Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer
File: jpsOFQMC6NRzWaCBchLAKog4dQc.cer (raw, json)
Hash identifier: EuJoE6TeUl1Ob2xIg/qJdaLOg/D8Dum0ZAhsHdbq3ME=
Subject key identifier: 8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:10 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 103.118.212.0/22
Validation: Failed, certificate revoked on Thu 22 Feb 2024 23:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44841 (0xaf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E9B0E150302E8D47359A0817212C02A88387507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:cb:28:86:42:a9:33:d1:7a:32:a6:38:31:
cb:31:ee:94:45:e2:96:f1:14:bc:43:2f:c1:10:75:
65:99:c0:ea:73:93:89:ee:fb:28:87:a9:0e:ae:f4:
eb:2e:db:4c:bc:71:83:a5:9c:9f:f2:de:93:57:ca:
48:22:77:99:a5:1e:22:9f:86:39:4c:3e:5f:dd:b4:
c5:69:55:88:5f:a1:b5:77:81:fd:c9:56:0a:bd:01:
eb:43:aa:40:52:99:12:fd:0e:02:b6:9f:ca:3b:35:
cb:9d:88:e1:a7:a9:a7:ef:84:b4:33:5c:a5:32:6f:
0b:76:de:e2:8f:27:ef:7f:92:bf:50:1b:0e:1b:cf:
f2:59:29:96:f4:52:05:da:d8:0f:be:57:60:69:7d:
94:26:53:26:64:94:98:39:cb:4f:71:87:5d:0d:5a:
60:4a:66:57:c2:64:79:f8:1a:aa:3a:a5:4b:87:3a:
bd:89:b1:85:c7:0b:19:e4:0e:51:11:4f:35:0a:38:
54:14:19:86:c7:e0:b2:54:49:23:2c:b8:3d:12:98:
97:91:7f:c9:29:0b:eb:db:ca:e3:fd:75:c7:f1:33:
e2:25:3a:21:af:3d:45:47:e7:42:6a:45:98:fb:9a:
08:a9:b6:59:2a:e5:3b:c9:98:d1:b3:7a:dc:cb:02:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.212.0/22
Signature Algorithm: sha256WithRSAEncryption
89:cd:89:4f:d7:eb:0c:95:95:3b:57:ee:91:4d:01:87:21:96:
2a:78:3d:bb:37:57:67:44:d1:34:aa:f5:d8:9e:86:69:2c:a1:
e8:1f:ef:91:d3:3e:8e:d4:c9:58:fe:6a:a7:5b:c2:43:21:13:
e2:1b:73:e0:b4:58:6d:79:67:0b:2d:b8:3c:4b:71:45:81:8f:
59:65:8b:fb:ff:93:87:ef:55:0d:a8:ef:2c:00:ab:ca:22:15:
68:e6:d5:73:e3:c6:c1:92:5f:f3:d1:19:15:6c:d5:cd:ae:98:
b2:bb:ee:12:f6:34:38:52:98:1c:aa:c1:76:71:14:a5:f1:52:
24:02:02:65:d3:e4:99:15:5d:90:0d:e9:99:ac:67:05:bb:99:
9d:76:d2:bc:bb:3f:c3:fb:c8:31:01:ec:66:27:32:91:97:43:
86:75:72:5f:96:ec:4a:85:59:78:c4:e2:db:97:f3:bd:f3:c3:
7a:81:f2:ce:dd:b2:58:66:a1:75:8d:15:c7:b8:47:33:37:ed:
58:5a:5f:f4:8c:b7:0d:92:80:7e:88:a3:79:8d:67:35:be:28:
6b:71:4d:5e:a6:9a:b8:46:14:06:30:61:32:48:07:5b:c1:9c:
19:55:b4:50:a1:7e:9c:09:dc:ab:0e:9b:3b:83:77:d0:95:dc:
68:ba:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 00:47:36 2024 by rpki-client on console-ams.rpki-client.org