Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/20laOnIjJBxz9Pg6pUQ6wX7gt4I.cer
File: 20laOnIjJBxz9Pg6pUQ6wX7gt4I.cer (raw, json)
Hash identifier: JAJYBoGLIygRVY+AmmKqYgxjHRDnT9wJDG/jxIgrkO0=
Subject key identifier: DB:49:5A:3A:72:23:24:1C:73:F4:F8:3A:A5:44:3A:C1:7E:E0:B7:82
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7792
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:04:53 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 131547
IP: 43.227.252.0/22
IP: 43.228.36.0/22
IP: 43.243.136.0/22
IP: 103.38.224.0/22
IP: 103.43.184.0/22
IP: 103.47.48.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30610 (0x7792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:04:53 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=DB495A3A7223241C73F4F83AA5443AC17EE0B782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:92:b7:81:fc:cb:b2:b3:c2:55:f2:56:4f:
df:4b:9e:b4:7e:41:98:67:6c:d0:e8:52:06:b5:a3:
70:af:ac:a2:de:b1:11:90:ba:0c:58:fb:38:ed:c6:
3c:84:f8:e0:e8:6b:e2:82:14:6c:ec:ee:6b:88:b5:
1c:7f:6d:70:eb:17:ad:f4:91:50:6a:10:8a:20:23:
01:77:c8:97:7e:7f:96:f1:0d:e5:68:10:7d:14:e6:
3d:31:92:99:cf:c5:e3:ba:c5:fc:d5:22:d5:6f:84:
c5:da:91:eb:4e:09:ed:30:7f:b8:3e:a8:e5:11:3a:
91:98:00:83:05:ab:5f:7f:3a:dc:da:b6:76:51:5f:
9e:eb:a5:97:eb:1a:1b:73:9d:f4:b5:19:f5:99:54:
26:ee:30:3c:cd:22:22:cd:34:78:d2:d9:38:6f:b8:
46:8d:42:bc:70:f1:a1:82:29:03:e9:89:b5:12:a9:
44:6a:2b:47:12:61:67:13:cf:21:54:18:7b:c7:15:
3e:40:8a:94:b2:83:4e:95:b4:53:89:3f:c6:fb:1f:
08:1b:49:28:77:8c:d0:8d:2c:3c:ed:81:7f:6c:2a:
e0:59:9e:54:ea:55:f3:a9:df:9a:5b:d3:d2:93:68:
e4:c9:0e:77:c2:a2:c0:6a:d9:b0:a3:dd:5e:37:b4:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:49:5A:3A:72:23:24:1C:73:F4:F8:3A:A5:44:3A:C1:7E:E0:B7:82
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1029/20laOnIjJBxz9Pg6pUQ6wX7gt4I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131547
sbgp-ipAddrBlock: critical
IPv4:
43.227.252.0/22
43.228.36.0/22
43.243.136.0/22
103.38.224.0/22
103.43.184.0/22
103.47.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:53:14:53:f0:8b:76:02:5c:2d:11:72:cf:de:66:ca:c4:44:
46:a4:31:a3:b1:44:6d:35:be:35:80:66:c7:71:3f:06:5e:41:
68:77:48:2f:bd:b8:74:57:2b:32:16:9e:3b:24:61:9b:79:dc:
6e:af:45:22:1f:b7:f6:50:7b:ee:0b:03:90:ef:93:60:7c:b4:
dd:76:72:dd:55:d7:5b:9e:69:0c:2e:4e:40:4f:e6:9f:ed:eb:
13:96:e0:7b:43:a8:24:73:c0:a2:dc:c1:be:d6:da:f9:e7:e1:
84:0b:c2:29:3f:c7:15:55:4e:7e:a5:66:bf:88:0c:78:3f:ac:
b1:c9:31:60:92:87:76:93:8f:81:c7:6e:7e:2d:46:49:18:5c:
1c:e9:f8:3e:24:b7:39:84:a8:02:18:57:2e:a1:2f:49:72:7a:
f1:3f:04:26:6e:da:83:49:99:c6:ad:43:cb:c0:01:91:a1:12:
e5:83:ca:ff:31:e2:15:31:36:8a:06:bd:0e:da:ad:8c:54:69:
58:36:a5:84:07:90:bf:2d:cc:47:fc:01:09:32:eb:0a:e7:b9:
45:8b:1f:df:d8:88:4f:45:e9:e5:50:3b:82:d5:44:2e:94:1c:
c6:0d:56:7a:4e:4f:2d:99:a5:5e:25:12:50:a8:a0:61:8d:49:
94:7c:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-fra.rpki-client.org