Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8brwwwOBfwmdYZFYHK_1Ld5jDcI.cer
File: 8brwwwOBfwmdYZFYHK_1Ld5jDcI.cer (raw, json)
Hash identifier: QytOH+9JrVuQw3acCNBgyEaW06BjrRHxiERFYikB1+Y=
Subject key identifier: F1:BA:F0:C3:03:81:7F:09:9D:61:91:58:1C:AF:F5:2D:DE:63:0D:C2
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:25 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 139091
IP: 103.1.24.0/22
IP: 103.140.14.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30686 (0x77de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:06:25 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F1BAF0C303817F099D6191581CAFF52DDE630DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:07:bc:d2:99:be:fb:1a:8b:f5:f4:e3:0e:
b4:61:79:ce:3d:89:b1:ee:d0:e5:53:59:fa:4b:76:
5e:49:2c:6f:04:b4:72:97:60:3d:77:8d:b0:1e:62:
4e:17:22:9e:be:15:14:99:34:f7:f3:ce:8a:c2:f2:
12:47:73:ae:ef:1b:2c:b0:5b:20:d5:fa:9d:4c:75:
03:3d:53:47:cb:2b:df:19:0d:5e:7e:65:6f:7f:8b:
e8:e2:18:df:08:7e:8d:81:be:83:1d:7c:e2:5f:46:
74:28:ba:c9:58:48:b0:7f:10:c7:c2:45:bc:1c:e8:
7f:d2:f8:a6:00:87:7a:20:56:47:28:b3:13:f1:42:
e9:57:ef:2d:e5:7b:24:f6:73:1a:fc:3f:48:79:bd:
37:2f:b8:73:93:05:67:44:0b:bc:24:92:96:ae:4e:
9a:08:19:89:4f:7f:88:da:9a:87:61:52:a4:74:5d:
02:89:42:4e:35:16:61:f7:43:5b:99:a9:fb:73:66:
f9:e9:62:e6:63:58:1b:67:9b:70:1f:7b:90:3f:47:
de:d2:f3:bc:35:ca:53:d0:b7:93:54:42:49:b6:b0:
e4:77:fe:f0:cf:4f:53:32:9a:89:a4:18:b7:31:65:
97:af:86:a3:e1:f6:c6:d7:4a:00:ad:24:ff:9f:ee:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:F0:C3:03:81:7F:09:9D:61:91:58:1C:AF:F5:2D:DE:63:0D:C2
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/8brwwwOBfwmdYZFYHK_1Ld5jDcI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139091
sbgp-ipAddrBlock: critical
IPv4:
103.1.24.0/22
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
65:39:2c:60:43:de:db:5e:6b:8d:ac:62:9e:61:b7:bf:c1:9d:
54:e7:82:79:10:5c:f6:dc:d0:00:b9:2b:c3:28:ce:00:2a:7f:
ae:4c:d0:1e:33:7f:00:e9:11:f0:1c:2e:58:32:ce:2d:b6:9c:
6b:36:18:64:13:fd:4f:63:0a:09:22:40:7f:91:fc:04:0a:d1:
51:c0:99:a3:51:86:e7:3a:52:ca:6c:ce:30:c3:bc:a4:9f:78:
48:ac:f0:1d:b1:6d:e6:4b:fe:be:a8:3b:a0:38:ff:d4:8f:49:
e7:98:d6:8d:ac:f3:08:73:42:71:ed:0d:b3:65:68:27:b0:7a:
2f:22:ba:e6:af:e3:ae:75:0f:ed:9f:ff:5e:24:d1:63:24:b8:
bb:ca:84:e9:b4:f0:c8:76:4e:c2:00:ee:c3:f7:2b:1a:18:37:
f2:91:25:89:55:b9:22:f2:32:78:70:5c:c8:74:29:e2:5d:22:
48:01:9d:9e:f2:20:c7:f3:f7:fd:52:fa:5e:8b:5a:6b:24:fd:
36:fd:50:33:bb:72:ba:1e:aa:2f:a5:63:73:38:c6:e1:39:43:
36:14:08:cb:30:a9:d4:8e:66:f3:d3:93:c0:c0:05:cb:c8:3c:
9a:cf:0c:b7:be:b3:ba:e7:9b:32:2a:64:da:78:3f:ec:68:a2:
6c:0e:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org