Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/oEfeyx-ljtVffKBwDaE-bdqINJE.cer
File: oEfeyx-ljtVffKBwDaE-bdqINJE.cer (raw, json)
Hash identifier: SjCTQPQzWIBUK1UcEk2QjGmZiBm3dHonrgKg2pxWoDM=
Subject key identifier: A0:47:DE:CB:1F:A5:8E:D5:5F:7C:A0:70:0D:A1:3E:6D:DA:88:34:91
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 31E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/oEfeyx-ljtVffKBwDaE-bdqINJE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:55 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 139.220.192.0/18
Validation: Failed, certificate revoked on Tue 12 Mar 2024 10:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12771 (0x31e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Feb 1 01:20:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A047DECB1FA58ED55F7CA0700DA13E6DDA883491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:1f:3a:0d:78:1e:02:cf:79:ff:a2:01:2d:
d2:b5:81:b0:1b:35:34:a0:94:1c:5a:f2:66:64:21:
06:6a:4b:78:67:31:11:eb:c7:92:c9:1f:0c:a4:13:
fe:6c:f3:ee:31:6a:35:d9:e6:74:70:18:3a:a8:61:
48:f5:84:84:aa:3f:55:f2:c4:38:02:e5:04:3a:a1:
46:88:f7:85:2c:0f:8f:4f:2d:7d:b4:ab:bc:82:73:
97:78:b5:6e:f2:02:b6:1c:5c:2a:a6:0d:55:31:ff:
65:bc:4d:dd:b7:95:ae:22:c0:69:05:6b:5c:07:fc:
ed:8e:03:0f:55:38:92:69:11:0d:98:c3:6a:21:61:
80:55:4d:5b:b5:42:ca:38:ce:42:e6:61:6a:f7:ce:
a6:a3:88:97:bb:e8:ae:be:23:32:d5:1d:61:5a:61:
25:eb:b6:2a:ac:32:62:b1:79:30:a2:85:c1:2c:4d:
88:bf:74:39:e0:37:46:f0:c6:77:da:e6:7e:ac:f9:
55:fd:c0:99:6d:49:fa:98:1d:6d:67:dd:79:ae:8a:
c2:47:5a:57:1b:ce:ce:c8:0c:92:88:17:20:d9:95:
b1:70:05:c2:c0:97:10:da:36:14:06:3a:c1:1d:42:
70:fb:29:72:69:0b:b9:6c:84:4a:49:e8:4c:18:eb:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:DE:CB:1F:A5:8E:D5:5F:7C:A0:70:0D:A1:3E:6D:DA:88:34:91
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/oEfeyx-ljtVffKBwDaE-bdqINJE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:fe:fc:90:b9:6a:7f:ed:18:3c:38:89:24:03:7a:33:37:7d:
a3:af:4f:71:7e:58:30:64:db:b0:f8:28:ff:c6:45:52:68:08:
d5:7f:ee:a5:82:c9:11:aa:6b:c8:d6:c7:10:ac:f8:4e:e9:72:
eb:de:1e:f3:c8:51:1d:ca:56:16:2d:4d:d9:75:18:59:03:76:
3b:6b:dc:a1:a3:01:55:97:99:7c:27:fd:3f:de:79:e7:b6:a3:
a3:38:8e:2b:f0:5c:18:25:ee:53:a8:c2:9b:ad:3c:27:af:81:
e1:1f:9c:a9:66:c9:0b:7d:af:2b:24:33:86:7e:c0:96:ae:78:
e5:66:d0:ae:1e:b6:6e:a6:ba:06:5e:a2:46:c2:f8:f6:10:f9:
71:be:26:50:c5:a7:01:c7:f4:ce:c1:79:87:92:b9:93:56:d1:
f0:e8:d5:c3:64:03:fb:fc:0b:cc:e6:46:55:89:1a:38:41:b0:
41:49:9f:a0:33:0d:5c:cd:46:97:09:a4:10:24:40:be:4f:dd:
25:7b:34:f4:07:bb:ce:bc:e9:42:34:20:64:42:8e:72:f9:16:
fc:15:ee:f0:b0:c9:39:74:fa:78:81:3d:5c:8a:92:04:51:31:
d4:fc:de:77:76:07:69:2b:13:2d:ab:b8:7c:83:4b:7b:5e:2b:
69:a4:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 14:23:32 2024 by rpki-client on console-fra.rpki-client.org