Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q9LyUD904KH3KxBUoP3rv1vOEPU.cer
File: Q9LyUD904KH3KxBUoP3rv1vOEPU.cer (raw, json)
Hash identifier: 9HHyi58TMGRDw7/4GVFFb2N8P0ZQ0CKV/98t39pI8Z8=
Subject key identifier: 43:D2:F2:50:3F:74:E0:A1:F7:2B:10:54:A0:FD:EB:BF:5B:CE:10:F5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A9F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:32:00 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.204.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43506 (0xa9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:32:00 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=43D2F2503F74E0A1F72B1054A0FDEBBF5BCE10F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:65:61:8c:b3:2d:ee:dd:a0:60:14:07:41:
ae:1e:82:ee:d1:70:11:49:32:73:5c:db:44:9f:26:
c5:20:ee:ef:b0:e8:d4:1d:11:8b:1e:26:3b:43:d0:
4f:14:1b:d9:b4:74:30:a4:c5:3b:c7:bc:90:09:f9:
46:91:24:a4:94:49:31:bb:5d:77:8f:3f:70:2f:5c:
b3:9b:63:50:cb:97:3f:5e:45:79:4a:4d:b9:cb:82:
6e:4e:3f:66:58:a0:94:98:58:e3:73:ca:c8:78:6e:
fa:04:47:56:ec:5a:12:7e:cd:48:07:cc:a8:69:27:
81:0c:9a:ea:f5:f8:fc:61:54:34:af:f5:4a:96:9c:
82:97:d7:25:58:38:c6:65:da:80:43:be:70:70:1f:
e4:3e:d9:3d:07:b7:0b:50:fd:40:f4:88:38:ec:ee:
29:0c:0c:88:e0:6e:40:48:69:d3:c9:17:4b:87:3c:
a8:97:d7:5b:06:a0:81:42:9a:76:58:a1:11:d1:45:
c1:86:48:ff:0b:a3:5c:0c:f3:42:58:ae:e0:0f:52:
9e:81:7c:64:0e:99:d4:ee:17:2e:35:b0:f5:02:ca:
c4:7b:fb:a9:51:54:5c:cf:19:c9:7d:4a:81:ab:00:
2c:82:74:c2:10:39:88:0f:8a:fe:36:1a:03:aa:ed:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:F2:50:3F:74:E0:A1:F7:2B:10:54:A0:FD:EB:BF:5B:CE:10:F5
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/Q9LyUD904KH3KxBUoP3rv1vOEPU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:6d:4d:f8:46:3e:1c:0b:b1:94:b9:d7:40:49:22:5d:3a:0e:
7b:b4:ef:f5:d8:e9:4b:f2:ae:9a:de:e6:96:2f:b0:aa:99:40:
28:66:db:60:9b:f1:13:43:e0:ac:3f:c4:5c:52:6a:6f:a5:6f:
1f:a8:c3:6f:84:0d:9c:a4:5c:ef:cc:46:a5:38:54:3b:1f:d1:
4e:99:06:d7:1c:aa:70:60:2f:58:87:e7:c4:29:7c:de:b2:24:
73:b3:3a:c4:67:44:31:25:52:0b:31:a3:36:e6:8a:34:6e:2f:
e6:b8:b7:f4:be:fe:14:37:02:c0:6c:d3:de:64:8b:2c:ca:10:
de:25:42:e6:b1:d0:c6:0b:57:5d:34:40:c7:2e:c7:fe:33:a7:
5e:8c:d4:52:e3:5d:dd:94:ba:1e:c0:a9:a4:a7:14:04:42:b2:
cc:41:dd:9b:2d:05:e7:bf:62:46:2f:0a:f7:cf:ee:d1:fe:10:
49:07:67:e5:4c:31:e6:dd:57:b4:b5:de:b0:68:12:89:79:e4:
26:b4:26:f6:02:c7:79:a5:5b:3c:b0:6d:eb:56:ed:7d:b5:55:
9a:69:f2:d8:96:58:fc:9c:bf:4e:bf:57:f6:b8:2b:4b:02:12:
af:14:5e:07:88:eb:88:df:74:ba:61:9b:d1:ee:fd:63:ae:9e:
9c:ff:ce:1c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAKnyMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzEwMDkwMDMyMDBaFw0yNDEwMDgwMDE2MzNaMDMx
MTAvBgNVBAMTKDQzRDJGMjUwM0Y3NEUwQTFGNzJCMTA1NEEwRkRFQkJGNUJDRTEw
RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeWVhjLMt7t2gYBQH
Qa4egu7RcBFJMnNc20SfJsUg7u+w6NQdEYseJjtD0E8UG9m0dDCkxTvHvJAJ+UaR
JKSUSTG7XXePP3AvXLObY1DLlz9eRXlKTbnLgm5OP2ZYoJSYWONzysh4bvoER1bs
WhJ+zUgHzKhpJ4EMmur1+PxhVDSv9UqWnIKX1yVYOMZl2oBDvnBwH+Q+2T0HtwtQ
/UD0iDjs7ikMDIjgbkBIadPJF0uHPKiX11sGoIFCmnZYoRHRRcGGSP8Lo1wM80JY
ruAPUp6BfGQOmdTuFy41sPUCysR7+6lRVFzPGcl9SoGrACyCdMIQOYgPiv42GgOq
7ZF7AgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUQ9LyUD904KH3KxBUoP3rv1vOEPUw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3
NjUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjc2NS9ROUx5VUQ5MDRLSDNLeEJVb1AzcnYxdk9FUFUubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3bMMA0GCSqGSIb3DQEBCwUA
A4IBAQCxbU34Rj4cC7GUuddASSJdOg57tO/12OlL8q6a3uaWL7CqmUAoZttgm/ET
Q+CsP8RcUmpvpW8fqMNvhA2cpFzvzEalOFQ7H9FOmQbXHKpwYC9Yh+fEKXzesiRz
szrEZ0QxJVILMaM25oo0bi/muLf0vv4UNwLAbNPeZIssyhDeJULmsdDGC1ddNEDH
Lsf+M6dejNRS413dlLoewKmkpxQEQrLMQd2bLQXnv2JGLwr3z+7R/hBJB2flTDHm
3Ve0td6waBKJeeQmtCb2Asd5pVs8sG3rVu19tVWaafLYllj8nL9Ov1f2uCtLAhKv
FF4HiOuI33S6YZvR7v1jrp6c/84c
-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org