Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
File:                     gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer (raw, json)
Hash identifier:          QkXXomLi8utThmFJo/X6YiG1zexWtPYWLTAte1CyvAg=
Subject key identifier:   81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       BB97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 27 Sep 2024 02:51:57 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    IP: 103.125.248.0/22

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 01:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48023 (0xbb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 27 02:51:57 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:d3:7e:37:47:4d:30:d0:b2:bc:95:77:43:
                    90:32:e5:63:3f:9c:39:b2:d4:36:73:51:4f:c8:56:
                    31:4a:87:ac:07:28:c8:f7:b6:1e:75:3c:7e:81:69:
                    5d:cc:66:1b:99:f3:f7:a9:8b:ae:17:ee:e9:56:31:
                    ae:90:17:2c:b9:7d:f8:e5:50:9d:82:24:85:7e:b5:
                    47:69:db:78:ed:1f:26:de:fa:c2:58:af:b3:b0:36:
                    12:c1:bc:4d:9f:fc:d3:68:dd:ea:6d:f3:67:1d:14:
                    73:a1:f1:fd:0d:83:5e:04:69:f4:6d:d9:bb:d0:b6:
                    5a:db:43:61:17:b8:e5:04:94:b9:7f:6c:9e:52:f0:
                    83:77:3d:5e:7e:b3:1c:04:3d:e4:02:90:37:ba:97:
                    a1:78:ed:ae:04:4e:6f:f6:92:ff:c6:9c:38:e1:60:
                    7c:9f:a6:a8:60:85:14:24:97:5d:9f:bb:0a:a6:c8:
                    c0:41:05:d6:6b:c5:8c:be:56:df:67:ae:cd:e0:33:
                    6f:28:87:74:71:56:18:cc:45:42:a5:be:81:1e:f9:
                    6b:6b:10:ae:9c:1c:16:fb:6a:21:d5:23:d0:97:8f:
                    79:81:8c:bf:93:51:78:e7:9b:f1:f2:e9:0b:55:ae:
                    6f:6c:4f:39:c6:f0:04:62:79:b4:1c:b6:43:74:2d:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:ce:36:7c:c6:cc:32:b2:04:ff:7f:e9:70:3b:12:88:11:d3:
         f1:a3:4d:98:7b:3c:56:b1:ce:ec:30:8b:d7:ee:4f:ae:f8:21:
         d6:ab:bd:4e:ba:81:95:69:a4:41:fd:f4:1f:91:84:92:2c:db:
         7b:a8:6d:84:bf:ae:39:b4:41:13:91:7c:77:29:b7:35:3b:59:
         4a:e5:52:ec:55:28:b9:f6:79:29:47:6e:88:72:5f:f8:f6:82:
         88:86:11:d9:53:8a:f5:42:df:c6:38:e4:0c:ae:82:5d:44:be:
         28:5c:ce:72:5f:f7:c7:9f:51:0f:b1:7a:85:8f:f1:99:c1:76:
         fb:bc:8a:fd:cc:7c:6b:72:bd:77:6f:70:ce:1f:d7:26:6b:92:
         7f:e4:e3:2f:b9:7b:58:a7:55:bd:6a:e0:62:81:e4:11:b8:71:
         8c:50:00:02:90:e9:ec:ff:59:03:4a:14:47:e7:1f:1a:bd:a1:
         71:b7:48:d4:51:50:de:89:f2:3e:2a:11:01:b6:f6:e7:8c:c5:
         bb:37:27:77:79:a1:a6:d8:2f:fb:a6:a7:9e:6a:6e:a2:24:ea:
         2e:2a:4a:e4:3f:79:fc:88:45:30:37:26:36:68:e3:10:7f:42:
         60:17:2d:07:8a:7f:38:c7:75:1b:95:ec:84:e4:e0:1d:1c:25:
         3a:62:1a:43
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 4 05:09:26 2024 by rpki-client on console-ams.rpki-client.org