Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HyvT_FgAR7sT-SXU8sngoeOGTmU.cer
File: HyvT_FgAR7sT-SXU8sngoeOGTmU.cer (raw, json)
Hash identifier: wx15c5JlLt4CNDCwqqSJSjC/Y29pMh/v0o+Qxge9TAk=
Subject key identifier: 1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:30 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 101.96.160.0 -- 101.96.255.255
Validation: Failed, certificate revoked on Fri 15 Nov 2024 05:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47991 (0xbb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:51:30 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1F2BD3FC580047BB13F925D4F2C9E0A1E3864E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:61:45:ef:b8:c2:89:2d:cf:81:46:6f:fc:
70:74:ac:fc:e6:5b:dd:56:75:b0:ac:9d:da:36:fa:
0b:95:e3:43:3f:ef:bc:bc:2a:d5:cb:57:49:b4:30:
19:7c:19:bd:87:4a:7a:43:bb:9c:74:ff:c0:c4:f9:
b2:b9:10:88:cc:54:14:3b:bc:25:61:74:0a:b8:7b:
e8:ce:2b:1c:8d:bc:36:29:f8:66:73:59:27:f7:bc:
66:22:a5:e7:39:31:b1:33:61:9c:fe:11:6b:37:7c:
5d:50:48:36:04:fb:dc:73:2f:14:d3:df:84:11:c5:
45:af:ef:0c:28:02:10:98:09:c7:2c:fb:59:55:a4:
9f:b4:08:0f:7e:35:c5:66:37:5e:51:e0:0c:a3:93:
37:07:72:83:33:d5:e0:0a:33:f0:3c:08:03:3d:ec:
ce:ae:1f:ce:de:12:b5:d0:3b:2f:6a:42:b4:92:e6:
b7:e5:06:b4:d0:a5:d4:4d:12:3b:74:b4:6a:44:91:
11:b4:5e:4f:d4:47:2b:12:a8:1c:c0:af:da:4a:02:
d3:4d:1e:44:e3:21:26:33:5c:c0:56:cc:7e:df:24:
55:c6:04:dd:b2:76:36:75:6b:f5:6d:a8:8f:66:62:
64:4a:28:9b:96:17:6d:6a:50:09:c5:11:42:15:b3:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:D3:FC:58:00:47:BB:13:F9:25:D4:F2:C9:E0:A1:E3:86:4E:65
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/378/HyvT_FgAR7sT-SXU8sngoeOGTmU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.96.160.0-101.96.255.255
Signature Algorithm: sha256WithRSAEncryption
91:40:68:e3:64:af:75:9b:d7:76:7f:ae:f9:59:88:95:e7:25:
b0:56:eb:25:6b:3d:8d:8a:9b:8a:9e:be:87:1b:55:a8:f5:ee:
75:55:c8:c1:57:fd:48:41:a9:7a:9d:be:6a:ec:ca:ad:f2:e9:
30:08:73:d5:53:63:c8:44:06:d6:c8:28:3a:06:70:ff:c4:83:
da:72:79:30:04:58:f9:50:b9:8f:43:63:2d:49:34:dd:24:1d:
27:3b:15:3f:75:05:b9:99:0d:25:65:c8:f4:2a:d4:a5:1f:6c:
66:06:3c:0d:31:6d:23:d7:35:90:bf:71:48:a4:4e:1d:f0:41:
2a:6a:73:ba:e9:f3:85:8a:54:1b:6a:e6:f8:2b:8a:c4:eb:c7:
62:ce:60:0d:a1:b3:a0:75:de:2f:4a:c7:e5:99:58:81:eb:94:
42:85:bb:d9:1d:20:b6:ac:f3:b6:34:5d:27:f0:e4:fb:d0:19:
31:c8:b3:a9:54:f3:9b:93:51:33:24:8e:a7:87:c0:a6:15:56:
4e:4a:4e:25:01:2b:ba:62:43:7a:90:56:72:10:8a:9f:6f:e9:
50:a1:4f:d0:a7:31:a9:06:11:46:9e:56:dd:f4:95:12:df:0a:
c2:34:b4:9e:40:0a:be:18:ec:80:55:a1:44:86:7e:8a:f6:f7:
e3:98:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org