Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vABThvXuxwTcCmQkeQjn7UAyIwQ.cer
File:                     vABThvXuxwTcCmQkeQjn7UAyIwQ.cer (raw, json)
Hash identifier:          bjxBIt+8BYjj6RUYAwr4p66jUZj7m82lBftD/egVckU=
Subject key identifier:   BC:00:53:86:F5:EE:C7:04:DC:0A:64:24:79:08:E7:ED:40:32:23:04
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       9BE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/vABThvXuxwTcCmQkeQjn7UAyIwQ.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 08 Jun 2023 02:23:57 +0000
Certificate not after:    Fri 07 Jun 2024 02:16:11 +0000
Subordinate resources:    AS: 146783

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39904 (0x9be0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Jun  8 02:23:57 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=BC005386F5EEC704DC0A64247908E7ED40322304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:34:10:21:bf:6f:79:35:86:61:34:4c:1e:
                    fd:64:64:55:92:5e:39:45:5d:60:6d:85:83:72:98:
                    ce:c9:b9:57:d1:46:83:f7:ff:08:24:84:0c:a7:84:
                    57:7c:45:3b:ab:73:3f:73:87:ef:db:f2:3f:42:03:
                    91:cd:1f:ef:ae:4d:33:0f:20:6c:61:f9:54:65:79:
                    c3:11:cb:1f:8c:90:60:3c:a1:e4:e1:f5:0b:d9:9d:
                    20:e7:a2:1e:9c:45:f8:42:20:cf:01:66:c6:64:43:
                    47:83:b0:a0:41:89:a5:00:64:d1:fc:7d:46:7d:86:
                    fb:04:4a:06:b3:70:76:77:d7:d8:ea:fe:1d:3b:44:
                    b0:60:85:76:5d:c4:10:68:b4:dc:43:3e:bc:8a:ae:
                    a6:66:2d:82:b5:ed:84:5d:e0:2a:69:1b:88:3f:3d:
                    4b:38:d5:71:2f:85:5f:82:a9:8e:73:c5:cc:a5:f9:
                    7d:dc:ff:12:b6:b4:f4:8c:5d:50:78:46:51:1b:7a:
                    36:25:ab:8a:14:d8:8d:92:85:ee:2d:7e:8e:4c:fd:
                    e1:b0:c2:7c:3f:31:a1:6e:86:52:f9:27:11:4a:69:
                    5e:1b:8f:e4:91:49:4d:df:91:84:ba:5b:34:6c:ef:
                    a2:4e:48:3a:65:1c:cb:36:79:bc:d6:27:79:16:e2:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:53:86:F5:EE:C7:04:DC:0A:64:24:79:08:E7:ED:40:32:23:04
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/vABThvXuxwTcCmQkeQjn7UAyIwQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146783

    Signature Algorithm: sha256WithRSAEncryption
         74:93:67:8e:b1:8f:42:f3:81:5f:23:f9:b3:91:ea:6e:ef:d7:
         bb:d5:78:62:80:32:f9:76:a7:55:0a:aa:50:44:f0:09:38:d8:
         f9:3c:2e:2e:aa:34:38:b9:ba:a3:73:92:86:80:f2:4e:60:bc:
         a0:e3:59:62:1c:32:a3:21:e9:bc:bf:29:76:e3:89:fa:26:a8:
         4c:7b:9c:0a:4a:4d:1f:bd:d9:5f:4b:06:7b:c2:c2:c7:35:14:
         3c:af:30:e6:3d:e5:56:53:a6:b8:82:26:b4:d3:dc:91:f3:34:
         aa:f6:45:3f:fa:19:45:9a:f0:d3:d4:54:da:0b:eb:93:45:14:
         5c:b7:95:c7:d7:68:9a:1d:2c:56:1e:ae:d4:d5:7f:72:ac:36:
         d3:e9:24:51:cb:38:63:dc:33:e2:ad:7b:06:6c:e0:b3:bf:c5:
         00:fd:67:79:5b:c4:ed:18:d5:15:fe:e8:14:f6:11:db:42:28:
         b4:be:8f:63:38:92:79:05:94:fa:e5:f4:7f:f3:0a:62:58:68:
         30:4a:38:7c:ce:44:ff:6e:68:68:08:dc:81:80:6b:8b:c5:95:
         81:ea:52:f2:49:45:72:27:a8:36:24:ac:48:2e:ea:b5:64:67:
         d0:6d:69:af:c5:31:6f:ac:b8:10:94:29:26:19:1d:d3:22:bd:
         2a:43:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 05:31:19 2023 by rpki-client on console-fra.rpki-client.org