Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/RJpQT3nXJOzx6WVmF_zt18KosAk.cer
File:                     RJpQT3nXJOzx6WVmF_zt18KosAk.cer (raw, json)
Hash identifier:          V6HRfes2Wvhq/WnI41RSVwxlotVkKXKi/hox79Fcer0=
Subject key identifier:   44:9A:50:4F:79:D7:24:EC:F1:E9:65:66:17:FC:ED:D7:C2:A8:B0:09
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       A93C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 09 Oct 2023 00:27:49 +0000
Certificate not after:    Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources:    AS: 137764
                          IP: 103.105.200.0/22
                          IP: 2403:5e40::/32

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 02:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43324 (0xa93c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 00:27:49 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=449A504F79D724ECF1E9656617FCEDD7C2A8B009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:7f:54:f7:69:95:cc:e7:f7:dd:57:08:35:
                    29:d0:07:d9:48:39:c5:15:24:73:1e:7d:93:b1:2e:
                    2c:24:76:cf:19:95:4e:4c:23:f3:ea:84:bc:79:5d:
                    d5:1a:99:ee:fe:14:24:61:0e:21:2a:3b:90:aa:38:
                    e7:1a:6f:95:60:2c:a4:37:1f:07:5d:a9:d6:a5:cb:
                    1f:6d:80:8d:af:22:3a:10:6e:36:20:85:6d:f0:f6:
                    69:5d:72:c9:60:f9:16:9f:f6:4d:2a:f1:c2:92:f8:
                    ea:fc:f8:e3:ed:67:d7:dd:16:66:bb:a9:01:bf:1b:
                    c1:ce:e9:51:67:f4:5a:e8:1e:9f:e6:ad:8c:97:63:
                    e7:0d:8f:c2:c4:9d:51:6b:d3:90:f7:29:48:a5:f8:
                    35:31:f8:f2:15:3b:cb:c1:b7:5b:48:d3:61:01:28:
                    61:89:ce:7d:7d:cc:ab:4f:f1:74:bd:92:0b:5d:9a:
                    05:d1:56:ba:b8:61:d1:d0:77:f5:4a:8e:18:f7:16:
                    b7:10:b7:54:bb:53:a4:2e:38:f8:f8:27:cc:03:e8:
                    9d:a1:c1:fb:2b:37:dc:74:5b:99:60:78:ba:72:35:
                    ff:bc:e0:ec:39:23:07:5e:b3:16:ec:b3:69:d1:05:
                    09:a2:ca:f2:30:99:57:10:8f:1a:c6:3e:55:ee:6d:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:50:4F:79:D7:24:EC:F1:E9:65:66:17:FC:ED:D7:C2:A8:B0:09
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2646/RJpQT3nXJOzx6WVmF_zt18KosAk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137764

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.200.0/22
                IPv6:
                  2403:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:03:bf:23:ed:2e:04:f4:b4:be:6e:6a:06:5b:c8:54:f3:
         8c:b1:4b:cd:c7:ea:38:e0:46:1a:2e:be:94:2b:80:6d:af:41:
         11:6c:9f:0d:76:6e:c9:8b:30:72:d9:3c:93:c5:af:9a:f3:6e:
         65:06:d8:6c:da:7f:4e:37:e7:8c:7c:df:e2:83:bf:04:25:0c:
         e0:b1:16:e2:43:bf:33:c6:30:df:30:12:25:69:80:b8:6d:06:
         c2:38:1e:35:c8:67:04:cd:8b:f7:3a:d4:b8:18:ff:27:d3:75:
         c5:92:3c:79:82:c6:8e:94:06:3b:7d:13:4d:df:f2:1a:77:fe:
         7b:38:24:fb:f2:ad:56:43:75:fe:3c:53:60:50:99:b0:c3:a4:
         8a:83:ba:e1:83:57:a2:75:d6:eb:dd:26:54:1b:ff:5a:48:11:
         e2:93:89:3d:2a:28:43:53:4b:9a:c3:ef:4d:33:15:7b:5b:35:
         8e:07:32:e5:14:e8:4b:09:32:c3:73:b0:5e:31:0c:7d:68:a6:
         1f:c3:52:24:dd:ce:96:a6:2d:1d:bc:f3:e9:b5:c8:e4:5f:32:
         e9:7c:5a:ad:8a:6f:1c:2d:56:13:02:b6:dc:96:05:c1:85:7a:
         10:f9:0e:8a:6a:30:4f:cb:38:e9:f9:44:d2:83:36:bf:ab:b9:
         38:04:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 05:45:22 2024 by rpki-client on console-ams.rpki-client.org