Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/48Zj4uHtZr__VTJOnKyqNEZOnHs.cer
File: 48Zj4uHtZr__VTJOnKyqNEZOnHs.cer (raw, json)
Hash identifier: 9o4VoSDsJTSG4wiVsoBD9AypOBhYd2vrVSB7shbQSkc=
Subject key identifier: E3:C6:63:E2:E1:ED:66:BF:FF:55:32:4E:9C:AC:AA:34:46:4E:9C:7B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/48Zj4uHtZr__VTJOnKyqNEZOnHs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 19:59:55 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30883 (0x78a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 19:59:55 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=E3C663E2E1ED66BFFF55324E9CACAA34464E9C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:c0:40:0a:76:0f:e6:fb:07:fc:dc:67:d7:
6e:e4:37:91:e3:e8:f6:68:5a:c9:1c:f8:75:a4:74:
7d:39:d5:45:da:37:8b:5a:2a:78:fe:cd:c4:bb:f0:
e5:5c:d8:0d:ea:59:7a:94:0f:51:17:4b:bb:c0:91:
98:cb:79:45:59:a6:a5:e2:94:7c:bb:0e:3c:13:1d:
69:c7:17:db:11:1d:a6:b6:81:13:41:72:4c:a7:be:
27:13:c2:b5:99:d7:bf:18:f2:3f:ac:42:d8:36:02:
a5:e0:7c:64:10:cc:4e:38:6d:a9:b6:1a:1a:6e:97:
6d:34:88:d3:79:60:bb:a5:68:08:83:0e:76:9b:13:
e5:02:31:1c:da:e7:6c:4f:33:7d:9f:9d:69:c9:47:
21:15:7d:66:8a:86:d0:5b:cf:d1:7e:1f:d6:5e:4c:
19:f3:d0:ac:82:24:44:dd:0e:20:41:6c:ee:26:48:
8b:88:0f:89:81:41:08:16:3c:7c:8d:2f:d9:9d:78:
4f:34:e2:c2:00:27:fc:00:81:35:f1:e4:96:ad:d0:
a8:5b:90:2e:cf:c1:0c:de:86:a6:9c:e5:f7:47:f8:
30:9d:56:f0:a1:b8:7f:1d:a4:c8:88:62:e4:53:2a:
01:2a:f0:84:21:03:bf:c8:ed:b9:a0:b4:7b:08:96:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:63:E2:E1:ED:66:BF:FF:55:32:4E:9C:AC:AA:34:46:4E:9C:7B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/48Zj4uHtZr__VTJOnKyqNEZOnHs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
66:73:f0:0e:f4:cc:ec:46:7c:fe:20:18:b8:76:31:e1:82:24:
95:9f:c7:b6:2e:43:a0:ee:38:a3:31:79:19:c8:37:17:a2:20:
98:c7:d5:d9:25:92:83:a6:be:db:df:06:d1:aa:e2:88:f5:cc:
34:1e:b3:78:bf:f5:c8:8c:6b:ef:e1:21:b4:99:a8:5e:71:00:
4c:68:c7:2a:4a:d5:d2:a3:7f:ca:10:eb:b2:b5:7c:2b:6b:5d:
87:38:67:3e:03:52:69:1a:b2:96:1d:83:ee:0c:31:9e:8c:c8:
9b:f9:36:4a:cf:98:5c:5e:5c:a1:d3:3f:a8:b2:25:9d:62:71:
d8:a6:6e:8f:de:0d:50:32:7a:48:e1:8b:5c:ec:27:15:ac:69:
34:db:4d:7f:23:48:b6:b9:07:fb:d0:ff:a0:c3:b2:80:ad:7e:
cd:62:64:8a:e1:83:65:a8:46:a6:4f:61:83:50:b3:55:22:27:
24:fe:d4:bb:44:32:ab:8c:9d:57:17:28:5b:f4:66:61:ab:9f:
2c:02:25:78:d1:b8:d3:1a:0d:48:91:08:79:b6:c9:38:e2:3d:
0a:31:c2:bf:aa:ee:c2:d6:6b:b0:a5:d9:33:28:69:64:bf:5c:
a5:b9:71:03:58:52:e2:cb:03:c6:a5:d3:cc:e7:92:70:9e:e9:
1f:fa:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org