Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer
File: yWfdv_mWeomMkoVjHt9NjodMh3c.cer (raw, json)
Hash identifier: tKJ5VDr+DaqdSAKb85fURxWAfmgOTEsVr5kl2m55SNA=
Subject key identifier: C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:22:17 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 151294
IP: 2401:77e0::/32
Validation: Failed, certificate revoked on Mon 01 Apr 2024 23:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44815 (0xaf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:00:31:34:0d:91:2f:51:46:be:f8:56:b7:
6c:10:60:80:6d:09:52:32:28:41:13:f1:f9:58:3d:
af:a4:e3:80:76:25:8f:bc:4a:c6:ba:3c:31:8b:c7:
db:72:2d:48:65:48:e9:ed:2d:83:f4:e2:98:d1:ec:
d7:93:27:c9:5f:ab:54:71:23:86:7d:d4:9b:be:cb:
d0:a0:80:19:a2:f8:99:03:e6:e3:45:94:44:1a:99:
33:d9:56:33:db:34:a6:1e:b0:29:b4:1f:76:f5:e1:
3b:a4:5f:f3:32:a4:07:2b:30:ac:fa:81:50:e8:2d:
80:31:9e:4e:39:1e:1a:0b:ba:20:db:12:bd:1a:cf:
ee:d1:d4:b8:dd:c5:3d:76:f6:57:72:14:f7:eb:81:
71:50:4f:9e:22:76:58:5a:8a:02:6d:7c:9f:30:39:
37:fc:26:61:88:46:8b:06:7f:fd:d5:1b:e0:ac:d8:
5f:13:d4:e1:90:a0:1d:bf:b6:8b:8e:8d:5b:fd:be:
32:0e:c8:76:5a:b2:88:df:63:b5:d1:ae:f7:4f:77:
d8:ce:9a:36:c8:6f:f7:ae:e7:b0:5d:83:6b:4a:e3:
5b:f6:7c:fb:15:f8:7a:69:7f:10:e1:2b:97:fc:de:
f3:e4:aa:f2:83:66:2d:22:75:6a:84:ae:e3:a9:3c:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151294
sbgp-ipAddrBlock: critical
IPv6:
2401:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:b4:79:12:d5:3f:ea:81:9e:df:c0:c5:88:4a:a6:aa:28:aa:
0a:bd:49:39:06:13:e9:89:5a:dd:11:e6:3d:14:90:bb:7c:e2:
18:20:74:ac:c5:07:b3:00:af:aa:0b:e3:3b:2b:ca:14:49:92:
b7:42:76:e2:6b:15:c0:d7:bd:4d:75:4b:be:93:4b:4d:e2:b5:
8b:19:dd:4a:64:17:16:2c:fe:df:46:18:09:29:58:dd:dd:96:
29:2e:cc:14:7f:bd:3b:97:ec:09:da:f4:ba:c5:26:9b:07:28:
d9:5d:f9:1d:73:e8:bc:20:2a:f3:aa:c4:db:f2:c9:12:33:7c:
8a:48:76:1d:33:7b:44:d6:4e:0a:10:ac:67:58:3c:b8:41:0e:
15:7f:d9:69:a2:8b:1f:89:68:f4:10:c0:41:62:03:10:68:99:
3a:c1:d6:2e:d3:01:bb:58:39:76:2d:e2:ee:c2:dc:38:93:a1:
d9:6e:b4:d7:3b:79:46:6e:cd:ad:84:a1:aa:ff:ae:7f:5c:7a:
1b:06:05:be:5d:dd:c3:84:a9:40:96:51:67:17:c2:a5:d1:19:
ab:c3:22:b9:5a:73:9e:5d:8b:f1:e4:23:d8:d3:95:73:06:cd:
86:b0:07:d4:1f:8e:65:6a:58:01:36:52:82:b6:b6:e2:0b:7b:
dd:f8:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 03:07:22 2024 by rpki-client on console-fra.rpki-client.org