Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/xKJlJG95tZr2DvesKLzmRstE5wM.cer
File: xKJlJG95tZr2DvesKLzmRstE5wM.cer (raw, json)
Hash identifier: FdwnLHrosXIui9E4vmPPjRWR9XmvnlqZx1ihi384nUc=
Subject key identifier: C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BCB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:57:16 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 131532
IP: 103.98.228.0/22
Validation: Failed, certificate revoked on Thu 28 Nov 2024 02:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48307 (0xbcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:57:16 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C4A265246F79B59AF60EF7AC28BCE646CB44E703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:58:03:f2:93:17:c2:ab:67:36:71:ba:ce:
8d:fd:f9:82:0c:15:d9:95:62:8d:46:80:71:62:b2:
bb:3d:19:b2:b3:6c:67:b7:3b:dc:fc:d7:79:8e:b7:
ab:97:d9:56:06:c1:b6:6d:21:a3:6d:b5:2f:bd:a5:
78:cc:bc:63:95:82:1d:2c:f7:72:70:7c:b1:ca:08:
31:df:a4:ba:68:76:39:e1:50:cc:59:2b:b1:d5:09:
24:a4:69:98:88:b5:d3:4c:ce:46:11:b3:48:50:4e:
80:61:63:e8:1f:c9:70:fb:4a:fe:80:0f:7f:c0:cd:
0c:25:01:da:e1:ea:05:ca:98:1e:54:33:31:29:ba:
2b:b4:51:27:09:d3:08:ff:58:66:45:64:36:39:ca:
73:f1:75:d5:2c:a8:92:64:1b:ca:37:9a:de:59:29:
29:cc:af:70:b5:d2:2a:2b:bd:fb:3f:f8:81:e3:3c:
95:28:07:ed:95:34:13:f8:37:4b:22:bd:d8:fc:c7:
a0:0d:f1:08:9c:d3:42:57:28:98:34:e7:7b:5e:bb:
9a:e9:5c:9f:bb:75:1f:bd:9f:cc:9c:8c:5c:dc:61:
93:b8:e4:b2:67:36:cc:ae:53:6c:67:35:1b:f7:24:
80:ec:d1:c4:bd:fa:27:a9:7d:e4:26:74:5e:34:6a:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:65:24:6F:79:B5:9A:F6:0E:F7:AC:28:BC:E6:46:CB:44:E7:03
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2573/xKJlJG95tZr2DvesKLzmRstE5wM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131532
sbgp-ipAddrBlock: critical
IPv4:
103.98.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:1d:73:3a:2b:90:10:54:33:65:1f:ca:aa:0f:50:3a:40:39:
6a:da:d0:45:64:fe:ee:dc:0b:f6:eb:04:eb:81:e1:6a:37:0f:
06:f6:18:28:e3:e7:b3:2c:b8:62:b7:c3:a1:af:17:b6:cc:0c:
05:bc:88:9a:be:dc:4d:5d:4f:78:a5:e2:de:74:f8:0a:bf:86:
da:45:93:11:46:88:8a:c3:e7:ce:69:21:98:b0:6e:3a:68:18:
13:c1:b6:e6:cb:de:b1:06:6f:1b:e0:65:e0:84:10:6f:52:da:
23:80:84:4f:d9:86:e0:40:17:49:29:66:09:23:16:d1:86:ba:
e4:b4:ed:fe:c6:98:34:66:ed:47:59:21:94:53:bb:f8:11:ba:
7c:c8:b2:93:21:d1:c8:58:11:bd:ae:42:8e:e6:50:25:3c:df:
83:4c:9c:7c:89:f6:40:95:cd:d8:37:2f:ff:86:93:73:42:af:
9e:6e:5c:e8:da:cb:77:43:46:e6:55:84:1e:60:77:a2:e3:9a:
69:52:c5:fe:bd:42:ff:e5:ec:66:74:cb:68:c0:9c:5b:67:1a:
03:42:da:d3:4b:b9:74:c4:b7:1d:80:f9:31:e5:08:b6:12:6b:
65:47:2f:05:b3:a8:19:df:73:a3:0b:12:43:ad:75:82:e8:3c:
34:b3:60:29
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDALyzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU3MTZaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKEM0QTI2NTI0NkY3OUI1OUFGNjBFRjdBQzI4QkNFNjQ2Q0I0NEU3
MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeFgD8pMXwqtnNnG6
zo39+YIMFdmVYo1GgHFisrs9GbKzbGe3O9z813mOt6uX2VYGwbZtIaNttS+9pXjM
vGOVgh0s93JwfLHKCDHfpLpodjnhUMxZK7HVCSSkaZiItdNMzkYRs0hQToBhY+gf
yXD7Sv6AD3/AzQwlAdrh6gXKmB5UMzEpuiu0UScJ0wj/WGZFZDY5ynPxddUsqJJk
G8o3mt5ZKSnMr3C10iorvfs/+IHjPJUoB+2VNBP4N0sivdj8x6AN8Qic00JXKJg0
53teu5rpXJ+7dR+9n8ycjFzcYZO45LJnNsyuU2xnNRv3JIDs0cS9+iepfeQmdF40
apmNAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUxKJlJG95tZr2DvesKLzmRstE5wMw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1
NzMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjU3My94S0psSkc5NXRacjJEdmVzS0x6bVJzdEU1d00ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIBzDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdi5DANBgkqhkiG9w0BAQsFAAOCAQEApx1zOiuQEFQzZR/Kqg9Q
OkA5atrQRWT+7twL9usE64HhajcPBvYYKOPnsyy4YrfDoa8XtswMBbyImr7cTV1P
eKXi3nT4Cr+G2kWTEUaIisPnzmkhmLBuOmgYE8G25svesQZvG+Bl4IQQb1LaI4CE
T9mG4EAXSSlmCSMW0Ya65LTt/saYNGbtR1khlFO7+BG6fMiykyHRyFgRva5CjuZQ
JTzfg0ycfIn2QJXN2Dcv/4aTc0Kvnm5c6NrLd0NG5lWEHmB3ouOaaVLF/r1C/+Xs
ZnTLaMCcW2caA0La00u5dMS3HYD5MeUIthJrZUcvBbOoGd9zowsSQ611gug8NLNg
KQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:52 2025 by rpki-client