Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer
File: 65lHnTb98mqIaWBFlw5QFUEjWGw.cer (raw, json)
Hash identifier: s54G5xW7pnWF5nCOdO7eZna3DY9VJCEpPiSbLaM+Fbo=
Subject key identifier: EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 770A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/65lHnTb98mqIaWBFlw5QFUEjWGw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:02 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 59066
IP: 43.224.160.0/22
IP: 103.43.192.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30474 (0x770a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:02 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=EB99479D36FDF26A88696045970E50154123586C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:32:0a:7f:62:32:19:a0:13:a8:a8:23:ab:
30:21:1c:90:08:96:19:72:a0:5e:36:87:2e:f4:be:
c9:56:81:47:2b:ba:61:04:1e:77:c3:aa:2e:dd:ec:
82:e6:67:dd:a2:67:7f:41:07:b5:2b:a7:fd:e3:51:
5b:3d:95:0b:00:ae:d2:56:c2:8f:12:8f:4e:a6:b8:
d2:c6:08:5c:16:33:39:ff:40:09:a5:b4:08:d2:d1:
00:d2:4c:42:7a:3f:0e:b1:8c:79:1c:10:18:a4:63:
85:5c:46:a3:da:42:f0:43:2b:9a:f1:83:80:8a:74:
ff:15:f2:72:54:f0:43:1a:12:a3:40:32:20:18:73:
35:d1:65:87:8d:04:ef:3e:f6:c1:c2:a9:de:37:da:
7f:9a:e6:fe:46:db:6f:4a:bf:1c:9d:d5:f5:a9:d1:
86:3f:f9:a5:c9:0e:49:22:4e:c2:24:c9:27:8e:ba:
28:55:a7:ad:ab:e6:da:ac:1b:e2:b5:80:b3:7d:da:
43:3a:22:b7:55:87:87:6d:33:96:e5:f8:02:3e:54:
08:20:3f:42:a9:08:e0:c4:66:94:35:4a:f1:20:8e:
95:52:ec:df:27:0f:ec:e2:b5:c4:16:b3:a9:2e:e5:
3a:c0:22:89:db:0a:0c:70:98:8e:b1:8a:c2:03:ff:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/65lHnTb98mqIaWBFlw5QFUEjWGw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59066
sbgp-ipAddrBlock: critical
IPv4:
43.224.160.0/22
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:a7:fd:4c:71:92:c8:0b:84:79:b2:63:c0:37:0b:d3:e8:45:
5f:c0:cd:1c:9a:c4:cb:6f:81:e7:98:47:3f:fb:29:68:7b:b4:
9b:01:e3:57:72:b6:4e:ae:22:40:66:fd:7d:a3:76:73:ae:08:
de:bb:55:98:41:de:cc:9f:77:cc:8c:bc:8b:ff:c1:bc:70:dc:
9e:35:9d:e4:e5:47:be:f4:1f:9a:f1:06:dc:05:bc:a8:6e:ba:
f1:78:43:c1:a2:ed:a8:21:ac:09:61:fc:07:c9:d2:8a:4a:e7:
09:0a:ba:cd:80:9b:42:db:5e:3c:d4:dc:49:c4:2e:51:79:2f:
5f:64:f0:01:cf:2b:34:bb:47:64:6d:33:da:f1:ac:ae:4e:1a:
d3:47:01:ea:a0:96:f0:82:72:f8:f4:46:fd:f5:42:a4:97:a2:
5c:8a:89:df:58:81:38:c0:ec:f5:03:33:f1:ea:84:9c:05:bd:
c4:fd:7c:1e:73:58:0c:77:d8:92:7c:ac:be:69:14:62:05:e2:
6e:47:e4:94:3b:b6:04:67:0a:69:52:6b:79:5d:5c:20:1b:11:
82:f6:5c:c9:6b:1a:48:d5:ef:2d:09:3e:6d:db:4c:0e:b7:85:
8f:81:04:95:f8:9c:af:b9:a3:b0:d9:0f:2c:8d:9e:2b:01:7e:
cf:d8:96:c0
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICdwowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDIwMloXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRUI5OTQ3OUQzNkZERjI2QTg4Njk2MDQ1OTcwRTUwMTU0MTIzNTg2
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIuMgp/YjIZoBOoqCOr
MCEckAiWGXKgXjaHLvS+yVaBRyu6YQQed8OqLt3sguZn3aJnf0EHtSun/eNRWz2V
CwCu0lbCjxKPTqa40sYIXBYzOf9ACaW0CNLRANJMQno/DrGMeRwQGKRjhVxGo9pC
8EMrmvGDgIp0/xXyclTwQxoSo0AyIBhzNdFlh40E7z72wcKp3jfaf5rm/kbbb0q/
HJ3V9anRhj/5pckOSSJOwiTJJ466KFWnravm2qwb4rWAs33aQzoit1WHh20zluX4
Aj5UCCA/QqkI4MRmlDVK8SCOlVLs3ycP7OK1xBazqS7lOsAiidsKDHCYjrGKwgP/
WScCAwEAAaOCAncwggJzMB0GA1UdDgQWBBTrmUedNv3yaohpYEWXDlAVQSNYbDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAz
MC8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xMDMwLzY1bEhuVGI5OG1xSWFXQkZsdzVRRlVFaldHdy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOa6MCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK+CgAwQCZyvAMA0GCSqGSIb3DQEBCwUAA4IBAQC2p/1McZLIC4R5
smPANwvT6EVfwM0cmsTLb4HnmEc/+yloe7SbAeNXcrZOriJAZv19o3Zzrgjeu1WY
Qd7Mn3fMjLyL/8G8cNyeNZ3k5Ue+9B+a8QbcBbyobrrxeEPBou2oIawJYfwHydKK
SucJCrrNgJtC21481NxJxC5ReS9fZPABzys0u0dkbTPa8ayuThrTRwHqoJbwgnL4
9Eb99UKkl6JcionfWIE4wOz1AzPx6oScBb3E/Xwec1gMd9iSfKy+aRRiBeJuR+SU
O7YEZwppUmt5XVwgGxGC9lzJaxpI1e8tCT5t20wOt4WPgQSV+JyvuaOw2Q8sjZ4r
AX7P2JbA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org