Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2_ptHfT1EZIiPZZllNW3rTvzk5Y.cer
File: 2_ptHfT1EZIiPZZllNW3rTvzk5Y.cer (raw, json)
Hash identifier: lVuRgGU4NiZTIl2xhCnaKfykbbXOw9YeorVNZwujWJQ=
Subject key identifier: DB:FA:6D:1D:F4:F5:11:92:22:3D:96:65:94:D5:B7:AD:3B:F3:93:96
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/2_ptHfT1EZIiPZZllNW3rTvzk5Y.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 05 Jun 2021 19:58:43 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 63573
IP: 103.198.20.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30823 (0x7867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 5 19:58:43 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=DBFA6D1DF4F51192223D966594D5B7AD3BF39396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:36:e8:e8:a7:cf:c9:66:61:d0:85:25:b7:
24:4f:6d:c9:21:1a:41:17:ca:be:04:53:ba:21:ea:
fb:44:88:42:89:2d:91:99:22:b2:d4:c7:57:d7:ac:
c2:f4:c2:ba:2a:03:72:ac:aa:87:1f:cd:be:fc:95:
ab:65:c8:f9:71:d6:81:c8:a5:d8:45:8a:bc:54:b3:
86:26:9b:03:f1:b3:29:f9:f5:fc:fe:4b:d1:87:88:
d6:66:cd:a5:20:f9:5a:3a:94:19:72:04:bf:4d:09:
23:e3:a6:c3:5f:7f:8c:f1:c8:c7:a3:1f:cb:94:f2:
c3:12:b7:96:83:33:1f:6b:1a:7d:d4:ec:44:44:93:
b2:5b:93:ea:1d:de:1d:eb:01:ce:b5:ec:1b:9b:61:
e2:97:b9:07:90:e5:f6:17:a7:cc:2e:97:71:1b:78:
c9:12:8d:e0:26:52:99:cc:d3:2b:bb:72:ff:c5:75:
24:61:17:07:bf:d7:db:82:ea:8b:56:67:ae:91:63:
14:08:2f:d7:69:51:89:eb:d5:4e:4d:39:b3:2c:fd:
0f:2a:84:f1:d4:3c:d1:de:c1:a3:5d:16:bb:b5:5f:
4a:bd:e9:47:a5:a0:04:64:97:e4:ff:5b:04:eb:2d:
b2:2e:68:f4:c4:8d:a3:c8:e3:be:e4:a8:65:e4:64:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:6D:1D:F4:F5:11:92:22:3D:96:65:94:D5:B7:AD:3B:F3:93:96
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1377/2_ptHfT1EZIiPZZllNW3rTvzk5Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63573
sbgp-ipAddrBlock: critical
IPv4:
103.198.20.0/22
Signature Algorithm: sha256WithRSAEncryption
61:26:e9:84:01:93:26:09:ac:14:5a:41:2c:7f:11:ab:c1:13:
9f:9b:1a:a9:11:ad:8d:ff:fe:fe:86:af:6f:25:a0:76:b4:49:
e8:9c:93:c9:61:6d:45:82:1d:dd:3c:a3:78:88:75:8d:3a:c9:
f1:58:57:14:29:8d:a7:66:28:97:8e:26:4c:b5:a0:eb:99:24:
78:48:50:5c:87:3a:e1:19:fb:fe:b9:51:8d:44:ef:c7:0a:bb:
ad:61:ad:5b:2f:e1:32:c0:9a:5a:25:b7:f8:70:c9:56:60:84:
ce:31:1b:45:fc:fe:68:6c:d5:17:08:fe:63:50:a1:c2:1d:b2:
7a:bd:37:36:26:18:f8:6d:7d:ea:38:1f:cc:89:8a:47:0c:9a:
86:04:87:d1:4b:4d:11:ca:1c:89:03:f8:20:cb:3b:d5:a7:37:
33:21:da:33:13:af:d1:11:0a:62:aa:5f:e4:ad:d8:9d:16:c6:
bc:77:8f:d2:53:67:bc:2e:17:88:33:d3:57:02:6a:6d:12:39:
96:d4:12:a6:56:1c:68:b1:3f:47:b4:ed:07:a7:99:c8:af:5b:
9a:cb:2b:0c:71:f1:8a:05:df:ab:e9:c3:ea:2d:7f:8c:82:47:
7e:19:d7:90:c4:88:27:43:93:bd:59:fb:ae:41:9c:50:28:30:
7d:18:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org