Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ecx0P_pgKFVeC5k8550d_TD1MSU.cer
File: Ecx0P_pgKFVeC5k8550d_TD1MSU.cer (raw, json)
Hash identifier: OzrSh+G3RXNwkUJ0RaKoKrlewQncTT+n53pTFQaCX80=
Subject key identifier: 11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3996
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 12 Dec 2024 03:14:31 +0000
Certificate not after: Wed 10 Dec 2025 08:49:25 +0000
Subordinate resources: IP: 160.250.214.0/23
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14742 (0x3996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Dec 12 03:14:31 2024 GMT
Not After : Dec 10 08:49:25 2025 GMT
Subject: CN=11CC743FFA6028555E0B993CE79D1DFD30F53125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:09:2d:08:83:a7:bb:ab:5f:82:94:fd:de:
c9:19:b5:3a:ac:08:a1:1b:62:eb:ba:d7:55:4c:62:
b4:32:46:7c:22:2c:b4:89:b7:0d:dc:da:2a:ae:6d:
a4:46:cd:11:ee:92:54:44:26:a3:ce:10:43:82:87:
6f:3c:05:3d:af:42:3c:9f:f2:a5:6b:e2:b5:b4:63:
61:50:6a:ed:ea:c1:8d:5b:88:0e:33:02:ec:16:01:
e9:eb:62:7a:6d:9e:a7:fb:a6:51:2d:df:c1:41:0e:
cc:78:5b:f6:d3:ed:0f:4a:21:41:10:78:f2:73:ec:
2f:04:f6:a9:96:ae:0d:d3:14:5e:59:65:d1:39:77:
77:ce:67:63:d7:f3:55:b3:a6:6b:cf:3c:3b:02:50:
c3:6e:e9:5b:6f:7d:8d:cf:61:de:9e:30:2b:94:b9:
79:b6:fb:8b:57:b6:c8:da:c2:99:de:f4:2f:72:42:
42:68:a1:a5:50:cb:ca:da:23:3c:ae:a6:d8:5d:50:
76:12:04:00:73:df:d0:21:a3:70:89:c0:3e:87:6f:
c2:7c:03:2f:8f:67:0a:4b:1a:58:01:2b:81:28:13:
68:fd:1d:6a:0c:01:c1:10:15:d0:ca:de:39:a7:ca:
e2:6b:76:5d:e2:b2:8f:c4:c3:b9:bd:e3:4f:9b:1a:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:74:3F:FA:60:28:55:5E:0B:99:3C:E7:9D:1D:FD:30:F5:31:25
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3338/Ecx0P_pgKFVeC5k8550d_TD1MSU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.214.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c2:18:73:07:9b:3e:c0:9f:20:d8:7c:f3:4d:17:a1:3c:c4:
a9:3b:55:69:c6:17:f9:b9:cb:31:85:64:81:e9:e1:58:5a:cf:
07:76:43:21:57:be:83:3d:67:77:c3:bb:f5:0a:d9:85:e4:81:
a5:ad:cd:89:82:52:eb:f6:91:19:b8:23:7c:2f:96:6c:a9:f6:
5a:e6:08:ca:fd:84:5c:d7:c7:18:5e:0f:c9:84:6f:ec:51:35:
7a:6a:f8:7f:8d:14:8b:2e:88:16:e3:64:1f:aa:e4:4f:dc:e2:
4a:ea:d0:fa:64:13:9a:c5:60:b3:f2:25:f9:f8:ce:c0:ff:4f:
e7:fa:c7:56:32:3a:73:08:0d:52:58:33:09:69:72:63:6c:dd:
36:a7:4b:b8:42:3a:1d:d9:21:2d:2f:7a:73:d2:55:38:7b:d9:
c4:d8:d9:1a:b2:72:ee:11:86:94:37:7e:b5:2e:6f:2c:f4:3c:
53:ec:ba:43:9f:08:27:d1:32:52:db:8f:87:87:4f:3f:97:10:
c6:bb:bf:a5:92:36:e3:15:63:45:c0:89:77:8c:a4:e8:cf:71:
ca:1f:70:06:f6:25:52:c6:14:75:fd:77:ef:b4:97:32:03:97:
b4:d8:c0:20:26:1a:a8:17:c0:0b:a9:e8:2e:cb:6f:94:d4:39:
7c:63:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:55 2025 by rpki-client