Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fGB6Q9NZ27uFmakg2TJLq7x-NAE.cer
File: fGB6Q9NZ27uFmakg2TJLq7x-NAE.cer (raw, json)
Hash identifier: 2B2+fjlaIkXAhOJ641pE42ifhO7pGhQpUYFKgGETTOI=
Subject key identifier: 7C:60:7A:43:D3:59:DB:BB:85:99:A9:20:D9:32:4B:AB:BC:7E:34:01
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AA40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:33:45 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.200.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43584 (0xaa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:33:45 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=7C607A43D359DBBB8599A920D9324BABBC7E3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:31:83:2a:31:e4:5b:17:c6:e3:0f:8f:49:
bc:d8:8f:bb:55:29:51:b7:96:35:6a:20:21:3b:3c:
84:38:df:4e:c2:54:25:14:1f:8e:41:86:bd:d9:25:
68:a4:35:4f:d4:cc:81:8c:88:1e:27:6a:86:9c:91:
5e:87:29:81:ae:66:a0:f4:7b:44:25:ae:8d:2d:91:
ab:05:7e:9d:8b:24:e3:14:2e:9e:dd:b0:b5:94:ce:
10:02:6c:2a:d8:2e:22:45:62:b7:7d:9f:c5:0c:91:
24:e9:34:1f:88:e8:e1:67:38:e0:d4:5b:8e:05:fb:
02:fe:45:7b:6b:0b:80:73:18:d6:81:ae:b5:27:13:
ef:ed:2a:4b:d2:10:32:77:23:b7:4c:14:03:bb:aa:
3b:8f:ba:c7:82:20:44:36:ce:8c:0a:fd:f1:42:f8:
90:2d:dc:bd:b9:1f:89:af:e3:8a:ee:3e:c8:4e:8b:
e9:5e:53:a6:33:ce:70:f7:8e:5c:b6:76:e2:e9:05:
e6:a3:57:01:6d:57:c2:62:f6:2e:56:fd:19:99:3e:
2e:bc:e3:49:6d:94:54:83:96:86:8a:3f:02:9c:72:
12:c8:2a:dc:ec:5f:49:0a:37:d8:c0:4b:44:7e:33:
86:ce:a3:28:c8:b1:9a:65:cd:58:60:bc:1f:15:5e:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:7A:43:D3:59:DB:BB:85:99:A9:20:D9:32:4B:AB:BC:7E:34:01
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2764/fGB6Q9NZ27uFmakg2TJLq7x-NAE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ef:08:f7:ae:bd:d6:5d:20:3d:16:b5:28:46:a2:58:9a:6f:
c5:96:76:81:eb:4e:43:bc:ec:d3:df:54:17:02:57:46:9b:4b:
84:5c:c2:ac:51:cd:10:c4:80:db:1f:45:3f:e1:3e:66:35:75:
c2:03:08:4b:b1:0b:1c:4e:30:ff:92:36:f9:16:4b:bf:30:d5:
a4:f8:8e:9a:a4:54:54:cc:5a:03:7a:45:aa:a0:3e:21:38:38:
83:b0:f0:13:6a:c9:7a:a3:93:fa:08:93:13:c7:f5:bb:ca:b5:
d8:5e:a2:2f:87:a2:aa:2b:7c:1b:d0:98:f1:6c:fd:1c:2f:50:
0d:85:11:6c:3a:7f:44:f0:5d:19:fc:39:99:a6:fd:0f:54:6b:
1d:67:1c:d2:39:72:e0:51:2c:04:02:18:8c:f6:1f:d3:38:77:
a9:ab:55:1c:d6:6d:38:51:30:c3:dc:b6:15:71:33:ce:ad:29:
37:ed:30:9f:2a:49:dc:06:4b:a9:d4:5f:a2:f7:4f:53:82:75:
59:05:8a:be:d9:a4:86:12:aa:b0:f9:e8:14:e7:3b:8f:59:f3:
fc:c2:10:1d:9e:00:a1:dd:e3:c9:d5:ad:73:dc:dd:d7:dd:dd:
e0:76:fa:8a:9e:82:01:47:60:eb:da:3d:74:0f:26:1e:c3:8c:
a2:0c:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org