Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NJtamVn9EvndSwGEz41q1msimH4.cer
File: NJtamVn9EvndSwGEz41q1msimH4.cer (raw, json)
Hash identifier: IGAvWt/zj8vtKIFHWgPgkUMkNuM2bniy/2zGSUB4OuU=
Subject key identifier: 34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 382C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 08 Oct 2024 19:49:05 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 157.10.36.0/23
Validation: Failed, certificate revoked on Thu 16 Jan 2025 08:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14380 (0x382c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Oct 8 19:49:05 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=349B5A9959FD12F9DD4B0184CF8D6AD66B22987E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:23:a8:50:a1:be:43:74:91:89:15:8c:b3:
bd:b9:60:20:b8:9f:1b:53:94:4d:ec:69:09:d8:ba:
97:6f:df:8a:26:56:7c:cb:b4:46:31:b4:6b:94:f7:
1f:68:78:7b:8b:19:00:0b:2c:8d:45:77:07:24:ec:
f9:1a:9a:4c:a4:72:08:f9:4a:81:d9:4c:f0:c4:69:
9b:61:e7:81:61:48:cc:dd:0c:82:99:ea:5b:ac:d8:
12:7c:b5:34:30:dd:8e:0e:a2:ee:2b:57:86:48:f1:
74:99:bc:00:ff:ff:f8:16:b4:55:fb:db:f8:52:53:
10:ec:3d:10:82:34:24:69:cb:16:15:fa:51:04:c5:
61:a3:36:a6:04:c7:63:d4:7b:b5:f8:08:0d:26:16:
70:66:86:19:04:98:e3:7c:43:70:96:37:9a:08:d4:
9a:1e:4a:c7:9d:ea:64:fc:9d:4c:83:d5:b2:03:df:
05:d0:51:0a:31:6f:18:f1:4a:77:2b:03:a0:73:44:
be:ee:bf:f4:f8:80:36:db:eb:5f:7b:7e:0e:43:37:
22:41:96:56:4c:2c:dc:b3:f6:9a:9d:42:4d:4e:a2:
1b:30:7c:f6:3d:61:e3:7e:b0:a5:2b:e5:34:62:3d:
d9:68:64:dd:81:88:61:ab:72:78:a1:70:3e:b5:7b:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:5A:99:59:FD:12:F9:DD:4B:01:84:CF:8D:6A:D6:6B:22:98:7E
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3253/NJtamVn9EvndSwGEz41q1msimH4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.36.0/23
Signature Algorithm: sha256WithRSAEncryption
51:33:36:49:a3:3b:1e:c0:f9:36:ce:96:91:32:4c:27:6a:bb:
00:be:22:24:88:47:58:9d:2f:39:fa:fd:fc:a4:73:27:17:54:
e3:87:9b:10:e3:cd:d5:2c:0e:62:22:f8:d1:91:e6:ed:7b:6f:
2a:fc:98:4c:d3:b9:70:9f:fb:bf:b9:e5:cf:76:d5:a0:23:15:
ec:39:c9:44:b9:3c:8a:f2:00:9f:62:52:a3:75:72:85:2c:e2:
6c:f1:ed:5e:99:ca:84:7e:89:16:09:a8:4e:8c:2a:9b:92:a3:
b4:e5:3c:82:b3:48:a5:b9:ed:e6:61:3f:b7:47:68:b5:db:a5:
df:8e:a2:2a:41:89:14:ac:c1:9f:c2:9a:ca:e7:3b:4d:5d:ed:
71:c1:2e:54:cb:af:bd:a9:3b:82:7b:bf:2a:03:3f:b1:c3:cb:
b4:a1:6b:47:9f:f9:30:ca:29:25:b1:55:88:1d:f1:1d:d5:42:
ee:c5:48:f0:00:42:c3:3c:e4:35:03:13:7a:c3:42:10:f9:aa:
50:15:d9:fc:0a:e9:c7:1b:73:0a:9b:5c:9a:a8:96:3e:17:5b:
1d:d1:2e:f8:eb:0f:2c:a7:4e:ef:f5:c5:53:13:61:c0:7f:04:
ad:0c:cf:c6:7b:07:36:48:3f:ae:52:69:41:aa:38:0c:aa:2d:
2f:c0:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:19 2025 by rpki-client