Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sdvJmjz4VWFonrkSeUwG3qXoTf0.cer
File: sdvJmjz4VWFonrkSeUwG3qXoTf0.cer (raw, json)
Hash identifier: HrMVQhVBRKiEY7TBb63MVmUs1QCKCV4keg44J2bY+gA=
Subject key identifier: B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C1CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 04 Dec 2024 02:01:44 +0000
Certificate not after: Wed 03 Dec 2025 07:38:23 +0000
Subordinate resources: IP: 2401:dd60::/32
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49615 (0xc1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Dec 4 02:01:44 2024 GMT
Not After : Dec 3 07:38:23 2025 GMT
Subject: CN=B1DBC99A3CF85561689EB912794C06DEA5E84DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:04:62:7a:7b:ae:32:bd:79:ff:2f:dd:ce:
29:ce:c6:ac:fb:a8:f1:47:80:11:36:c8:10:b8:65:
71:6a:3e:94:26:81:1c:4f:7f:74:0f:d1:12:b2:10:
9c:b5:0c:37:12:77:b8:71:0d:f5:d0:00:ef:15:ca:
bd:4c:22:45:95:db:5e:19:ca:ba:b7:f5:b8:f5:32:
85:d7:2c:94:be:b6:07:28:5b:22:9e:17:22:0c:5e:
19:dd:f8:3d:f2:39:19:2f:d1:61:38:a5:51:72:5a:
0a:25:63:90:a4:00:38:66:3c:50:93:bf:ad:04:e4:
62:57:fe:c5:b0:c1:76:f3:e3:3c:99:b2:57:c2:2b:
aa:7a:0e:d5:4b:a7:39:f1:12:ea:38:cd:76:17:e2:
66:6e:95:90:88:9a:6d:e9:9b:47:54:ec:5f:7a:7f:
06:de:14:e4:eb:9c:b9:b7:a1:d1:b0:b6:b7:a6:ae:
ed:97:d8:b3:a4:10:90:dd:b2:3b:05:5c:c8:df:03:
ff:9f:69:c5:29:8d:e3:97:78:13:07:ec:ec:27:7a:
01:0b:da:f1:55:7d:80:a9:cc:cf:e1:ef:e2:e9:39:
55:69:08:d1:eb:f4:c0:d8:5a:21:9a:96:ec:4e:43:
75:16:e0:df:8f:dc:48:01:85:48:92:f4:df:d6:1c:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:C9:9A:3C:F8:55:61:68:9E:B9:12:79:4C:06:DE:A5:E8:4D:FD
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3336/sdvJmjz4VWFonrkSeUwG3qXoTf0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dd60::/32
Signature Algorithm: sha256WithRSAEncryption
6e:16:6e:25:4b:2e:c4:aa:22:2a:b1:39:69:ec:64:3c:a0:a9:
18:7e:7c:48:48:c1:6a:b9:c2:b1:a8:b5:97:14:6e:f6:9a:56:
4a:f6:be:37:43:95:99:dd:56:c1:08:47:98:a1:35:16:cf:b0:
31:c3:c7:67:41:90:76:df:e4:8c:46:f7:23:fc:57:a2:02:0e:
75:f1:f1:07:83:ff:ba:9f:70:99:3f:ce:3a:10:2f:a2:bf:dc:
90:78:dd:dd:17:34:8c:1d:7c:a6:24:b9:3b:81:ad:94:3e:d1:
06:b7:e0:ac:1d:85:27:aa:5b:12:73:b9:9e:ab:e1:c9:be:70:
0d:8a:5b:48:0d:14:c8:f4:3f:d1:ac:b1:c6:46:0d:6a:e5:7d:
c2:c1:1f:4e:e5:e0:29:ae:2e:c0:f7:57:8a:5e:f3:83:e1:0e:
11:b3:3c:78:8e:1e:98:7e:f4:d2:3a:74:9c:f3:f7:6d:13:64:
9a:2d:dd:bf:4b:e7:e5:08:21:ad:4d:78:83:c8:60:b8:8b:19:
80:7a:1a:11:f4:39:4f:63:a4:6f:f4:84:1f:4f:92:1a:ac:a4:
f4:35:e3:6e:aa:e0:26:b0:a7:19:ff:d7:d4:cc:1e:f2:c3:33:
16:38:da:2e:77:31:b5:96:84:9f:7a:89:12:f5:ad:07:68:9f:
25:40:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:06 2025 by rpki-client