Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fie0dMJw_8OVTclBg_bVRo8fV3Q.cer
File: fie0dMJw_8OVTclBg_bVRo8fV3Q.cer (raw, json)
Hash identifier: yX198/1j9/iqD+l8IXqePcrXy5fX5b/u1btfg8rSaYw=
Subject key identifier: 7E:27:B4:74:C2:70:FF:C3:95:4D:C9:41:83:F6:D5:46:8F:1F:57:74
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3948
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/fie0dMJw_8OVTclBg_bVRo8fV3Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 28 Nov 2024 02:10:28 +0000
Certificate not after: Fri 28 Nov 2025 01:56:32 +0000
Subordinate resources: IP: 160.250.104.0/23
Validation: Failed, certificate revoked on Fri 21 Mar 2025 02:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14664 (0x3948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Nov 28 02:10:28 2024 GMT
Not After : Nov 28 01:56:32 2025 GMT
Subject: CN=7E27B474C270FFC3954DC94183F6D5468F1F5774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:77:96:27:a2:03:28:ab:b4:19:97:a5:af:
60:e7:b4:64:06:1d:c1:fb:b5:74:52:91:d9:d7:d7:
04:6d:e4:31:08:ee:7f:44:42:c6:a9:a9:ed:82:63:
78:c9:46:1f:7e:09:ca:c5:d1:f6:0b:2a:8d:5f:0d:
69:77:45:fb:c5:ce:05:44:51:d5:03:7e:b8:fc:9c:
a0:dc:bf:27:ad:20:04:ca:2c:fe:75:82:87:e9:48:
af:16:8a:6e:08:31:69:e1:dc:a8:77:62:c7:e9:cd:
8e:56:65:b8:e1:ba:7f:91:9a:bd:a9:35:0b:3b:e0:
33:2f:a2:e2:ea:46:f9:70:cd:22:45:63:20:de:fa:
3a:71:93:19:08:79:b4:f8:5d:20:74:b4:09:90:f2:
47:cc:e2:b1:8c:26:12:55:2a:0d:e6:e8:60:4f:3f:
eb:eb:ba:1b:72:49:38:7b:c1:ec:02:8f:d8:21:ac:
01:4a:27:7d:84:65:58:0f:c4:e1:0a:33:c0:4b:7a:
16:dc:aa:b9:e5:b3:f8:13:b4:e6:dc:df:c9:fb:da:
b1:16:15:04:39:8d:5b:d5:fa:d7:0f:92:b5:3b:6a:
9e:ad:61:81:55:92:6d:93:ae:8e:70:76:b3:6b:a8:
a3:4b:6a:92:7f:98:e5:62:89:32:7e:e3:5c:07:7f:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:B4:74:C2:70:FF:C3:95:4D:C9:41:83:F6:D5:46:8F:1F:57:74
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/fie0dMJw_8OVTclBg_bVRo8fV3Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.104.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:66:3f:f9:4c:88:2c:a7:85:59:5a:ce:68:42:c7:a2:e1:59:
cd:e9:52:78:af:a8:c6:f5:9e:87:4f:63:c1:17:04:2c:e6:0f:
bf:83:89:cf:64:e2:ed:44:47:3b:59:b4:4c:8e:a9:13:fe:1b:
ac:46:50:9c:f7:2b:3d:2c:6d:af:fb:4d:46:a2:16:d9:de:75:
b1:94:06:d7:21:8f:0d:da:dc:2a:27:08:6e:9e:17:63:a5:34:
16:90:ed:d3:38:4f:e9:7c:de:73:7c:6b:49:27:24:1e:cc:d5:
b7:6f:06:70:39:08:e8:2a:21:70:58:38:ce:d9:b4:be:ca:aa:
3f:0d:24:34:56:82:4c:3d:3e:c4:5c:41:a0:e4:af:23:c4:74:
2f:cd:01:82:b9:4b:d0:3c:ea:da:07:59:0a:ed:a3:4f:c8:d6:
5b:b0:ed:c0:c8:30:4f:02:f5:cc:2f:4d:f7:8c:7d:af:c6:78:
57:da:e0:7a:ba:85:4d:2b:d8:0d:3d:33:e6:c9:c3:d5:fd:a9:
6d:fb:b7:e6:4b:1e:a2:81:32:04:a6:cd:c5:05:99:59:35:27:
ac:f5:45:8d:2c:35:9f:17:63:e7:25:8c:42:38:27:c2:ec:83:
3a:ac:6a:10:5b:fc:5c:84:31:19:55:db:ae:f5:ee:cd:60:1a:
c9:aa:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:28 2025 by rpki-client