Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8t0vOax2MXqpGoijKYFSZy0mmP8.cer
File: 8t0vOax2MXqpGoijKYFSZy0mmP8.cer (raw, json)
Hash identifier: 4c+IVlMVcMNdrT40Ij9CNgD0h9r7Ia6v5ZG3lBrrY10=
Subject key identifier: F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CFD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 16 Apr 2025 01:51:51 +0000
Certificate not after: Tue 14 Apr 2026 03:10:51 +0000
Subordinate resources: IP: 163.227.74.0/23
Validation: Failed, certificate revoked on Thu 24 Apr 2025 06:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53202 (0xcfd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 16 01:51:51 2025 GMT
Not After : Apr 14 03:10:51 2026 GMT
Subject: CN=F2DD2F39AC76317AA91A88A3298152672D2698FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:e9:15:f8:3f:28:03:c0:26:bc:05:9f:84:
b3:54:49:26:e7:4d:80:1d:3f:bd:56:3b:aa:de:b7:
e7:85:57:b0:73:0e:84:02:04:93:45:b7:03:1e:3a:
68:c2:66:9e:5a:3e:ca:a8:4e:b3:64:c9:33:82:4c:
d0:22:b2:d0:fd:60:7d:47:82:ec:41:7f:44:7f:a5:
af:cb:05:65:b5:a1:0f:fb:e0:1b:96:d6:68:1c:38:
f6:65:95:3c:ba:75:dc:fd:07:c6:0f:09:a9:fb:f6:
ff:c7:a8:ac:0d:a8:5e:d4:97:b3:29:7d:f2:de:1d:
75:b4:82:39:38:9a:1e:83:e4:d9:6f:2d:6a:2d:b3:
99:c4:25:cb:5a:e7:e6:1d:ef:97:4a:2c:6a:48:ea:
cf:2c:e7:6c:ac:34:0b:cb:1f:99:9f:e7:b7:9b:0a:
46:2e:e9:47:83:c7:de:58:b8:2c:ad:de:ea:50:ce:
e6:d3:a5:4b:8b:71:0b:67:82:4e:2e:0e:cd:74:22:
70:bd:fb:9c:82:50:09:a5:e6:6b:4c:dd:d4:83:e6:
20:86:1a:d2:dc:de:76:89:d3:f0:d1:ca:d5:a1:5a:
3c:f7:6d:a2:1a:7d:5c:d3:8a:98:c6:93:48:96:a7:
ae:97:e7:1b:28:27:8b:ea:5b:ad:a6:99:19:18:c1:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:2F:39:AC:76:31:7A:A9:1A:88:A3:29:81:52:67:2D:26:98:FF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3364/8t0vOax2MXqpGoijKYFSZy0mmP8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.74.0/23
Signature Algorithm: sha256WithRSAEncryption
81:93:b8:07:d1:1e:ed:e6:47:c3:ef:da:05:34:48:86:08:ab:
71:a7:14:8c:7a:b3:b3:96:26:65:aa:a5:f4:4e:62:ff:c1:24:
e2:4a:04:c9:a2:03:2a:53:b8:84:08:4f:fd:8e:e6:fa:9e:0d:
f6:cd:91:09:73:b6:ab:67:ea:46:cb:ea:a7:42:ae:ed:97:e5:
86:14:db:90:d6:f3:d5:ca:01:43:67:bb:da:62:eb:b9:3e:55:
3e:28:4b:90:87:6a:92:73:8d:aa:4c:7f:e1:4c:e7:be:72:e1:
90:bb:ed:79:db:d6:fe:64:3c:1c:f8:16:6d:01:07:75:29:89:
e5:8e:8c:5a:7b:71:f4:74:57:0e:67:05:ae:c7:c5:dd:a3:9b:
4c:0d:2e:31:55:cd:62:b3:62:53:e5:f1:25:93:d9:cc:5a:21:
8e:d2:ba:3f:cc:af:26:f1:10:4a:8b:a6:9c:6f:9f:03:28:b2:
16:14:87:32:83:76:78:e7:06:c3:11:f8:c9:3a:fc:00:5a:28:
a9:40:1c:4d:d5:4a:cf:41:4a:a1:0d:62:09:51:70:56:00:2b:
cd:b5:aa:f7:d9:78:c8:17:b3:5f:c7:3a:1c:a5:db:bc:a7:53:
95:ef:79:ea:08:2d:2d:a0:35:cf:28:a2:72:ed:da:ab:ee:96:
a6:41:2c:5c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAM/SMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MTYwMTUxNTFaFw0yNjA0MTQwMzEwNTFaMDMx
MTAvBgNVBAMTKEYyREQyRjM5QUM3NjMxN0FBOTFBODhBMzI5ODE1MjY3MkQyNjk4
RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTukV+D8oA8AmvAWf
hLNUSSbnTYAdP71WO6ret+eFV7BzDoQCBJNFtwMeOmjCZp5aPsqoTrNkyTOCTNAi
stD9YH1HguxBf0R/pa/LBWW1oQ/74BuW1mgcOPZllTy6ddz9B8YPCan79v/HqKwN
qF7Ul7MpffLeHXW0gjk4mh6D5NlvLWots5nEJcta5+Yd75dKLGpI6s8s52ysNAvL
H5mf57ebCkYu6UeDx95YuCyt3upQzubTpUuLcQtngk4uDs10InC9+5yCUAml5mtM
3dSD5iCGGtLc3naJ0/DRytWhWjz3baIafVzTipjGk0iWp66X5xsoJ4vqW62mmRkY
wbNJAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQU8t0vOax2MXqpGoijKYFSZy0mmP8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
NjQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM2NC84dDB2T2F4Mk1YcXBHb2lqS1lGU1p5MG1tUDgubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo+NKMA0GCSqGSIb3DQEBCwUA
A4IBAQCBk7gH0R7t5kfD79oFNEiGCKtxpxSMerOzliZlqqX0TmL/wSTiSgTJogMq
U7iECE/9jub6ng32zZEJc7arZ+pGy+qnQq7tl+WGFNuQ1vPVygFDZ7vaYuu5PlU+
KEuQh2qSc42qTH/hTOe+cuGQu+1529b+ZDwc+BZtAQd1KYnljoxae3H0dFcOZwWu
x8Xdo5tMDS4xVc1is2JT5fElk9nMWiGO0ro/zK8m8RBKi6acb58DKLIWFIcyg3Z4
5wbDEfjJOvwAWiipQBxN1UrPQUqhDWIJUXBWACvNtar32XjIF7Nfxzocpdu8p1OV
73nqCC0toDXPKKJy7dqr7pamQSxc
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:52 2025 by rpki-client