Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yWfdv_mWeomMkoVjHt9NjodMh3c.cer
File:                     yWfdv_mWeomMkoVjHt9NjodMh3c.cer (raw, json)
Hash identifier:          tKJ5VDr+DaqdSAKb85fURxWAfmgOTEsVr5kl2m55SNA=
Subject key identifier:   C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AF0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 01 Feb 2024 01:22:17 +0000
Certificate not after:    Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources:    AS: 151294
                          IP: 2401:77e0::/32

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 23:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44815 (0xaf0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb  1 01:22:17 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=C967DDBFF9967A898C9285631EDF4D8E874C8777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:00:31:34:0d:91:2f:51:46:be:f8:56:b7:
                    6c:10:60:80:6d:09:52:32:28:41:13:f1:f9:58:3d:
                    af:a4:e3:80:76:25:8f:bc:4a:c6:ba:3c:31:8b:c7:
                    db:72:2d:48:65:48:e9:ed:2d:83:f4:e2:98:d1:ec:
                    d7:93:27:c9:5f:ab:54:71:23:86:7d:d4:9b:be:cb:
                    d0:a0:80:19:a2:f8:99:03:e6:e3:45:94:44:1a:99:
                    33:d9:56:33:db:34:a6:1e:b0:29:b4:1f:76:f5:e1:
                    3b:a4:5f:f3:32:a4:07:2b:30:ac:fa:81:50:e8:2d:
                    80:31:9e:4e:39:1e:1a:0b:ba:20:db:12:bd:1a:cf:
                    ee:d1:d4:b8:dd:c5:3d:76:f6:57:72:14:f7:eb:81:
                    71:50:4f:9e:22:76:58:5a:8a:02:6d:7c:9f:30:39:
                    37:fc:26:61:88:46:8b:06:7f:fd:d5:1b:e0:ac:d8:
                    5f:13:d4:e1:90:a0:1d:bf:b6:8b:8e:8d:5b:fd:be:
                    32:0e:c8:76:5a:b2:88:df:63:b5:d1:ae:f7:4f:77:
                    d8:ce:9a:36:c8:6f:f7:ae:e7:b0:5d:83:6b:4a:e3:
                    5b:f6:7c:fb:15:f8:7a:69:7f:10:e1:2b:97:fc:de:
                    f3:e4:aa:f2:83:66:2d:22:75:6a:84:ae:e3:a9:3c:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:DD:BF:F9:96:7A:89:8C:92:85:63:1E:DF:4D:8E:87:4C:87:77
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3257/yWfdv_mWeomMkoVjHt9NjodMh3c.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151294

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:77e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:79:12:d5:3f:ea:81:9e:df:c0:c5:88:4a:a6:aa:28:aa:
         0a:bd:49:39:06:13:e9:89:5a:dd:11:e6:3d:14:90:bb:7c:e2:
         18:20:74:ac:c5:07:b3:00:af:aa:0b:e3:3b:2b:ca:14:49:92:
         b7:42:76:e2:6b:15:c0:d7:bd:4d:75:4b:be:93:4b:4d:e2:b5:
         8b:19:dd:4a:64:17:16:2c:fe:df:46:18:09:29:58:dd:dd:96:
         29:2e:cc:14:7f:bd:3b:97:ec:09:da:f4:ba:c5:26:9b:07:28:
         d9:5d:f9:1d:73:e8:bc:20:2a:f3:aa:c4:db:f2:c9:12:33:7c:
         8a:48:76:1d:33:7b:44:d6:4e:0a:10:ac:67:58:3c:b8:41:0e:
         15:7f:d9:69:a2:8b:1f:89:68:f4:10:c0:41:62:03:10:68:99:
         3a:c1:d6:2e:d3:01:bb:58:39:76:2d:e2:ee:c2:dc:38:93:a1:
         d9:6e:b4:d7:3b:79:46:6e:cd:ad:84:a1:aa:ff:ae:7f:5c:7a:
         1b:06:05:be:5d:dd:c3:84:a9:40:96:51:67:17:c2:a5:d1:19:
         ab:c3:22:b9:5a:73:9e:5d:8b:f1:e4:23:d8:d3:95:73:06:cd:
         86:b0:07:d4:1f:8e:65:6a:58:01:36:52:82:b6:b6:e2:0b:7b:
         dd:f8:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 03:07:02 2024 by rpki-client on console-ams.rpki-client.org