Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
File: Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer (raw, json)
Hash identifier: tnhu7R/MpsZa4lCzlP0VhrV64sYC7w9kjX4+U0/e/0Q=
Subject key identifier: 63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 775A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:03:25 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30554 (0x775a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:03:25 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:a7:b0:84:69:4c:f6:eb:e8:d6:a1:5f:04:
00:6b:9c:22:ee:56:a2:fb:e6:6c:7c:77:f6:4d:b2:
1d:b5:25:5f:4b:08:4f:86:76:86:52:d6:1c:b0:07:
6b:3a:3e:59:8e:dd:b1:25:e4:58:d2:f1:af:b6:f7:
42:e2:6a:33:fb:d3:0b:d6:27:03:89:31:fb:ea:ad:
c1:7b:f2:93:0b:ac:23:ea:94:b4:b6:e3:0c:5c:dd:
b0:cf:b8:0a:a8:83:bd:4c:0c:87:ca:14:c7:1c:df:
ac:91:d8:ca:29:28:24:e8:8c:c3:7d:8c:ae:9c:88:
f0:90:8e:92:87:47:c1:2e:01:54:70:50:f7:85:5e:
09:d3:df:4b:db:53:92:97:9a:99:52:63:39:96:26:
eb:b8:c3:52:fd:40:14:d7:80:5a:4e:c6:a9:9c:1f:
34:d1:e8:2c:6c:ed:8e:e2:7f:81:a2:09:96:8a:9e:
5c:2d:f8:87:d4:5f:ef:e8:be:56:d2:82:86:f6:4a:
bc:f7:56:3c:21:98:f9:6d:43:3c:3a:77:cd:e6:66:
d7:9b:53:be:48:a2:35:f3:82:0d:de:81:c3:e1:6a:
f8:5d:af:b1:7a:fe:89:ae:89:b3:cb:54:91:5c:92:
39:88:71:af:2b:c8:3f:d7:b0:a9:d0:19:42:1a:87:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
87:97:53:2f:5f:96:73:a0:6f:75:45:36:1c:b4:95:c0:e9:23:
ea:f3:c4:1d:57:d6:63:30:11:a2:71:85:0f:d6:e7:0c:94:4b:
dc:4e:2e:11:e9:fb:15:a2:95:bb:29:a1:8b:f1:5b:b2:5e:47:
4e:b9:47:05:1e:de:76:83:7c:73:74:ff:70:12:ec:bd:e3:9b:
09:a5:43:e8:95:01:c0:38:5a:da:91:da:2d:48:ef:7b:30:a4:
81:d6:04:c1:71:3f:c9:00:47:76:04:0c:b9:e7:0e:a5:46:49:
3c:c0:6d:4c:b9:47:e1:ab:42:ae:f1:90:4b:01:d9:fb:06:86:
a4:f5:12:08:39:ca:39:b8:71:3b:ca:40:ae:26:f4:03:f5:0c:
b6:b8:5f:3f:75:59:c7:95:8f:f4:2f:71:13:57:40:01:ad:42:
dc:2e:b6:72:62:b4:ef:2a:61:b9:5e:2a:d7:a4:61:af:2e:2e:
27:e5:27:ff:1d:8d:24:1b:fe:63:6f:69:50:4b:34:08:a5:dc:
ce:0c:5d:d4:63:d7:9b:de:80:7c:99:db:ae:37:0f:63:c5:2b:
46:74:c9:9c:3c:96:58:26:72:f4:83:90:b1:62:9a:57:79:64:
73:88:a1:ef:c3:a8:16:a3:85:aa:ba:31:d4:f5:d1:54:25:38:
c4:3c:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org