Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
File: zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer (raw, json)
Hash identifier: CJqKLoJghUsLRxZRqV8NCpuvRZD0OPnl3JJ2B1BXrOE=
Subject key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AA0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:32:34 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: AS: 146839
IP: 103.172.160.0/23
IP: 2407:d7c0::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43532 (0xaa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:32:34 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:fd:85:e0:83:29:01:d6:f1:2f:6a:4c:69:
65:b4:c7:5e:bd:35:85:3e:a2:c8:3b:88:18:37:62:
86:69:8f:7b:2c:26:88:db:29:d0:5f:5d:cb:69:02:
e4:ad:71:be:f0:00:92:e8:b7:74:d3:ac:2b:4b:95:
9e:62:d7:5b:ac:ee:2a:4c:85:64:3c:44:ec:ee:da:
9b:dc:03:af:91:d2:c0:44:ad:0a:9b:12:0f:f0:88:
aa:eb:48:dc:38:25:93:5c:8a:70:a6:46:9b:30:61:
81:98:9e:83:b3:dc:6d:04:a2:3c:d1:6e:80:9e:61:
4d:1e:75:71:e8:f9:39:27:0d:6b:13:8d:fc:04:ba:
ad:14:28:1f:db:9f:06:4e:32:6e:8f:b6:0b:1c:a9:
3d:63:fb:8b:72:d8:cd:2b:39:5f:52:06:ad:92:4a:
e2:17:1f:d7:57:96:a2:36:af:b9:47:f9:61:aa:5e:
5d:08:50:f5:82:7e:ef:59:31:f1:87:a5:96:a5:e7:
09:c8:d2:b1:62:b9:bb:39:e3:7e:7a:65:5e:b6:8f:
64:eb:0d:77:f6:dc:fa:54:ef:c6:af:7d:94:43:63:
a1:76:3b:12:1f:8a:5b:f8:86:cc:a7:5a:a3:3b:9f:
e7:b3:3c:31:ef:a2:88:6d:02:b0:49:90:87:f9:95:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146839
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
IPv6:
2407:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:f4:84:2e:17:dd:11:50:60:8c:8e:be:e8:00:d0:c8:3a:9d:
83:1a:30:df:f9:eb:90:86:64:fc:e1:1b:b2:53:e1:75:47:76:
c4:30:25:e4:38:d4:80:c3:36:df:84:f3:bc:63:9b:35:4e:55:
ca:02:a2:13:99:84:55:b4:ae:51:a6:20:0c:6c:a0:7b:8a:10:
d9:3e:d4:e9:0b:15:ee:0c:a8:9a:22:eb:d2:45:e4:1a:03:2d:
ce:6f:b4:9a:ad:fc:26:08:20:b1:be:aa:64:6d:87:bd:8b:92:
12:d6:cb:42:1c:05:c2:a5:46:2e:56:d5:4d:ea:e4:c8:e4:a1:
24:b6:18:09:2d:46:1e:4f:5e:b6:6c:26:93:5a:f3:f5:dc:0b:
92:a8:3c:16:ab:b0:93:c3:53:69:89:58:4b:9d:f5:6b:aa:70:
d8:d1:bc:0b:3a:e3:56:b6:1e:9a:60:eb:b0:be:97:e0:a4:ab:
4a:bb:44:a7:4c:76:ac:fd:19:55:bd:e4:75:0c:9a:dc:43:9e:
0c:b1:c1:bb:ea:13:8c:bf:71:29:ab:2f:e0:cd:6c:63:3e:63:
67:74:1c:2c:72:8c:7e:0e:e2:06:2b:58:f2:80:a3:ce:44:ed:
99:ea:78:d7:21:de:d0:aa:a6:6a:b4:9b:84:54:ea:00:28:6e:
06:81:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 01:07:49 2023 by rpki-client on console-ams.rpki-client.org