Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yIk2ppNTBS0abAQ82MmzHMhgWs8.cer
File: yIk2ppNTBS0abAQ82MmzHMhgWs8.cer (raw, json)
Hash identifier: WS2Eo7aQ4oIN7bp3229S+zsF+X0KKyRrd+Nvp2rNdZU=
Subject key identifier: C8:89:36:A6:93:53:05:2D:1A:6C:04:3C:D8:C9:B3:1C:C8:60:5A:CF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 9E78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3230/yIk2ppNTBS0abAQ82MmzHMhgWs8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3230/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Jul 2023 05:52:03 +0000
Certificate not after: Sat 20 Jul 2024 05:47:24 +0000
Subordinate resources: IP: 103.240.42.0/23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40568 (0x9e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 21 05:52:03 2023 GMT
Not After : Jul 20 05:47:24 2024 GMT
Subject: CN=C88936A69353052D1A6C043CD8C9B31CC8605ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:2a:95:49:c9:c5:cd:ca:07:3f:07:53:7b:
ce:db:f6:59:74:9b:26:42:14:26:8b:9a:a9:09:7c:
3c:21:ae:51:63:bb:28:eb:fb:89:b6:9c:53:00:b4:
32:12:68:22:a0:3a:ea:66:3c:c0:ec:b6:db:09:2a:
05:fc:8c:81:8a:f3:cb:61:18:b8:3e:2a:3c:23:ab:
43:bf:ec:f5:58:92:1b:82:cd:af:bf:ad:d8:b0:4b:
50:2c:7c:d1:97:5d:83:5e:d7:14:a9:d6:b3:38:b3:
17:a4:bd:f5:f2:e0:07:58:77:2c:90:ad:06:dc:9b:
12:d5:25:be:5d:37:36:3b:98:c2:a7:fa:e5:20:1f:
61:82:a6:68:63:37:31:d9:9a:63:d8:76:a2:11:cd:
41:41:50:f9:62:17:ae:fb:0d:21:94:43:7b:61:a5:
f9:44:8a:ee:b9:07:8d:0f:93:9d:ac:67:33:31:18:
08:4a:57:85:a1:fc:af:0f:98:5b:cf:07:09:c9:f2:
62:ed:7e:48:e5:5a:40:98:f1:9d:45:bb:42:4e:f9:
d4:a4:5e:6b:51:7a:39:81:13:f0:53:6e:fc:cc:b2:
10:f4:0e:17:e9:d6:cb:ca:15:d0:72:90:7a:59:1b:
00:a9:2f:4c:cd:ce:2a:fb:94:82:85:25:6b:c8:8d:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:36:A6:93:53:05:2D:1A:6C:04:3C:D8:C9:B3:1C:C8:60:5A:CF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3230/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3230/yIk2ppNTBS0abAQ82MmzHMhgWs8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.42.0/23
Signature Algorithm: sha256WithRSAEncryption
76:07:18:d1:12:81:19:ef:f3:3c:e6:9c:b8:b8:3b:44:e5:0a:
c9:bb:e9:67:49:6d:d3:68:0b:7d:f5:af:1b:60:f1:f6:b8:73:
82:23:0f:5d:56:85:4c:0c:d0:73:37:59:c7:97:cb:d6:67:e9:
7c:8f:c6:71:1b:d8:1b:70:23:fd:c9:ad:26:a9:52:09:ed:94:
72:51:14:84:71:d5:de:0d:25:8c:2a:13:ca:c2:7b:09:24:8f:
f7:58:fb:e3:79:1f:db:cb:c6:0c:e7:56:31:8a:a2:67:2d:62:
69:9f:1d:c3:8d:0b:49:38:84:3f:af:cc:a5:34:61:bf:45:44:
23:41:7a:43:45:26:6b:06:45:49:7e:b5:e1:36:4c:18:94:94:
cf:3d:a1:70:f7:f6:f8:66:29:72:c8:be:58:ff:cd:6a:6b:56:
7d:20:20:7f:06:25:21:f0:b0:2b:ca:e4:9f:91:6c:28:a8:77:
a8:d6:9d:f3:b0:09:9f:6d:22:db:83:29:31:6d:77:ad:9f:e7:
bd:36:ce:07:d6:55:20:62:90:ed:3b:47:5c:73:7d:c1:f0:00:
dd:2d:ca:61:17:38:68:d8:53:39:23:93:dd:19:b0:93:43:ee:
e9:a2:b0:8a:e4:09:df:01:bf:11:c5:c7:9a:74:2b:b1:73:66:
40:79:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 02:47:31 2023 by rpki-client on console-fra.rpki-client.org