Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer
File: EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer (raw, json)
Hash identifier: UIQ6xpxEwof2qw5oCSqtFQ3g+syj48oLB7wBq0VFoII=
Subject key identifier: 11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:03:50 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 63584
IP: 103.60.32.0/22
IP: 111.223.8.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30580 (0x7774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:03:50 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1194FBF18D7337954228B6B59B909E6308556BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:68:ca:a9:ea:68:19:ad:58:22:45:b2:2a:
ce:ed:80:82:5e:f2:17:bb:d8:ef:98:b3:c9:f3:6e:
da:ef:04:92:a3:7a:c2:cb:ac:04:29:ab:cc:11:3b:
2c:00:94:f1:5f:bf:d4:12:17:93:e8:39:5f:16:80:
50:11:ce:0a:d2:1a:d0:bf:49:a4:ea:ec:14:21:0c:
d1:8a:47:80:a4:bf:12:98:4d:a8:85:71:f2:4c:43:
52:6d:ce:8e:e5:27:c0:e3:22:f7:15:d9:56:ac:bd:
e8:53:6e:61:52:70:c5:2c:1b:e9:c2:c3:93:e5:31:
01:ff:70:2b:d3:75:6b:01:19:7f:04:bd:8b:5f:89:
3c:c0:76:4f:a0:26:8c:9d:e1:21:ca:07:3b:f5:2d:
8c:30:b7:2a:be:16:c8:c9:5a:1d:f7:81:58:ae:b6:
42:47:40:f0:3c:e9:54:d8:0f:23:e1:96:bb:0b:25:
e9:2e:4e:48:6c:bb:36:a7:d5:c3:c2:4b:21:ca:c3:
ff:1e:5b:b0:d0:64:d8:0c:33:3c:b0:e8:cc:b9:03:
59:03:13:78:e3:36:40:fd:2c:3b:8d:37:91:78:0e:
eb:38:2e:94:10:8c:72:9d:59:9b:8f:ff:42:b1:c5:
96:53:4c:5f:b3:38:42:f3:29:a3:c5:76:d6:d2:d0:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63584
sbgp-ipAddrBlock: critical
IPv4:
103.60.32.0/22
111.223.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:09:df:1a:b3:06:d8:f0:72:23:9d:e8:cb:e7:a5:00:59:e4:
b3:59:00:a2:cc:8b:b9:c9:bb:13:0b:0b:b1:4f:2e:72:65:e9:
d0:dc:7d:5a:94:ec:c4:1e:16:5a:10:8e:73:2d:84:dd:1a:18:
d0:e7:be:dc:eb:b7:75:b9:7d:d6:99:04:62:c5:35:17:a2:de:
72:df:a7:ea:14:f6:ca:62:39:9a:9b:32:69:ea:11:e9:98:25:
27:a0:e3:4f:85:f2:20:d6:14:76:4a:56:bf:c1:2c:f0:82:01:
7f:f5:27:89:79:48:a4:75:5d:70:c2:25:ec:a3:15:85:ea:84:
67:c6:24:a6:9f:38:46:87:47:a8:9a:ac:37:a5:42:7a:0b:5c:
e9:3d:aa:a6:a4:85:cf:80:73:35:f5:94:3f:29:e0:c3:41:33:
61:17:82:32:fc:63:f0:cf:cb:cb:ce:33:0a:ec:97:8f:0c:fb:
0f:75:08:d3:8f:44:4e:70:1e:66:d3:eb:2d:3a:c9:63:d7:0e:
ca:39:41:a9:ff:b9:53:e7:8e:b6:63:f4:74:85:fe:2d:dd:51:
7f:fb:c6:f4:4c:6e:73:e0:46:f1:80:ad:ce:77:5a:de:94:90:
84:d6:7a:0c:e5:f9:ca:93:95:0d:20:e4:85:ac:be:bf:fc:8d:
13:43:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org