Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer
File:                     vpb1PBFCO2qE1Qs_q5_XF_uXeTI.cer (raw, json)
Hash identifier:          oX4vg1E04BdupxSlcVQM3hulOPHRDG4vSFM/Q/4fikA=
Subject key identifier:   BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       BAC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 27 Sep 2024 02:48:59 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 151302
                          IP: 103.218.178.0/23

Validation:               Failed, certificate revoked on Tue 12 Nov 2024 02:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47811 (0xbac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 27 02:48:59 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=BE96F53C11423B6A84D50B3FAB9FD717FB977932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:05:64:9b:f2:a6:7a:79:34:70:2e:8e:a8:
                    4a:36:19:fa:83:31:ac:8f:4c:9a:bb:8d:28:e5:28:
                    00:02:ad:1e:6b:88:42:82:a6:7e:fa:93:ef:47:65:
                    e7:b9:60:bc:04:1d:24:dc:d6:b2:19:32:17:51:9c:
                    88:50:fd:a5:78:13:b8:7c:15:db:cf:01:83:97:29:
                    60:ce:40:fb:43:62:54:71:eb:e6:bc:bb:dc:66:e8:
                    7f:e6:91:c7:60:18:30:22:79:a1:37:b5:50:36:0f:
                    a1:28:a1:71:a7:47:19:6c:94:97:34:6f:cb:cb:e3:
                    7b:2c:b8:d9:73:33:b6:e3:c8:50:ca:6d:f9:d8:a1:
                    9d:85:a0:2e:e0:cb:bf:ff:60:ec:30:cf:ea:f3:47:
                    77:ae:13:8f:21:ca:63:a2:4e:c9:fd:7e:30:99:a6:
                    9d:a2:eb:5c:0e:03:b4:b9:60:b1:70:73:8a:0e:ea:
                    54:37:fc:dd:db:c4:b2:b4:cf:6d:d1:bc:d6:c8:d4:
                    43:21:b2:0b:41:67:a6:7e:66:38:0d:a5:79:da:d5:
                    5a:6a:25:a8:fd:59:e4:e1:81:8a:b0:b2:1d:2e:d9:
                    12:24:03:49:69:55:bf:5e:d8:fc:34:1b:74:a0:54:
                    b9:70:5a:2f:fa:6b:d5:be:8f:36:44:0b:02:6a:e6:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:F5:3C:11:42:3B:6A:84:D5:0B:3F:AB:9F:D7:17:FB:97:79:32
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3241/vpb1PBFCO2qE1Qs_q5_XF_uXeTI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151302

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:ba:8b:d2:b6:b7:fc:66:11:36:03:6a:ea:97:8c:77:f8:
         c1:81:be:da:33:68:13:e1:55:b2:18:0b:46:40:af:d6:69:5b:
         b6:ce:82:c9:3b:7b:c3:22:6c:dc:b0:5d:a3:f8:ee:db:16:2a:
         46:78:ab:78:49:f2:c4:fb:82:f0:34:fb:04:47:b6:90:ed:5a:
         72:2f:d5:1d:90:74:00:9d:9c:8d:b1:9b:2b:c9:a4:e0:67:c7:
         c8:a9:ca:55:83:61:73:d7:dc:de:ba:95:31:b5:3b:d3:a7:1c:
         e4:c3:f9:ef:e2:28:f6:f9:12:c3:12:cd:c2:33:e5:03:fe:44:
         8a:2c:20:41:77:17:0f:96:be:89:ec:8e:19:93:6a:c4:4c:4e:
         2e:08:15:65:da:ff:16:34:84:2c:25:3e:03:b5:1f:47:05:7b:
         60:b1:75:01:27:ae:88:8f:fb:a6:a7:5c:54:30:4f:e6:fa:91:
         0f:55:ef:94:d9:d3:6a:5a:b6:f0:3a:26:8a:b8:d1:88:b5:42:
         21:27:ff:32:17:62:e9:1d:d5:a9:ef:01:c5:41:4d:d7:cf:ff:
         e2:e0:ec:cc:7d:f8:89:c0:a9:88:7d:12:30:dd:dc:90:f4:27:
         6d:3f:63:45:72:13:6c:51:07:4e:5c:69:07:a9:25:2e:84:bb:
         f8:69:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 06:30:36 2024 by rpki-client on console-ams.rpki-client.org