Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VoKIT85VvbmANvm0NTn3xMwIg9M.cer
File: VoKIT85VvbmANvm0NTn3xMwIg9M.cer (raw, json)
Hash identifier: II4V0GiJkI2WqPvkjOVsdKO8Kz0f0pAT2JT/an0C+jw=
Subject key identifier: 56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A9CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:31:02 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.220.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43468 (0xa9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:31:02 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=5682884FCE55BDB98036F9B43539F7C4CC0883D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:c8:a6:17:22:5d:89:76:ad:b0:4a:20:07:
be:49:49:d9:6c:9d:d7:56:2b:b1:d6:f7:f1:29:a2:
51:f1:0d:6f:ff:2e:dd:78:b9:26:8f:a7:0d:22:10:
b6:23:33:cd:f1:f9:63:ea:f5:b7:af:11:ef:31:2f:
f4:5e:3d:d3:17:ea:c9:a2:d6:12:62:cd:1b:fd:f7:
eb:30:57:b2:50:02:53:0c:60:1e:69:0b:3f:9e:76:
79:4d:5d:8c:cc:22:ab:9a:a1:fa:e3:bd:14:c7:ce:
9b:ef:93:54:3e:3f:5f:ef:48:30:55:f8:ea:10:9f:
84:1a:43:61:10:03:3a:e9:26:45:f8:7c:b7:07:3b:
20:81:bd:6f:fa:5d:1d:0b:12:6e:5f:cc:49:42:37:
b4:38:64:0b:bb:6b:d8:3e:95:3e:da:3e:9a:23:05:
6c:ef:92:43:0a:b7:76:db:ce:68:7d:2a:81:f6:39:
57:2f:04:ed:91:cf:05:dd:34:fd:c6:df:b4:32:c9:
7f:2d:5d:61:c4:67:bb:c7:b2:ae:9a:b3:56:d8:6d:
9f:d1:05:12:8c:69:89:a4:ad:71:cf:74:ad:62:56:
30:7a:a8:55:3c:f0:ed:20:e6:a1:0d:c7:9c:7b:65:
a4:cb:b0:66:d4:b4:7e:91:c4:98:2c:14:01:d9:3c:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:82:88:4F:CE:55:BD:B9:80:36:F9:B4:35:39:F7:C4:CC:08:83:D3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2769/VoKIT85VvbmANvm0NTn3xMwIg9M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.220.0/22
Signature Algorithm: sha256WithRSAEncryption
61:10:8a:84:ed:76:bf:a7:08:a9:c2:19:dd:82:01:94:ca:84:
13:da:d1:b1:54:b9:78:a3:11:7f:ed:76:30:d2:0b:0c:0a:dd:
2a:d4:cf:1e:39:a6:b7:c9:be:e8:8c:fd:2d:ae:c4:33:d6:bc:
fb:ae:60:8f:a7:81:fb:e2:7f:80:7b:43:bb:cc:e6:f6:58:73:
0b:69:88:8b:db:13:2d:99:a2:88:53:5c:a1:c5:29:62:3c:c8:
0b:de:14:6c:1d:2f:e7:83:78:37:7c:8a:46:ac:06:ab:5c:fc:
0a:b2:c4:bb:10:fa:42:7f:a7:0a:d8:6b:bd:c0:22:48:40:0c:
a1:34:82:fc:4d:f0:c3:0b:59:de:56:57:55:9a:d8:4c:b5:a0:
b8:6e:8f:bf:f1:d3:fb:0a:01:10:8d:fa:61:9a:c5:56:e1:69:
53:f9:a5:c7:31:68:32:e1:53:d9:08:10:de:ba:20:e4:e9:ca:
7c:58:76:e3:e6:25:c9:4d:a2:9b:21:2a:2b:e1:ba:4b:02:16:
0e:d0:73:71:a4:7b:f8:60:69:9a:c0:b1:b3:ea:d7:48:fc:30:
98:ce:a8:30:ad:83:16:e2:42:12:75:48:a0:f5:87:72:ae:a9:
45:7d:c0:92:1c:b1:4c:d0:c3:bb:06:2a:c3:2a:ab:d0:b5:c9:
e1:2a:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org