Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
File: 1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer (raw, json)
Hash identifier: cq0Y4+tVm/usX24kM0dZer7aXhVl1HWRV3z90gB6KKg=
Subject key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7716
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:16 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 131484
IP: 103.159.122.0/23
IP: 2406:d140::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30486 (0x7716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:16 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:7b:da:76:12:24:cd:23:86:25:dd:94:78:
7b:c7:5e:80:be:dc:61:07:30:57:51:f9:ab:96:25:
d3:cc:a3:4c:35:4c:30:6c:81:86:99:11:55:f2:f8:
8e:63:71:70:0a:82:3a:92:dc:9c:c4:52:1d:e0:1e:
07:4f:67:47:ba:17:ac:4b:35:d4:b1:15:5b:61:ed:
55:5a:75:ca:eb:35:9c:79:69:c9:06:c4:0c:2e:03:
08:60:c0:bf:11:6f:22:1b:19:ff:84:47:07:a6:5c:
92:80:f1:a1:b5:d9:6e:80:64:4f:1b:ee:b2:c3:d0:
bf:17:75:ae:9b:2f:71:22:77:47:61:6c:c3:cc:87:
1b:97:00:fe:17:c9:3d:61:8a:a0:f6:c4:ee:ed:4c:
90:7c:8f:72:a6:ca:b6:98:7c:79:be:b5:1e:de:f0:
3b:ac:0f:26:72:f7:f7:2d:9a:a6:80:af:ab:1c:93:
c1:85:8d:bc:e7:95:1c:44:46:10:f1:29:31:af:13:
2f:0b:e7:f2:18:e9:09:d5:ac:db:19:ed:5a:bd:95:
8d:05:2c:1d:70:87:e8:2c:79:1c:44:02:bf:66:09:
87:bc:46:33:7e:cb:f5:42:3e:b7:f5:c3:bb:a3:c7:
c1:09:05:31:08:f7:a8:e6:b8:1c:fd:81:2b:7e:4d:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131484
sbgp-ipAddrBlock: critical
IPv4:
103.159.122.0/23
IPv6:
2406:d140::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1f:db:e0:05:fa:05:34:44:52:bf:f3:3f:af:7e:cd:25:3d:
b2:f0:a1:0a:42:d5:1b:af:1a:fe:18:ca:2e:4a:d4:48:20:79:
46:4c:a5:4b:c8:ef:90:fd:7c:45:ce:d9:f4:a6:6a:90:12:a8:
4c:b3:9b:19:8f:09:08:a6:4b:78:03:b6:1d:4c:25:69:09:fe:
e5:b7:b8:64:ac:0b:de:96:37:44:bb:f7:bf:4c:b8:a2:28:27:
1a:ff:81:ae:ff:6d:9b:33:5e:3c:22:45:8e:bd:3c:5f:ba:6d:
90:9e:ff:b3:9f:6f:82:e1:d9:d1:66:44:be:3a:ea:43:34:b9:
3e:63:2e:aa:ee:18:33:df:d0:e0:6c:4d:9a:50:a5:cb:ad:70:
62:57:11:09:34:21:03:34:22:f1:04:ce:f3:af:8b:d3:1e:a9:
1b:12:24:1b:ed:81:56:de:04:5e:0c:0f:c8:f8:aa:c0:e9:a6:
95:c8:02:c2:ad:0d:e7:78:d3:5f:d2:bb:96:4b:7c:fd:94:c2:
6e:e0:0d:a3:5f:b4:97:c9:c2:fa:76:bd:f8:52:ae:12:11:b8:
6d:52:fa:b2:74:67:e5:64:3a:f9:38:72:4c:5f:38:75:7f:57:
dc:30:a8:b3:9b:9c:67:e1:1e:94:4a:4e:b2:f0:91:62:a2:2e:
d0:a5:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org