Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TeRNpzTsuSX0ghAY-NqLsR3PVdg.cer
File: TeRNpzTsuSX0ghAY-NqLsR3PVdg.cer (raw, json)
Hash identifier: +ipb6QSIBGV/veOh9wZAPdnsIZnVp8icFtfbGwcfwB8=
Subject key identifier: 4D:E4:4D:A7:34:EC:B9:25:F4:82:10:18:F8:DA:8B:B1:1D:CF:55:D8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AA1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/TeRNpzTsuSX0ghAY-NqLsR3PVdg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:32:52 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.240.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43546 (0xaa1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:32:52 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=4DE44DA734ECB925F4821018F8DA8BB11DCF55D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:78:29:9b:30:31:07:6a:6c:a3:31:bb:31:
96:95:d1:01:17:af:d3:99:d3:50:5f:33:a5:89:e6:
0a:e5:a9:88:8d:25:c3:85:5d:16:06:30:6c:d2:e5:
de:53:f6:7c:42:ef:29:bb:d1:8f:8b:c5:57:e3:32:
a9:90:21:c7:e2:eb:38:b8:a8:c4:aa:2f:b2:af:ad:
51:c2:fb:b5:37:0a:2b:4c:f6:1b:86:3c:be:a1:a2:
9a:80:f5:d8:ef:a5:ff:a1:1d:b5:2f:81:69:07:2d:
fc:05:29:66:1e:4d:e7:ee:54:d6:82:77:cf:40:fd:
6e:4c:25:51:c6:3b:6a:0a:2f:98:1e:52:08:c6:2e:
4a:a7:a6:98:ae:af:02:b5:85:04:38:8a:a0:d5:88:
d6:ba:14:28:d7:9b:3a:33:10:65:a1:a2:e2:75:5e:
43:ed:57:b3:ba:48:1c:bb:7d:55:e9:6d:91:a5:6a:
3d:58:f4:6d:a0:16:c2:0e:1a:a3:9c:54:fc:e7:3a:
ea:15:e9:43:04:d2:10:e1:63:f1:1e:89:65:6b:03:
a0:cf:d0:9e:c4:d9:e4:12:d6:42:77:15:58:aa:8b:
d4:98:04:23:02:44:89:86:06:47:d4:59:ed:6a:c9:
d9:58:c8:b5:f2:d5:d3:73:8a:27:9e:28:a4:30:b1:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:4D:A7:34:EC:B9:25:F4:82:10:18:F8:DA:8B:B1:1D:CF:55:D8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/TeRNpzTsuSX0ghAY-NqLsR3PVdg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:77:21:43:f0:fa:8a:cb:17:60:fa:58:5b:bb:8e:ae:a1:d7:
38:2b:8e:83:9b:94:0b:81:c6:29:14:24:84:9e:5c:2c:69:c2:
fb:de:65:12:83:dc:8b:b1:c7:a0:fa:6c:c3:11:32:38:a9:4d:
fb:e0:e2:d8:43:8f:6d:1e:aa:ef:84:eb:0d:39:44:fd:1f:ec:
b7:23:e1:32:06:02:cc:ff:c9:2d:8c:c4:8f:d8:03:0e:7a:f2:
14:9a:1f:e4:4a:c1:54:74:c9:ce:61:09:43:31:f5:b1:2b:54:
5a:e3:6c:75:ad:60:ce:72:d5:26:60:94:74:e2:b7:5c:5e:ac:
a5:9b:29:99:7e:c6:b3:b8:4e:d8:58:f2:6f:23:e4:d0:07:3d:
cf:84:ab:c5:5f:fd:c4:6a:a2:90:cf:eb:21:23:4f:8c:cf:f5:
cd:73:e5:14:85:76:ad:c4:c0:c4:b8:e6:e4:27:78:18:96:14:
b5:75:64:44:20:77:f8:7d:26:00:0e:c9:e9:50:1a:d4:5f:67:
07:a6:7c:cd:8f:f5:cf:ed:d2:0b:fc:2c:d4:63:ea:2a:36:a3:
ef:c1:fb:02:f9:4a:ad:9f:19:b1:46:d9:c3:71:36:eb:70:77:
35:f7:61:9b:1c:cb:aa:e0:b9:66:cc:f2:dd:b2:44:8a:c6:3a:
04:22:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:47 2024 by rpki-client on console-fra.rpki-client.org