Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9k0LkTJMMNqQVXcMFlyaO2XyayU.cer
File: 9k0LkTJMMNqQVXcMFlyaO2XyayU.cer (raw, json)
Hash identifier: gzEJoc8dZFn8MP/vgNuOgk6M6jmv8qWjzndkkT6ms50=
Subject key identifier: F6:4D:0B:91:32:4C:30:DA:90:55:77:0C:16:5C:9A:3B:65:F2:6B:25
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 19:59:40 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 137794
IP: 103.138.134.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30881 (0x78a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 19:59:40 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F64D0B91324C30DA9055770C165C9A3B65F26B25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:6a:5d:3d:3a:9a:0b:26:30:14:01:a6:a8:
8f:b5:99:d0:e9:d3:db:19:3c:96:4a:d5:eb:d8:17:
c7:0a:1f:6e:be:8c:b2:d2:c4:2b:7b:1e:04:e8:4f:
fb:7b:7d:39:d8:9e:8a:3d:4f:1e:83:a3:31:5b:0c:
fd:cd:c6:fc:62:a3:6b:30:97:38:89:83:e3:e2:da:
21:7f:0d:b0:3f:f6:00:1b:66:f7:a8:70:fe:ea:c5:
ab:df:23:e5:e6:e8:75:b8:7b:76:7e:fc:f6:d3:21:
2f:09:13:cb:4b:5d:05:57:28:3e:cc:96:32:47:48:
36:a6:97:3d:af:4b:dc:2d:e9:ce:58:ed:9f:c6:7e:
eb:38:1f:5a:0c:67:96:c0:72:7a:d6:97:b6:fd:f9:
1b:92:19:9f:e4:91:31:ee:67:b8:2d:11:9e:9e:c6:
5a:a6:34:c3:06:2b:48:b3:e1:ce:16:bf:c6:27:84:
d2:0d:57:47:a3:cf:1e:b4:cb:49:ea:bd:d3:39:2e:
ca:82:f5:ab:fe:8a:2b:c4:c3:b0:be:b7:ea:50:44:
a1:b8:48:d4:d0:40:1a:8a:0e:59:c1:5c:a4:70:0f:
55:cc:e2:27:9e:23:da:f6:03:1b:90:fc:cc:60:92:
28:f5:5d:7f:52:02:2b:18:2b:a2:58:f3:96:b9:51:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:0B:91:32:4C:30:DA:90:55:77:0C:16:5C:9A:3B:65:F2:6B:25
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/9k0LkTJMMNqQVXcMFlyaO2XyayU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137794
sbgp-ipAddrBlock: critical
IPv4:
103.138.134.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:0b:67:88:d0:f5:60:b6:95:d9:e0:a0:2c:c4:58:a2:29:2a:
40:a3:a8:18:67:e3:d1:f9:24:35:19:7f:3b:4f:64:6c:7c:0f:
94:f4:11:78:1c:d6:8a:f1:89:51:d7:f6:58:0f:37:b3:f1:87:
a7:1d:a9:1f:8a:9e:df:38:bd:1f:ec:12:08:2d:73:2c:3d:87:
c1:5d:8b:dd:bb:9f:d0:05:b3:51:52:5b:0f:bd:04:20:5c:e0:
c0:ed:28:fb:6a:c7:96:8c:97:66:38:96:d0:f0:75:d6:2e:da:
d9:c9:d8:9e:0b:c0:66:7a:94:69:8b:fc:4c:cd:5c:b4:60:87:
33:f9:87:e5:b6:f1:d0:68:25:ed:52:e9:90:a5:39:b2:d3:0b:
7e:07:db:cf:94:eb:f1:0a:94:08:33:cf:6b:e4:b4:e7:81:40:
6e:da:b9:d8:bd:f6:d3:df:cf:8c:df:be:05:7e:1f:89:44:be:
89:17:65:4d:c0:de:1a:28:17:71:5d:30:08:9a:cf:98:e8:ce:
1d:d5:d2:2f:39:58:2e:4c:ac:d5:38:2a:b8:46:bd:5a:0e:b2:
42:06:fb:45:f3:7b:ec:85:56:e7:05:6d:67:86:d9:08:27:a8:
ad:f2:7b:e2:7f:6d:47:0c:32:93:64:5c:09:61:91:31:ef:32:
7e:cf:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org