Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/kcYSZfVhPXbfBBk7-onPLVTfiVE.cer
File: kcYSZfVhPXbfBBk7-onPLVTfiVE.cer (raw, json)
Hash identifier: 74H7Jh5oPdtGcqXtB7h8q3dy9mbJF4yjrGc+F2s9P6E=
Subject key identifier: 91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B6E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 03 Sep 2024 08:18:36 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 63573
IP: 103.198.20.0/22
Validation: Failed, certificate revoked on Fri 27 Sep 2024 02:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46818 (0xb6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 3 08:18:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=91C61265F5613D76DF04193BFA89CF2D54DF8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:41:a6:83:1d:99:45:7b:86:39:db:85:9a:
1c:96:c1:f8:52:68:f5:3a:4e:31:21:a0:32:3f:60:
01:9a:bc:dd:25:a3:17:1b:90:0d:f3:00:41:be:dd:
8f:2d:1e:f4:8f:0a:8d:ef:6b:eb:f3:22:ff:39:ac:
7a:20:83:7d:b0:57:9a:f5:de:8d:4d:f6:d4:2b:4a:
1c:cc:71:ad:90:4a:8f:53:81:f6:1e:5d:0a:5f:16:
5a:64:91:3e:32:7d:88:2d:b7:78:bc:d8:bd:28:96:
a0:15:6d:0e:99:78:63:0b:24:68:9d:d4:fe:8c:80:
b0:1b:68:cf:c3:4b:ae:24:09:49:45:a0:b5:e2:ac:
1e:18:59:15:36:0d:ab:ac:3f:c5:e1:6c:7f:a5:5c:
81:9f:79:16:5c:05:35:ed:9b:cb:f4:b5:ef:bd:87:
05:39:5b:fd:21:db:39:dc:3f:8a:06:6f:e9:8f:2b:
84:f7:b4:3e:42:dd:1f:5a:9d:e3:b8:5a:c8:31:e8:
6b:34:2d:50:fb:59:74:ad:43:cd:dd:24:9c:4d:8a:
86:ed:6f:ca:b6:01:71:e5:41:5f:a9:e6:27:5d:08:
9e:ca:b2:3f:11:32:45:36:69:5a:22:c9:20:0f:ee:
60:56:33:20:7e:04:b4:94:5a:84:c6:98:dd:ed:2e:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:12:65:F5:61:3D:76:DF:04:19:3B:FA:89:CF:2D:54:DF:89:51
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/kcYSZfVhPXbfBBk7-onPLVTfiVE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63573
sbgp-ipAddrBlock: critical
IPv4:
103.198.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b4:01:b0:3e:c1:00:96:cc:41:15:e7:0e:0e:f7:d6:4a:c0:
91:75:0f:15:12:7b:a9:d6:f8:da:f2:e5:50:f2:43:ea:2c:0c:
c9:54:a1:dd:a9:23:05:2e:47:19:28:cf:db:a2:7c:ec:0b:30:
c5:45:d8:76:0b:0c:15:79:58:87:ea:79:43:e4:98:de:f8:13:
67:9a:bf:b3:58:cd:63:bd:46:17:73:b7:50:81:9d:02:fe:80:
f8:59:9c:75:b5:e5:72:2e:c4:d1:41:7a:d1:31:a7:96:42:cd:
44:3d:26:83:1e:3c:2c:96:38:97:0c:12:dc:48:3a:d6:83:7f:
c9:55:7b:a5:60:91:47:25:1a:01:f1:e5:cf:55:68:5e:3e:91:
68:82:6b:98:9a:43:78:40:58:18:eb:08:73:f2:4d:1b:55:bf:
e7:18:60:67:f5:a7:21:47:29:d9:23:08:65:e2:e1:6d:3a:b2:
fb:99:aa:ec:e9:a2:6a:49:28:18:83:f3:94:8a:e8:3d:96:d9:
c1:6a:76:e2:8f:76:ff:2a:6d:8d:c0:cc:71:19:23:d3:d6:c0:
8f:65:e3:9f:4f:d3:3c:02:02:47:15:dd:dd:ac:8a:7b:46:56:
94:bc:3b:d2:4d:f2:b7:69:80:01:1a:70:c8:67:b6:07:2d:4c:
b7:1b:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 03:59:55 2024 by rpki-client on console-fra.rpki-client.org