Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fJpQcXYyvL3CuTYLuDUmQcbZGMs.cer
File: fJpQcXYyvL3CuTYLuDUmQcbZGMs.cer (raw, json)
Hash identifier: EkmvVbeA/dNV3bEd9beQ92LCjliUEiWkd5uQ4fadVjM=
Subject key identifier: 7C:9A:50:71:76:32:BC:BD:C2:B9:36:0B:B8:35:26:41:C6:D9:18:CB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AA06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/fJpQcXYyvL3CuTYLuDUmQcbZGMs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:32:26 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.115.60.0/22
Validation: Failed, certificate revoked on Sun 14 Jan 2024 23:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43526 (0xaa06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:32:26 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=7C9A50717632BCBDC2B9360BB8352641C6D918CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:7c:4c:03:cb:77:d4:d4:56:76:b9:89:b2:
46:30:d2:bd:c2:0b:d3:26:4a:12:56:c8:9f:be:e8:
4d:bf:d6:6b:3a:6c:24:89:cd:da:92:5b:94:ba:19:
ef:01:79:e0:73:ff:f5:6d:ac:24:ac:a2:38:48:f5:
b4:62:17:f0:1a:28:2d:30:f1:6d:0a:97:0b:e3:49:
3b:7d:e0:04:39:70:01:2b:40:51:4a:60:9e:4e:d0:
f9:96:61:e3:5d:00:87:ce:b7:92:e9:27:f4:f7:dc:
9e:7a:d1:53:9c:4a:96:9b:3f:fd:2a:45:6e:6a:8f:
df:55:42:76:ba:3f:d9:9c:03:fd:7e:34:2b:46:d4:
a4:9e:fc:45:67:19:b4:bc:7b:e2:f2:66:a3:b2:fb:
0d:dd:6f:f7:3f:3b:34:21:24:cd:88:ed:63:c1:11:
a3:3b:a0:2f:3f:8c:62:16:41:d6:7a:9d:6b:0d:11:
a9:45:9d:46:e9:98:1d:38:da:10:ff:1f:5b:13:25:
f2:c2:4c:c4:62:d1:a3:2f:a5:1a:fe:f8:3b:12:a1:
c0:79:1b:3e:a7:d4:42:de:04:5f:87:31:62:d2:74:
0a:99:5d:02:78:23:63:9a:9c:15:b6:2e:04:4e:1d:
18:31:17:85:12:90:89:55:40:e1:04:d8:fe:17:71:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:50:71:76:32:BC:BD:C2:B9:36:0B:B8:35:26:41:C6:D9:18:CB
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/fJpQcXYyvL3CuTYLuDUmQcbZGMs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
03:b1:7e:ea:c3:bf:56:d3:c8:09:4b:25:e7:4a:b8:88:ec:ea:
ab:cb:e4:65:82:6b:05:e6:9f:ce:7a:75:0d:7e:72:37:61:12:
c2:00:cd:52:9e:3b:6f:8e:ad:8b:56:37:99:f0:bd:9b:ed:5d:
8d:58:d5:9b:14:95:ff:ca:7b:46:63:54:58:aa:46:0b:67:b4:
25:7e:7a:cf:8d:3c:1f:3c:26:fa:a8:4b:77:3e:24:8a:65:b6:
8a:7e:03:9b:78:c3:ac:85:6d:28:ae:e2:7d:fa:f1:39:93:2d:
36:f2:ea:99:e2:79:9e:d1:3a:07:46:0f:82:c1:e4:2c:52:94:
08:ea:62:a7:9e:27:6b:d0:0f:4b:8e:43:08:b1:d1:3e:f0:55:
8d:77:36:ea:f3:ef:3f:a7:23:8b:ba:b0:5b:2d:28:ba:81:38:
aa:00:89:2a:9c:0e:fc:7e:10:b0:a5:1b:04:77:80:90:fb:f8:
7a:20:40:48:48:32:ca:48:a0:c5:88:ca:b9:e2:a9:1e:b2:0d:
0e:92:3a:60:c2:73:a3:d7:da:e0:07:29:19:46:52:69:8f:31:
ee:f0:54:b9:11:23:93:3e:1b:34:a9:a2:79:b3:75:09:86:0a:
ff:8e:09:0a:e1:0a:1d:3f:33:37:b7:04:2c:29:3d:fd:01:33:
4f:89:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 00:08:00 2024 by rpki-client on console-ams.rpki-client.org