Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/J5lvQhAnzKQD8oeaHvd39inYkzo.cer
File:                     J5lvQhAnzKQD8oeaHvd39inYkzo.cer (raw, json)
Hash identifier:          tqn9iBLSzkGkCvclemFfrEMYWdNwcVBtCJD/pEhIRac=
Subject key identifier:   27:99:6F:42:10:27:CC:A4:03:F2:87:9A:1E:F7:77:F6:29:D8:93:3A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       A97A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/J5lvQhAnzKQD8oeaHvd39inYkzo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 09 Oct 2023 00:29:06 +0000
Certificate not after:    Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources:    AS: 59050

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43386 (0xa97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 00:29:06 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=27996F421027CCA403F2879A1EF777F629D8933A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6c:be:db:e2:ab:73:29:86:29:a7:ae:cd:7e:
                    a1:18:7f:76:a2:0f:7f:6f:2b:43:14:a7:c4:97:5d:
                    d0:74:12:b5:13:14:5d:f8:d0:16:3f:e2:fb:1d:da:
                    6b:79:17:20:af:57:af:c9:dc:0a:a4:70:5a:b9:f0:
                    e6:5d:60:41:ba:b7:7b:9a:24:fa:54:62:d0:ec:7f:
                    28:87:bf:d7:a3:91:c6:96:c6:de:54:9d:ee:e0:31:
                    00:c8:82:b6:b0:79:74:69:5a:87:26:7d:c3:9f:fa:
                    e9:8f:b6:f0:c2:0a:2b:1f:ca:10:d7:e2:62:6a:23:
                    1d:01:dc:df:fb:41:d5:89:e4:1b:05:10:e9:06:f7:
                    86:4c:94:db:fa:43:42:b2:71:3e:1c:ed:e7:ed:0f:
                    ec:ad:e0:f5:62:9c:8a:be:f9:ac:42:e0:12:6e:e3:
                    6e:60:3f:47:c6:88:97:ca:14:c1:58:03:01:d6:a2:
                    90:58:2a:be:60:95:80:fb:f5:f9:e3:7b:f7:86:31:
                    18:d1:03:4e:d1:0a:24:2e:17:68:9b:64:7c:d1:7b:
                    01:19:50:76:f2:74:1b:67:2b:cc:70:02:0e:94:32:
                    e2:5b:15:30:a6:df:46:db:81:1f:4a:e8:32:f2:e9:
                    e7:13:5f:4b:ab:c2:bc:4f:90:d5:c5:d2:92:3f:6e:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:99:6F:42:10:27:CC:A4:03:F2:87:9A:1E:F7:77:F6:29:D8:93:3A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/907/J5lvQhAnzKQD8oeaHvd39inYkzo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59050

    Signature Algorithm: sha256WithRSAEncryption
         38:ee:1d:8e:6d:4f:02:65:2c:d9:27:8a:30:f7:2d:90:44:c0:
         94:44:b3:c3:81:de:bb:9d:5c:3b:94:97:dc:bb:57:14:cc:6c:
         c1:33:26:3a:30:25:28:68:0a:b3:58:1c:4d:a7:01:0e:db:c2:
         8e:0d:13:4b:a8:06:7b:dd:0c:bb:cd:71:c5:1b:d7:3e:75:03:
         b0:ca:6c:a2:67:ca:46:75:a2:f4:38:67:36:f7:ea:bf:57:72:
         62:72:5a:51:6f:43:cb:05:c8:4f:30:e5:79:e7:67:41:76:ef:
         44:0f:2e:39:45:5d:15:73:5d:d9:0c:89:7e:98:00:f2:a4:54:
         21:02:15:c6:88:f4:de:20:59:2a:ba:0b:2d:66:b8:57:28:d5:
         2d:4d:33:0d:c5:75:4b:b3:f9:e1:04:db:df:21:7c:f6:a2:28:
         4b:28:be:7d:cc:2a:15:88:c7:9b:ce:d4:e5:17:19:ed:45:5e:
         56:90:24:c7:2a:8d:69:fb:82:14:85:37:7e:1b:38:b2:a7:ab:
         a9:ee:7c:23:ea:50:62:0d:4a:8c:b1:9b:ca:b4:6a:52:b0:9d:
         ab:26:0d:d6:ea:a0:c6:45:03:7f:2e:c1:2b:bb:39:41:f9:d3:
         be:37:8d:e2:4f:9e:5c:23:6f:60:fd:19:4a:5e:bb:2f:7c:a5:
         f1:f5:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 06:01:10 2023 by rpki-client on console-fra.rpki-client.org