Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZRcvdabhV5dnqOKKm00Sd_X2HmI.cer
File: ZRcvdabhV5dnqOKKm00Sd_X2HmI.cer (raw, json)
Hash identifier: W1Bc5VraJdMsFpQJQ5gJ5kvODeWNmlJzWiTJ0MvQdic=
Subject key identifier: 65:17:2F:75:A6:E1:57:97:67:A8:E2:8A:9B:4D:12:77:F5:F6:1E:62
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A9C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:30:47 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.115.40.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43456 (0xa9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:30:47 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=65172F75A6E1579767A8E28A9B4D1277F5F61E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:3d:3a:5a:df:2d:76:76:94:fe:76:6f:79:
a3:af:36:a2:df:4e:23:e4:ca:ff:2b:28:20:22:f2:
3a:8a:bf:c9:f5:0f:94:12:07:62:c5:0f:6d:6e:07:
f6:b2:8f:dd:d2:4b:d1:b3:3c:c4:d6:c0:24:c9:06:
b5:d2:47:c0:3d:92:61:f1:d5:24:43:8d:c7:63:6d:
1c:9d:50:72:93:7b:2f:0a:47:94:4b:26:d3:50:2d:
85:24:ef:22:b2:1e:70:0c:20:c5:b6:12:55:f7:29:
11:98:91:81:2a:2c:54:8f:a2:e3:81:62:06:26:f4:
44:57:8f:35:c1:72:2b:c4:9d:67:9a:ba:a5:0a:80:
e3:1d:a4:78:38:d0:3d:49:0d:72:d6:50:31:4e:37:
61:43:f3:ae:68:d3:d0:bd:be:c8:aa:3b:45:fe:3f:
96:47:f0:54:6f:06:f5:ee:42:8f:2e:4d:f4:40:71:
b9:85:af:99:64:f2:f3:eb:34:db:df:47:e4:56:b5:
a1:77:bb:97:55:a4:db:29:51:3c:10:de:d2:17:54:
c6:8e:09:b3:c8:59:39:d7:b0:d3:11:66:da:77:88:
de:45:5a:be:d3:1a:f5:8a:9e:ea:13:5d:e2:99:e3:
59:4b:9c:01:e2:44:bd:a8:16:09:b9:c4:0d:56:43:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:2F:75:A6:E1:57:97:67:A8:E2:8A:9B:4D:12:77:F5:F6:1E:62
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2724/ZRcvdabhV5dnqOKKm00Sd_X2HmI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:04:99:be:9d:e7:86:dd:cc:8b:17:09:7a:29:5c:3e:53:f7:
f2:39:d1:02:de:ec:91:ac:c9:6a:c7:c8:a5:34:4a:e7:6c:95:
54:43:40:cd:12:0d:de:b9:a5:e1:97:2f:aa:ee:a1:54:45:a6:
3d:ee:ca:d4:32:bc:bb:3c:f5:cf:6b:77:69:81:bc:cc:3a:93:
f0:09:8e:ef:9d:a8:f4:97:a8:75:c4:06:37:20:56:c5:b7:f9:
28:aa:9d:a0:bf:35:e7:68:e1:23:c6:e0:fd:b8:c7:b7:38:65:
45:58:6b:09:20:84:d1:a9:37:a8:b8:b1:21:6d:9d:02:8f:9a:
f9:f8:27:27:0a:82:fe:c0:98:8e:ed:ab:e4:05:0a:96:9f:22:
86:fb:e2:ba:cf:d2:8c:06:54:32:39:eb:4a:c8:6e:b0:62:ca:
ac:51:ee:f1:9b:9c:87:f5:cd:e7:c8:ff:4d:c9:f3:73:1a:90:
ea:fa:ba:52:96:52:39:11:ef:73:76:10:6b:4f:ed:cb:f9:b1:
ae:a6:19:fa:97:e7:ea:60:52:93:6c:8b:b1:23:32:bd:7b:5e:
fa:e1:40:c5:fc:fc:5b:00:04:9c:1b:55:df:a5:04:6e:0a:3e:
63:b6:2f:d6:60:ab:88:df:d5:37:fc:91:22:7b:13:d3:b7:fa:
ab:43:3e:68
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAKnAMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzEwMDkwMDMwNDdaFw0yNDEwMDgwMDE2MzNaMDMx
MTAvBgNVBAMTKDY1MTcyRjc1QTZFMTU3OTc2N0E4RTI4QTlCNEQxMjc3RjVGNjFF
NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgwj06Wt8tdnaU/nZv
eaOvNqLfTiPkyv8rKCAi8jqKv8n1D5QSB2LFD21uB/ayj93SS9GzPMTWwCTJBrXS
R8A9kmHx1SRDjcdjbRydUHKTey8KR5RLJtNQLYUk7yKyHnAMIMW2ElX3KRGYkYEq
LFSPouOBYgYm9ERXjzXBcivEnWeauqUKgOMdpHg40D1JDXLWUDFON2FD865o09C9
vsiqO0X+P5ZH8FRvBvXuQo8uTfRAcbmFr5lk8vPrNNvfR+RWtaF3u5dVpNspUTwQ
3tIXVMaOCbPIWTnXsNMRZtp3iN5FWr7TGvWKnuoTXeKZ41lLnAHiRL2oFgm5xA1W
Q1BlAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUZRcvdabhV5dnqOKKm00Sd/X2HmIw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3
MjQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjcyNC9aUmN2ZGFiaFY1ZG5xT0tLbTAwU2RfWDJIbUkubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3MoMA0GCSqGSIb3DQEBCwUA
A4IBAQB+BJm+neeG3cyLFwl6KVw+U/fyOdEC3uyRrMlqx8ilNErnbJVUQ0DNEg3e
uaXhly+q7qFURaY97srUMry7PPXPa3dpgbzMOpPwCY7vnaj0l6h1xAY3IFbFt/ko
qp2gvzXnaOEjxuD9uMe3OGVFWGsJIITRqTeouLEhbZ0Cj5r5+CcnCoL+wJiO7avk
BQqWnyKG++K6z9KMBlQyOetKyG6wYsqsUe7xm5yH9c3nyP9NyfNzGpDq+rpSllI5
Ee9zdhBrT+3L+bGuphn6l+fqYFKTbIuxIzK9e1764UDF/PxbAAScG1XfpQRuCj5j
ti/WYKuI39U3/JEiexPTt/qrQz5o
-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:47 2024 by rpki-client on console-fra.rpki-client.org