Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer
File: UeqyjyOP10B8L2Y5YEid1tlR2nQ.cer (raw, json)
Hash identifier: zgqjMASwjJpIKHXm1NqadxiFoqKHah2JjvQVVKY2790=
Subject key identifier: 51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: D20A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 08 May 2025 02:19:59 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: IP: 103.90.192.0/22
Validation: Failed, certificate revoked on Thu 08 May 2025 06:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53770 (0xd20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 8 02:19:59 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=51EAB28F238FD7407C2F663960489DD6D951DA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ef:3a:95:b8:85:c3:97:e6:16:8b:3d:8d:
7e:fa:e6:03:34:d8:98:3d:f7:7a:1f:23:59:cb:d0:
d2:7e:97:61:d8:36:1b:a3:8e:42:79:7f:9d:07:20:
29:d9:ea:a1:23:16:72:91:4e:04:00:5e:40:25:88:
e9:2d:b9:38:76:61:ed:b0:87:f8:5a:80:e2:5b:f3:
28:f1:f5:af:2b:ff:d5:74:97:ad:2a:2c:40:ab:d6:
d5:5a:b1:d7:2c:bd:84:f3:d4:a1:ed:a7:18:28:8b:
9e:84:69:42:4f:e0:3f:72:6f:97:0c:ed:07:8c:2b:
bf:19:3e:2d:5a:01:55:30:a1:44:a2:72:25:00:a0:
74:42:68:35:66:ee:f1:00:e6:4e:0c:a6:9d:b9:b9:
40:71:37:4d:fa:3c:21:6e:37:62:56:62:86:b2:69:
b4:eb:20:f9:aa:0f:91:8d:0e:58:aa:be:e1:d0:86:
a6:17:3b:e0:c6:aa:29:87:41:1d:f0:04:07:ed:83:
82:01:d4:ae:7a:a6:ee:57:c7:93:fd:7f:6e:1d:1f:
4b:95:59:4c:33:d3:da:bf:ae:06:83:ac:fc:e3:46:
0e:7c:b6:f5:77:e4:8d:cf:4e:b6:71:58:31:a2:11:
45:ed:12:f5:04:58:b6:f9:6a:b6:de:f7:8b:2a:ea:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:B2:8F:23:8F:D7:40:7C:2F:66:39:60:48:9D:D6:D9:51:DA:74
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2403/UeqyjyOP10B8L2Y5YEid1tlR2nQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.192.0/22
Signature Algorithm: sha256WithRSAEncryption
49:51:35:b9:9f:f5:35:b4:3b:1f:42:04:6e:50:f6:73:2a:93:
37:20:6b:1b:fe:28:29:74:42:f8:18:20:aa:82:47:70:81:e3:
34:38:34:90:31:8d:44:56:8c:34:41:ed:aa:47:e1:d4:e3:c1:
6a:f1:43:80:1d:33:0b:7f:65:f7:c8:96:70:ef:4e:44:70:e3:
23:7d:f8:64:6a:9b:fc:d8:14:2f:59:9a:c5:1e:19:d3:09:0d:
8a:14:2b:4f:d8:60:87:d6:49:85:f5:fe:94:f5:bd:de:11:24:
7b:75:0b:99:05:b0:29:06:0a:42:f4:2d:4d:e3:81:81:32:ec:
4c:53:ac:f6:92:3b:3a:ab:c0:d3:b6:74:21:35:cc:be:52:dd:
24:26:cc:fb:ed:dc:b4:87:5d:95:f4:39:ce:c4:92:d3:27:9f:
e3:90:8e:f1:20:f2:c6:e4:52:90:61:bf:46:49:a0:45:0e:3a:
bd:b1:3a:ab:54:d2:e7:66:cd:b8:42:55:69:dc:30:43:1d:c4:
21:ef:e7:ac:c5:6d:9b:72:82:a0:dd:c3:98:b5:9a:11:62:a7:
c0:0b:0c:49:1e:af:c6:c2:d7:a1:df:de:ac:f4:10:0c:81:b3:
15:23:b7:e4:27:f1:d0:98:4a:27:75:17:d2:9a:d5:f2:27:d1:
80:3b:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:44:46 2025 by rpki-client