:01:a8:68:2d:ad:e5:ba:f5:
5d:09:39:7c:88:9c:b3:e8:51:69:44:dd:c4:b2:50:c5:7a:67:
1f:e5:b1:57:e0:6a:09:99:53:ef:72:34:13:cc:55:52:18:d1:
53:55:05:a3:86:9c:db:41:16:93:01:3c:49:1b:e6:1d:0b:31:
ed:7e:3c:1f:46:7b:bd:dc:04:15:a6:76:e7:90:29:db:d3:88:
ba:f6:9b:63:11:29:e5:00:04:01:1b:f8:52:e2:07:8d:4b:92:
51:00:8d:b7:fa:92:e2:61:2f:16:2c:fe:ec:bc:ca:e2:8c:88:
43:a8:0c:3f:a5:51:88:20:c4:6b:dd:cb:bc:b1:b2:83:c0:19:
7c:d0:86:21:71:e2:94:37:ae:0b:e1:6b:5c:0f:8c:ae:61:c1:
a6:30:93:ef:4d:79:d1:94:b6:72:36:58:7b:9e:c2:6b:76:6c:
11:97:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:53 2025 by rpki-client