Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zRCwfxMXs3n2IGylsUEuLkByOpE.cer
File: zRCwfxMXs3n2IGylsUEuLkByOpE.cer (raw, json)
Hash identifier: ZqsO7/5Oy79Akyg/WEXIgVlvZejOn3Ab2jk8zK7CDXA=
Subject key identifier: CD:10:B0:7F:13:17:B3:79:F6:20:6C:A5:B1:41:2E:2E:40:72:3A:91
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:22:25 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 103.103.188.0/22
IP: 2401:f7c0::/32
Validation: Failed, certificate revoked on Mon 01 Apr 2024 07:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44823 (0xaf17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:22:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD10B07F1317B379F6206CA5B1412E2E40723A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:87:b1:b0:e9:c5:9e:83:a3:9e:e5:f3:f1:
89:12:4c:ad:a8:d2:31:13:ee:d2:da:35:c2:1c:d5:
49:9e:62:79:15:33:e0:47:41:08:1b:32:db:3e:58:
d3:fa:5a:1d:55:7a:95:da:c4:72:d2:b9:fe:4e:1c:
f6:92:47:ae:5d:88:e5:38:9e:9c:51:5e:e5:e9:b0:
b8:4a:cf:a7:e2:cd:b5:c5:96:17:90:97:3f:49:17:
ac:89:fd:c3:e8:9d:f3:6d:55:fa:19:98:bf:d2:60:
08:ca:32:5b:42:27:e9:09:7a:a4:4f:dd:0c:0e:fe:
67:89:c1:5b:f5:e6:2f:81:4b:44:e8:20:dc:fe:88:
55:c6:47:fb:81:62:46:3e:b2:f0:73:24:f3:7d:3b:
4e:bc:0a:54:2d:48:a0:03:a7:1a:7c:88:cf:bc:38:
64:9d:e7:a7:48:48:73:b3:f0:af:7d:41:00:ec:e7:
11:a7:c0:3d:e2:80:88:5c:f4:b1:df:ac:e1:6f:30:
f2:53:7d:00:fa:86:01:26:e3:d9:ba:36:c5:d8:cc:
e7:6a:c8:49:86:7e:db:39:19:24:6a:7a:07:5a:bf:
91:11:ab:b9:b4:bc:42:37:9e:1c:6a:08:9f:6d:b8:
fb:92:ea:49:1f:2b:0f:93:31:b9:04:90:9d:86:36:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:B0:7F:13:17:B3:79:F6:20:6C:A5:B1:41:2E:2E:40:72:3A:91
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2628/zRCwfxMXs3n2IGylsUEuLkByOpE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.188.0/22
IPv6:
2401:f7c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:4b:0e:41:1c:05:ee:cd:79:2f:87:d2:ff:54:93:f2:be:ec:
19:53:fb:5c:8f:a7:0d:18:d4:26:34:00:89:11:62:79:9f:6d:
c8:ec:6e:c9:b4:14:7c:7d:99:06:d8:85:08:ba:cd:b2:65:a2:
09:17:0b:21:52:cc:f3:a7:50:ea:ea:8e:51:e0:9a:2c:7a:6a:
0c:64:f8:c8:b9:b9:7d:fe:c4:c2:aa:a9:b5:76:80:09:b7:3f:
49:aa:6e:cc:f8:d0:43:5f:8e:48:d3:b1:91:c7:c9:d0:8d:d6:
e2:b2:9a:79:59:e4:35:b5:62:ee:00:b4:e4:a8:12:75:2d:c2:
b6:f3:59:84:45:31:a5:12:ae:3b:32:8a:f1:4a:ad:4c:61:e3:
a4:76:ac:cc:db:5d:11:e9:09:c5:57:ca:2d:44:10:ab:c4:1b:
a5:c4:3b:f6:25:c5:96:92:42:44:2b:ea:ff:d4:37:d4:39:84:
ff:18:78:e7:b0:49:11:31:e3:3a:1b:5b:06:a2:ce:10:85:09:
43:11:5e:b0:89:3b:aa:2d:6f:fc:6b:4c:74:88:3e:4f:35:6f:
3f:bd:7c:e1:a8:16:8c:83:dc:a9:95:1f:8d:bb:8d:a5:20:58:
98:81:0e:81:3a:76:f7:3f:21:d5:72:60:4c:23:f4:ed:fe:73:
d7:9f:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 08:23:26 2024 by rpki-client on console-fra.rpki-client.org