Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fJpQcXYyvL3CuTYLuDUmQcbZGMs.cer
File:                     fJpQcXYyvL3CuTYLuDUmQcbZGMs.cer (raw, json)
Hash identifier:          EkmvVbeA/dNV3bEd9beQ92LCjliUEiWkd5uQ4fadVjM=
Subject key identifier:   7C:9A:50:71:76:32:BC:BD:C2:B9:36:0B:B8:35:26:41:C6:D9:18:CB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AA06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/fJpQcXYyvL3CuTYLuDUmQcbZGMs.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 09 Oct 2023 00:32:26 +0000
Certificate not after:    Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources:    IP: 103.115.60.0/22

Validation:               Failed, certificate revoked on Sun 14 Jan 2024 23:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43526 (0xaa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 00:32:26 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=7C9A50717632BCBDC2B9360BB8352641C6D918CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:7c:4c:03:cb:77:d4:d4:56:76:b9:89:b2:
                    46:30:d2:bd:c2:0b:d3:26:4a:12:56:c8:9f:be:e8:
                    4d:bf:d6:6b:3a:6c:24:89:cd:da:92:5b:94:ba:19:
                    ef:01:79:e0:73:ff:f5:6d:ac:24:ac:a2:38:48:f5:
                    b4:62:17:f0:1a:28:2d:30:f1:6d:0a:97:0b:e3:49:
                    3b:7d:e0:04:39:70:01:2b:40:51:4a:60:9e:4e:d0:
                    f9:96:61:e3:5d:00:87:ce:b7:92:e9:27:f4:f7:dc:
                    9e:7a:d1:53:9c:4a:96:9b:3f:fd:2a:45:6e:6a:8f:
                    df:55:42:76:ba:3f:d9:9c:03:fd:7e:34:2b:46:d4:
                    a4:9e:fc:45:67:19:b4:bc:7b:e2:f2:66:a3:b2:fb:
                    0d:dd:6f:f7:3f:3b:34:21:24:cd:88:ed:63:c1:11:
                    a3:3b:a0:2f:3f:8c:62:16:41:d6:7a:9d:6b:0d:11:
                    a9:45:9d:46:e9:98:1d:38:da:10:ff:1f:5b:13:25:
                    f2:c2:4c:c4:62:d1:a3:2f:a5:1a:fe:f8:3b:12:a1:
                    c0:79:1b:3e:a7:d4:42:de:04:5f:87:31:62:d2:74:
                    0a:99:5d:02:78:23:63:9a:9c:15:b6:2e:04:4e:1d:
                    18:31:17:85:12:90:89:55:40:e1:04:d8:fe:17:71:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:50:71:76:32:BC:BD:C2:B9:36:0B:B8:35:26:41:C6:D9:18:CB
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/fJpQcXYyvL3CuTYLuDUmQcbZGMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:7e:ea:c3:bf:56:d3:c8:09:4b:25:e7:4a:b8:88:ec:ea:
         ab:cb:e4:65:82:6b:05:e6:9f:ce:7a:75:0d:7e:72:37:61:12:
         c2:00:cd:52:9e:3b:6f:8e:ad:8b:56:37:99:f0:bd:9b:ed:5d:
         8d:58:d5:9b:14:95:ff:ca:7b:46:63:54:58:aa:46:0b:67:b4:
         25:7e:7a:cf:8d:3c:1f:3c:26:fa:a8:4b:77:3e:24:8a:65:b6:
         8a:7e:03:9b:78:c3:ac:85:6d:28:ae:e2:7d:fa:f1:39:93:2d:
         36:f2:ea:99:e2:79:9e:d1:3a:07:46:0f:82:c1:e4:2c:52:94:
         08:ea:62:a7:9e:27:6b:d0:0f:4b:8e:43:08:b1:d1:3e:f0:55:
         8d:77:36:ea:f3:ef:3f:a7:23:8b:ba:b0:5b:2d:28:ba:81:38:
         aa:00:89:2a:9c:0e:fc:7e:10:b0:a5:1b:04:77:80:90:fb:f8:
         7a:20:40:48:48:32:ca:48:a0:c5:88:ca:b9:e2:a9:1e:b2:0d:
         0e:92:3a:60:c2:73:a3:d7:da:e0:07:29:19:46:52:69:8f:31:
         ee:f0:54:b9:11:23:93:3e:1b:34:a9:a2:79:b3:75:09:86:0a:
         ff:8e:09:0a:e1:0a:1d:3f:33:37:b7:04:2c:29:3d:fd:01:33:
         4f:89:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:13:48 2024 by rpki-client on console-fra.rpki-client.org