Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer
File: PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer (raw, json)
Hash identifier: /nNoUSXew1gtWkcLZmbPPUiGD1gdL+D9bRUWvMXdb4o=
Subject key identifier: 3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AA1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:32:54 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.125.44.0/22
IP: 2403:ed40::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43548 (0xaa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:32:54 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=3CCFAB13B1AFCE6838F33787A8ECBC336A34F943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:a6:36:02:57:02:08:f7:38:f4:2c:95:d8:
3c:66:64:27:c7:e3:07:4e:d9:07:79:ab:02:46:cd:
09:85:2b:b6:66:7a:30:41:8c:74:88:6c:c5:6a:ed:
3c:42:96:93:98:b0:38:e4:c2:53:d1:31:29:d4:c7:
5d:7a:d4:59:3f:a5:ef:2e:e6:1b:2c:72:d3:14:b9:
bd:66:b1:de:0c:86:46:e3:d6:1a:b2:dc:62:4a:67:
74:44:1e:bf:bb:47:32:b2:e9:a7:0d:95:bc:69:3f:
ac:8d:4a:7a:7e:cc:2b:ad:8c:40:b5:e6:54:85:5a:
ca:8d:b6:62:86:8b:57:9d:1a:ef:e0:51:64:eb:40:
32:22:c2:6a:7f:17:1a:02:98:bd:38:ba:1e:10:2b:
39:11:1a:1b:4f:7c:f4:96:5a:0b:7a:0d:ad:71:29:
ac:d0:ba:7e:02:f2:6a:88:9d:87:44:88:28:27:09:
55:52:92:26:c2:8e:56:56:db:d8:fb:31:b8:28:84:
9a:f0:5d:74:76:04:17:30:90:fb:d9:70:b0:3c:62:
a1:44:68:9b:c4:9b:09:7d:4a:ea:41:1d:90:f3:3c:
da:eb:d2:c2:87:29:76:fd:b1:15:22:ea:cc:ed:1e:
c9:ab:a6:ee:be:fe:20:3b:fd:fa:e4:40:08:68:3a:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.44.0/22
IPv6:
2403:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
82:19:52:db:21:e2:64:ee:af:81:b8:9b:62:4c:c4:bf:e4:8e:
d8:77:3a:70:ec:a4:bc:16:69:81:4e:8b:33:e4:eb:ca:8b:25:
30:4b:e5:05:9e:f0:8c:a2:58:31:11:6c:a9:40:2f:3a:ac:14:
13:5d:2b:42:47:ae:94:2b:12:a9:ae:13:68:8a:fe:e4:ae:a3:
a5:9b:dd:33:fa:c3:94:a2:14:f6:ac:19:e0:fa:a4:52:2a:aa:
2b:af:f3:17:b1:37:a0:c9:19:1e:09:37:ed:05:b0:1a:aa:59:
85:6c:cd:74:f4:07:b8:0d:4f:d5:87:9e:dd:9a:64:f7:c3:aa:
cd:01:ba:fd:90:cd:0b:76:1f:bf:7f:56:37:f7:c9:f9:5b:53:
e4:70:3f:13:99:d9:5f:b9:d1:c9:f9:ee:0d:b4:84:a2:a1:a7:
4b:b4:24:05:b7:57:60:c5:7e:31:a6:75:a1:ca:68:c6:e9:b3:
f0:4d:58:74:4e:d2:72:79:6e:02:64:df:6f:1c:ef:7e:fa:47:
12:21:af:54:21:08:33:68:df:0b:b4:74:ca:71:54:53:14:99:
96:40:47:24:90:20:20:ba:e6:a6:30:f3:ed:b2:b5:76:8c:28:
87:6b:a7:23:a8:11:09:eb:f3:20:ce:3f:56:36:82:4d:d4:00:
00:b6:a0:84
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDAKocMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzEwMDkwMDMyNTRaFw0yNDEwMDgwMDE2MzNaMDMx
MTAvBgNVBAMTKDNDQ0ZBQjEzQjFBRkNFNjgzOEYzMzc4N0E4RUNCQzMzNkEzNEY5
NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3z6Y2AlcCCPc49CyV
2DxmZCfH4wdO2Qd5qwJGzQmFK7ZmejBBjHSIbMVq7TxClpOYsDjkwlPRMSnUx116
1Fk/pe8u5hssctMUub1msd4Mhkbj1hqy3GJKZ3REHr+7RzKy6acNlbxpP6yNSnp+
zCutjEC15lSFWsqNtmKGi1edGu/gUWTrQDIiwmp/FxoCmL04uh4QKzkRGhtPfPSW
Wgt6Da1xKazQun4C8mqInYdEiCgnCVVSkibCjlZW29j7MbgohJrwXXR2BBcwkPvZ
cLA8YqFEaJvEmwl9SupBHZDzPNrr0sKHKXb9sRUi6sztHsmrpu6+/iA7/frkQAho
Or/ZAgMBAAGjggJkMIICYDAdBgNVHQ4EFgQUPM+rE7Gvzmg48zeHqOy8M2o0+UMw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4
MjgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjgyOC9QTS1yRTdHdnptZzQ4emVIcU95OE0ybzAtVU0ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ30sMA0EAgACMAcDBQAkA+1A
MA0GCSqGSIb3DQEBCwUAA4IBAQCCGVLbIeJk7q+BuJtiTMS/5I7Ydzpw7KS8FmmB
Tosz5OvKiyUwS+UFnvCMolgxEWypQC86rBQTXStCR66UKxKprhNoiv7krqOlm90z
+sOUohT2rBng+qRSKqorr/MXsTegyRkeCTftBbAaqlmFbM109Ae4DU/Vh57dmmT3
w6rNAbr9kM0Ldh+/f1Y398n5W1PkcD8TmdlfudHJ+e4NtISioadLtCQFt1dgxX4x
pnWhymjG6bPwTVh0TtJyeW4CZN9vHO9++kcSIa9UIQgzaN8LtHTKcVRTFJmWQEck
kCAguuamMPPtsrV2jCiHa6cjqBEJ6/Mgzj9WNoJN1AAAtqCE
-----END CERTIFICATE-----
Generated at Thu Nov 9 02:03:48 2023 by rpki-client on console-fra.rpki-client.org