Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kWLQT5EJ__33LPWxec7ZK58aU94.cer
File:                     kWLQT5EJ__33LPWxec7ZK58aU94.cer (raw, json)
Hash identifier:          VP6mYvW2BxnAacr7PV7NPLmy7jzr6Ncyp9h+x92XPH4=
Subject key identifier:   91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer:       /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial:       368B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 02 Sep 2024 01:31:19 +0000
Certificate not after:    Tue 02 Sep 2025 01:19:22 +0000
Subordinate resources:    IP: 160.30.230.0/23

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 01:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13963 (0x368b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
        Validity
            Not Before: Sep  2 01:31:19 2024 GMT
            Not After : Sep  2 01:19:22 2025 GMT
        Subject: CN=9162D04F9109FFFDF72CF5B179CED92B9F1A53DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:42:80:40:ec:14:bb:16:ea:09:92:13:95:
                    19:22:07:d2:40:39:45:94:3e:73:bd:10:6a:bd:9f:
                    76:63:0b:9f:af:21:39:b7:00:f1:be:e8:a7:62:e3:
                    5d:dd:49:82:b3:b1:53:61:d7:94:6a:20:83:4b:08:
                    98:8b:c7:c7:ee:0f:6a:d7:62:b9:82:7a:0a:6c:8a:
                    3c:7b:eb:ed:9d:e2:bb:0c:c3:dd:ca:30:d7:df:3c:
                    c1:40:ca:d1:ce:22:0b:55:a2:e2:2d:3b:e0:71:d5:
                    27:c8:6c:21:40:0e:46:98:91:a3:de:c0:29:e3:e2:
                    16:40:7f:0d:df:ed:9c:ff:c0:3d:ed:72:47:10:d7:
                    a6:87:61:01:25:0c:93:25:5a:4d:99:f3:40:5d:48:
                    77:6f:c1:45:cd:aa:53:62:c1:3f:e4:0d:61:61:d7:
                    11:84:d8:d3:96:e2:74:fe:ef:68:76:4f:1a:d0:40:
                    24:1e:5b:86:67:90:22:f0:da:c1:34:42:e9:4f:8e:
                    09:b5:69:39:3b:72:ae:ab:5b:04:1a:b8:19:3e:3f:
                    bf:dc:7b:be:8a:2c:e3:e3:e7:55:6a:26:84:ec:7c:
                    c2:fa:0d:4b:50:95:6d:70:e2:18:d3:e6:a7:4a:70:
                    ce:ff:c0:49:3d:19:a0:99:b8:79:ab:48:0d:1b:c2:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
            X509v3 Authority Key Identifier:
                keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:22:72:e0:1b:0d:30:b4:6d:c6:e6:9c:47:9d:8e:a7:ee:
         3d:3c:46:ab:3d:c9:68:46:8d:75:c6:4a:d9:77:0a:b4:8b:76:
         ba:73:3a:16:18:8d:9a:e5:fa:36:6d:8a:5c:d3:7b:9c:39:8f:
         1c:dd:85:d6:6d:e6:a7:7a:dc:84:40:b9:d3:61:6f:03:f1:19:
         a8:77:40:21:49:de:1c:c0:58:a4:24:46:bc:b6:74:fd:ae:0a:
         a3:6e:1b:a3:a1:d0:45:5c:2b:69:07:f5:56:1f:b9:f1:d7:c3:
         3a:b3:f9:6e:6d:64:4c:8c:06:ce:99:df:41:6d:1b:7a:a8:9a:
         a0:d9:03:a2:1a:b1:f9:61:8c:38:b4:a6:d0:2a:e4:e3:1c:ae:
         23:03:f5:58:ef:b4:6f:7c:f3:92:37:8f:32:52:bb:9f:0c:81:
         1f:54:d0:72:25:c3:95:ac:c3:96:90:35:59:7c:d2:a0:0f:14:
         59:1a:f6:ab:e5:88:cb:1d:3d:f9:c4:65:99:53:7a:44:65:d4:
         fe:a6:8e:db:8c:ae:4b:19:82:a6:af:0e:37:be:42:f7:80:4a:
         1b:9e:d0:29:9d:05:c0:5d:c7:3e:6d:15:e5:83:f7:70:0b:97:
         93:07:1b:2c:09:b2:92:9a:f0:31:fc:1e:24:56:9f:c2:b5:f3:
         27:91:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org