Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
File: Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer (raw, json)
Hash identifier: s0gFZBhW1z/2g3tbUVQ7//GeEkjGLkRaDc9nB+Qme9Q=
Subject key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A988
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:29:25 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.119.28.0/22
Validation: Failed, certificate revoked on Fri 12 Jan 2024 05:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43400 (0xa988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:29:25 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:8e:20:b6:22:31:b5:a7:b7:d3:47:c3:99:
f4:a5:1a:b5:e9:da:c2:e9:a3:d0:53:62:a7:82:8c:
d8:af:0f:2c:fa:b7:f8:35:5b:56:fa:2d:47:68:1c:
9e:33:f2:4d:fd:b5:4e:d6:49:03:d9:d8:b6:1e:dc:
90:8b:b4:4a:ba:b2:6c:2b:09:e7:a1:68:81:18:54:
92:ae:ae:5e:82:2a:c1:9b:5f:79:f2:6c:84:f2:dc:
07:a0:d1:3f:1a:10:2f:f0:39:37:7c:1f:ac:f7:c2:
bb:de:d2:17:d3:b8:01:0e:af:10:89:f3:87:ff:7f:
f4:c8:4b:49:6d:0d:d7:de:59:1d:ca:d4:0e:2f:0b:
b4:42:0d:90:72:4f:7e:49:61:41:ef:0a:1b:7b:ff:
73:cc:88:25:e7:d1:ab:73:26:ed:e4:ca:9d:bd:fa:
63:99:43:17:f2:21:5f:05:6b:3e:0b:db:3f:1c:ec:
fd:cb:de:46:b6:25:ce:b5:8a:0a:2a:eb:06:50:2c:
c0:c3:1f:3b:ff:eb:e1:44:03:53:7f:6c:c2:16:07:
42:1e:a4:dd:45:4c:13:f2:df:7a:2b:08:f4:1f:5d:
1b:29:89:b5:6a:ea:0b:98:8c:93:7d:3d:b1:63:ba:
1d:fc:48:0d:72:36:93:1d:7e:f0:b3:30:31:91:d6:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.28.0/22
Signature Algorithm: sha256WithRSAEncryption
52:90:6f:2e:86:05:11:b0:1f:78:51:14:dc:8c:2a:e4:38:cc:
0b:44:df:6f:b2:ec:84:f9:bf:26:a9:c7:28:1a:64:2c:20:64:
e1:06:43:81:73:4d:5d:6e:e3:9a:02:b4:3a:2a:13:03:2a:dc:
95:6a:c5:29:8e:9f:c1:f9:88:74:af:b7:ee:99:52:7a:91:cf:
9c:e7:eb:87:94:61:f6:24:71:cd:a9:5b:fe:75:e8:02:ab:0b:
fd:32:98:56:35:b9:0e:04:b7:0d:cd:90:3c:4a:7f:3d:02:94:
f6:d1:61:c6:c9:9a:73:5e:d7:46:15:a6:1f:e9:84:7b:29:20:
3b:18:7f:e0:2b:a7:d8:d7:1e:7a:91:a0:2f:ff:55:16:f5:b3:
16:42:aa:a7:d7:7e:28:61:fc:d5:22:69:2a:e4:9d:85:e3:a7:
21:8c:c1:9e:88:7d:f2:1b:41:db:7e:92:f5:bd:a5:0a:ce:a5:
2f:15:f1:16:08:7d:91:1d:f5:3a:fb:b5:da:c4:a4:b5:fe:30:
09:59:aa:cf:37:36:6b:28:19:15:e1:81:f1:2c:93:d4:39:cc:
cc:2a:a5:f1:bc:13:6e:47:c0:21:fd:53:52:fa:97:6a:b8:e7:
42:07:f9:0a:ab:bc:73:88:49:ea:2b:31:1b:39:bd:8c:0d:b6:
ee:6f:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org