Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7BRTzo9P3rT2cWhPomfBhndJeXc.cer
File: 7BRTzo9P3rT2cWhPomfBhndJeXc.cer (raw, json)
Hash identifier: MLLfc6BCXiR80ynznSiilIz7YMUJtB7ky8NC8Mynn40=
Subject key identifier: EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3CE1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:14:47 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 161.248.112.0/23
Validation: Failed, certificate revoked on Thu 17 Apr 2025 06:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15585 (0x3ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Apr 3 08:14:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EC1453CE8F4FDEB4F671684FA267C18677497977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:32:5f:77:c9:9e:1c:62:ae:38:90:7b:ae:
71:52:2b:4f:09:71:a4:0c:8b:43:1d:e2:76:0b:0d:
60:db:e7:67:10:36:cc:91:bb:dc:59:f0:64:d4:e3:
40:51:31:b4:86:50:0c:96:b1:52:6b:67:77:fe:7c:
5f:84:5a:7b:00:61:97:40:98:68:14:ef:3c:a9:ea:
61:31:d6:be:38:f5:49:d9:cc:73:07:3a:7e:ca:fd:
e3:92:04:ac:f4:8b:83:6c:d5:62:9c:10:60:28:4b:
e5:88:74:c7:b1:d7:07:62:cb:7f:51:8b:d6:a9:5c:
84:b7:ff:cc:af:bb:21:05:10:b2:72:78:f8:8a:13:
1b:12:ea:4e:3e:94:24:46:72:da:07:31:06:7b:6c:
74:ae:48:66:10:4e:41:bc:a4:03:ab:8e:20:ad:42:
b9:7e:2a:32:aa:2d:ef:ae:f4:d9:fd:1f:ae:76:ac:
57:07:77:4b:ef:32:e2:4c:56:ec:9e:ae:66:49:d8:
0c:0b:26:aa:ea:3a:9d:73:68:2f:f5:b8:8f:54:b2:
3e:75:c2:87:06:91:0f:9c:bf:a2:1e:4e:34:6e:da:
6f:57:7c:a9:b4:25:33:85:0c:77:5e:57:c4:ce:e8:
fa:e9:e7:de:eb:28:d2:ca:90:90:6d:1b:20:b0:79:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:53:CE:8F:4F:DE:B4:F6:71:68:4F:A2:67:C1:86:77:49:79:77
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3348/7BRTzo9P3rT2cWhPomfBhndJeXc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b0:b7:de:52:37:27:3f:f2:fd:82:6d:fe:11:4b:46:5e:8a:
cd:c9:49:b0:43:47:b1:f5:0b:09:58:ba:c2:dc:ed:4e:0d:c9:
c5:6c:3b:45:01:6e:b3:4c:e6:22:bf:23:83:c2:3d:4f:81:b4:
a0:5f:78:7e:d5:69:75:c8:5e:04:de:59:08:68:2d:44:44:ef:
d7:2c:79:e6:c2:b3:c2:2c:56:9a:fa:45:fa:e9:e8:76:3e:80:
08:df:d4:50:80:e5:3a:2d:3b:c9:eb:ed:1e:34:52:85:83:a1:
54:53:13:2c:a1:ea:24:40:8a:5b:85:6b:4a:a5:4f:5c:3f:dd:
37:d1:ab:88:e5:61:9b:83:54:4e:76:df:fc:2f:56:a4:db:7d:
3c:ee:74:bc:73:0a:28:ad:26:98:71:7d:cb:fb:3d:b4:d9:86:
16:bc:3b:c1:8b:9b:eb:34:26:08:fa:40:ff:46:4a:e4:60:cf:
64:a7:1e:9d:a5:88:4f:7f:29:c9:fa:11:0e:7a:af:87:d2:0a:
01:be:a4:ce:d4:19:24:0a:44:49:2e:a3:fb:f3:b6:2f:4b:61:
d9:2a:4d:b5:3c:96:3b:7c:17:df:69:be:7b:3c:2c:0a:5e:8c:
f8:ae:73:dd:66:16:e6:eb:6b:d8:29:8f:da:0b:22:6a:b7:b2:
94:05:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:36 2025 by rpki-client