Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QdKcfBNcQF7XC00KZeX6-vNCJQs.cer
File: QdKcfBNcQF7XC00KZeX6-vNCJQs.cer (raw, json)
Hash identifier: JeqvNVcRODIA5O9P5hTTvzJg/8b5Oo1VwKwlnxIRjBs=
Subject key identifier: 41:D2:9C:7C:13:5C:40:5E:D7:0B:4D:0A:65:E5:FA:FA:F3:42:25:0B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8C14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/QdKcfBNcQF7XC00KZeX6-vNCJQs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 28 Aug 2022 04:18:49 +0000
Certificate not after: Mon 28 Aug 2023 04:15:34 +0000
Subordinate resources: AS: 131551
IP: 103.153.132.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35860 (0x8c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 28 04:18:49 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=41D29C7C135C405ED70B4D0A65E5FAFAF342250B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:ac:93:1c:b1:6b:3f:69:38:69:ac:24:c7:
0b:15:f2:00:02:a1:26:e6:64:36:6d:7a:8a:20:c6:
d4:48:4c:dc:ed:78:7c:0e:bc:2b:56:88:64:38:21:
b3:08:13:bd:5f:ec:e6:88:63:89:dc:59:6d:dc:6e:
2d:7b:17:d8:86:fc:7f:f4:07:71:b9:87:85:b8:e9:
06:3a:7f:89:ce:eb:8e:f9:21:b5:5c:cb:f8:4c:5d:
69:f3:50:e1:71:a3:fd:c8:1f:14:11:25:32:a2:b5:
d6:b7:38:5f:f0:82:6a:3d:40:a4:d3:e5:7b:cc:bc:
85:33:fa:69:42:02:7d:e7:e3:08:1a:c7:08:b9:11:
0f:01:db:d6:c3:3d:88:ad:24:c8:f5:24:7e:c2:22:
31:f1:40:b2:b0:33:f3:14:35:a0:6b:7a:80:8d:0c:
44:00:48:76:f0:55:34:64:de:bc:62:d0:f6:41:42:
96:d7:4c:e3:d9:23:be:7a:3f:5d:21:35:08:0e:d6:
16:f9:97:74:22:7a:1f:ef:e0:70:84:7f:3a:b8:df:
9a:87:fc:f8:d6:df:12:71:7a:04:f8:61:71:d7:71:
27:d0:79:43:d1:fd:c5:64:f5:bb:8e:d4:3c:41:3e:
a9:f9:2d:88:2c:0a:05:30:56:fd:1f:9d:9a:22:3a:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:9C:7C:13:5C:40:5E:D7:0B:4D:0A:65:E5:FA:FA:F3:42:25:0B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/QdKcfBNcQF7XC00KZeX6-vNCJQs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131551
sbgp-ipAddrBlock: critical
IPv4:
103.153.132.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d5:fa:2b:5b:23:40:20:b9:b9:22:0d:8b:44:2a:d7:42:b2:
e9:78:e1:d9:0e:23:0f:e3:3b:86:15:fb:28:ee:81:b8:c3:1b:
88:15:12:91:34:62:2b:95:38:24:4b:c4:7b:98:5b:5f:7a:f8:
52:a4:83:b3:c5:91:96:f3:5a:36:e9:61:40:bc:b6:2e:5f:7b:
b5:57:77:36:73:3c:13:15:09:90:7f:05:44:13:07:89:26:ac:
f2:4b:3a:05:88:c4:19:de:03:9c:fe:6d:7a:cf:a9:c9:49:8b:
d0:8b:4a:50:45:be:63:01:74:b7:70:8b:a5:b7:7f:dd:e1:25:
3b:bc:6a:27:aa:72:fa:c6:33:5e:4d:84:ce:89:c6:35:ee:69:
ed:a4:12:89:46:ec:27:86:aa:31:a8:f1:f8:9c:5c:39:49:f0:
bf:d7:37:7b:41:69:16:8e:33:05:c8:85:b7:2e:a6:e9:c6:76:
2f:19:64:47:1b:1a:df:bd:fe:2a:25:17:63:c0:aa:b2:0f:be:
ec:76:89:a7:d4:52:66:d5:e3:60:80:d4:5c:0a:7f:b3:d5:a4:
32:d9:eb:a7:fb:15:82:b7:e2:5e:de:e6:1f:79:d6:46:5f:cc:
10:df:12:84:21:b8:0a:2f:0b:73:de:5e:c0:a7:75:bd:95:bb:
67:81:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org