Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4-kR-6TrqZzwwUrXPulh9srrlDE.cer
File: 4-kR-6TrqZzwwUrXPulh9srrlDE.cer (raw, json)
Hash identifier: /c3Rt3cdvxaPCTPqKf0IV283orX6TiJbTnstyeMMFtk=
Subject key identifier: E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3A2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 07 Jan 2025 04:25:28 +0000
Certificate not after: Wed 07 Jan 2026 03:18:54 +0000
Subordinate resources: IP: 161.248.112.0/23
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14895 (0x3a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Jan 7 04:25:28 2025 GMT
Not After : Jan 7 03:18:54 2026 GMT
Subject: CN=E3E911FBA4EBA99CF0C14AD73EE961F6CAEB9431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:43:35:09:a3:1e:28:7a:cf:dd:91:cc:57:
0c:95:26:e7:a1:f3:66:6b:10:60:a0:d8:16:f1:7b:
62:09:58:2a:35:85:75:41:47:c5:9e:bf:c8:83:55:
fd:5a:8b:81:52:b6:09:2c:32:0e:af:72:c8:b0:fb:
c1:f1:43:f9:46:8c:aa:4d:a8:3b:05:cc:e1:75:21:
5c:64:11:08:8c:0f:b5:be:77:41:c7:77:68:7c:93:
da:29:62:99:1f:7f:21:38:e5:74:dd:e7:42:ba:89:
cf:3e:09:52:57:68:f8:a4:4a:53:05:54:4e:17:dd:
3f:9f:f6:00:e5:98:07:c5:fb:1e:58:5b:62:27:76:
34:4c:70:29:35:1c:e4:ea:2c:0a:b3:c2:45:39:69:
be:af:39:1a:6a:9a:9b:b3:86:32:b0:60:90:70:3a:
8a:ef:68:6c:ef:48:6f:e1:07:35:92:98:ca:38:b3:
79:26:b9:c4:1c:8d:0a:26:5c:b0:fb:d0:00:ed:c6:
4a:1c:51:50:89:55:67:91:44:9d:3a:9d:07:77:3a:
a1:90:f3:67:f4:d0:23:b9:de:70:ec:6a:21:6f:d6:
9e:e5:49:f0:65:9a:69:2d:f4:f6:23:b9:28:f3:c4:
79:39:27:fa:01:48:cd:94:a3:3f:ae:ca:7e:b0:0b:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:11:FB:A4:EB:A9:9C:F0:C1:4A:D7:3E:E9:61:F6:CA:EB:94:31
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/4-kR-6TrqZzwwUrXPulh9srrlDE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:48:26:d8:6d:c1:69:52:0d:1a:1b:d7:ba:96:3f:b8:d4:10:
9e:64:2b:86:90:17:ae:b0:e3:c4:2c:41:2f:51:44:f1:11:09:
d3:c0:a7:1d:5f:20:ab:1d:79:d8:f0:6f:ea:27:44:e2:0d:eb:
3c:0a:89:93:97:89:50:e7:ca:6c:1d:48:ba:56:32:3c:53:cf:
ce:04:8d:fe:2a:48:8b:c8:2e:87:21:9a:c5:cd:c2:bc:3c:53:
31:37:94:91:cf:de:1f:59:87:a3:b5:a0:d6:fc:3c:d3:ac:11:
44:a9:e1:fb:ed:39:a5:69:7b:52:12:fc:f4:7e:64:9f:96:75:
f0:47:16:9c:dc:11:9c:53:61:af:01:35:cc:c9:30:14:54:80:
21:5c:a3:52:74:b9:9c:54:0c:36:ee:8f:9c:da:48:11:40:e1:
ca:e4:84:d1:2a:73:d9:a6:13:3b:fd:8c:19:44:34:9b:5c:79:
a2:c7:04:98:0b:a4:72:0c:31:d7:53:44:cb:de:99:e0:2a:da:
5b:ed:1a:ba:c3:e5:77:e3:2a:af:18:32:d5:e3:ad:1c:c8:86:
18:82:c7:37:23:9c:f1:b7:c1:d6:6b:a3:ce:78:e6:fd:f3:cb:
45:99:57:01:06:be:fa:bd:6f:68:3b:af:9e:64:ab:5c:1b:2c:
6a:01:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:15:38 2025 by rpki-client