Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q2ajcUw7BbMRxsEgU4UTpMhccq8.cer
File: Q2ajcUw7BbMRxsEgU4UTpMhccq8.cer (raw, json)
Hash identifier: 8NS7+QIUCfD2YXbgpEsdhCR2qFqef6HzYEzaNBXosFA=
Subject key identifier: 43:66:A3:71:4C:3B:05:B3:11:C6:C1:20:53:85:13:A4:C8:5C:72:AF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 789B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/Q2ajcUw7BbMRxsEgU4UTpMhccq8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 19:58:42 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 131518
IP: 103.212.48.0/22
IP: 192.140.136.0/22
IP: 192.140.156.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30875 (0x789b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 19:58:42 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4366A3714C3B05B311C6C120538513A4C85C72AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:96:4b:3b:9d:da:64:54:cf:38:f0:81:af:
3b:ad:70:2d:e2:5e:55:84:a9:07:2d:9c:93:e5:e3:
5f:41:57:be:3d:27:45:b9:a5:bd:cc:20:52:d5:df:
88:64:37:00:09:4c:66:8b:5f:05:a7:30:86:ea:6f:
83:be:44:71:9b:bb:ae:6e:c7:b3:5e:25:a6:96:49:
ec:d7:b4:15:b9:3c:bd:e8:d8:ac:0f:80:a1:9a:63:
34:0f:b1:22:c6:ad:53:b3:3a:39:5f:fa:e1:3f:5a:
94:bc:59:ee:c4:9a:35:ec:95:14:9b:bd:78:c1:37:
8e:1a:b6:dd:21:91:d9:f5:f3:1f:80:a8:20:7e:49:
23:29:6d:64:26:66:fe:ae:c0:a1:e2:43:62:d0:fc:
81:a3:9f:4e:8f:6a:cd:f1:e1:44:4b:11:58:52:1c:
d5:56:93:67:1c:d8:11:c1:85:0c:96:46:04:a8:a0:
73:5e:2e:47:6c:58:03:81:f9:55:85:55:c4:c7:e7:
77:37:9d:0c:6f:d6:85:d5:3b:b3:e4:9f:e4:90:ac:
51:6b:91:76:b3:79:d8:5a:d8:7a:6f:72:4b:9d:6c:
08:c1:c7:5b:9c:0c:68:f7:23:f9:09:58:7d:58:d2:
30:08:d7:af:26:84:50:97:3f:c2:04:71:1d:1d:4f:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:A3:71:4C:3B:05:B3:11:C6:C1:20:53:85:13:A4:C8:5C:72:AF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2468/Q2ajcUw7BbMRxsEgU4UTpMhccq8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131518
sbgp-ipAddrBlock: critical
IPv4:
103.212.48.0/22
192.140.136.0/22
192.140.156.0/22
Signature Algorithm: sha256WithRSAEncryption
46:89:a7:84:c7:30:0b:f7:b1:de:91:38:f3:a0:fc:65:25:eb:
18:db:2c:75:23:d7:b5:8f:37:81:ad:26:17:41:07:19:3d:7c:
fd:1c:03:61:b3:03:75:dd:39:a8:3c:e0:f5:06:97:e8:f5:83:
d0:64:b7:db:cc:0c:f8:29:75:ff:ab:b3:85:0d:b9:94:18:37:
f5:fa:6a:bd:0a:7e:bd:6c:64:eb:1e:82:c3:6b:4e:24:5a:f8:
45:50:89:fd:bc:3f:ee:21:99:37:80:44:a1:f1:55:fe:59:e7:
66:08:f3:13:ed:d8:93:fd:bf:37:81:fd:4b:f2:57:18:4d:24:
96:2f:97:b9:bf:8f:57:6d:e4:34:85:2b:f3:81:2d:75:4a:ad:
c4:85:72:8f:0f:f0:e2:ec:b2:c8:79:a7:d3:55:02:f6:aa:8a:
1b:f8:81:fa:85:99:61:46:c9:fd:91:fe:65:c2:8f:56:6e:fb:
8f:87:21:7e:3d:b4:99:76:30:dd:63:8a:ba:65:9e:c3:f5:36:
ec:2f:ba:26:a1:93:f5:1d:b7:c6:fb:00:45:71:d9:24:bc:8e:
c2:1e:3a:cb:63:14:19:9d:11:3c:c4:5d:6c:7a:64:94:f5:6d:
be:0a:37:d0:49:b3:40:58:50:f1:d8:b8:49:d2:ff:f4:0b:a2:
a1:dc:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org