Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.cer
File: ZIZUqZsZFM6iqwhA_TyfZpQkIzc.cer (raw, json)
Hash identifier: FGrKJVzXa4j4FfcY1EI4i/Ev5gdsYB0ln8bosuZRBgY=
Subject key identifier: 64:86:54:A9:9B:19:14:CE:A2:AB:08:40:FD:3C:9F:66:94:24:23:37
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7B94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 11 Oct 2021 19:36:21 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 63560
IP: 103.203.96.0/22
IP: 115.31.64.0/22
IP: 2403:c180::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31636 (0x7b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 11 19:36:21 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=648654A99B1914CEA2AB0840FD3C9F6694242337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:60:48:ae:2f:d8:df:be:02:a0:de:79:40:
25:19:44:30:56:cd:43:61:e8:da:91:e8:7e:73:c6:
44:35:0d:f5:f1:78:63:eb:22:e8:96:c0:a6:fd:d9:
50:12:2b:ca:23:ff:b3:36:47:31:3e:38:ee:93:00:
34:81:76:db:36:32:5f:18:d0:13:33:27:ef:b2:af:
61:5c:ce:7e:dd:2d:69:db:78:89:ad:1e:81:b2:7e:
5d:f5:80:9d:b4:05:2a:c8:47:27:2c:a4:eb:3b:95:
e2:07:06:b6:24:63:77:e3:12:50:ea:03:62:24:0e:
e6:b8:18:bd:dc:d0:26:1e:e2:42:34:e6:65:0f:a5:
a1:8d:97:dd:28:3f:0f:01:39:64:54:27:d2:b7:1d:
5a:e0:74:c3:65:40:87:6b:0f:51:9c:df:2c:8e:86:
4a:5c:c5:47:e6:98:81:00:e4:ad:f7:3a:84:36:f0:
42:65:bb:1c:da:66:ee:77:99:6f:2b:d6:b7:45:e3:
34:69:4d:03:94:8b:2d:53:61:89:57:45:43:1b:05:
01:6f:af:b8:50:fa:d8:fa:07:c8:a4:13:d3:49:83:
8e:73:b3:12:fc:49:c7:77:b3:43:1e:6f:7f:ea:b3:
dd:f2:03:61:f4:e5:0a:fa:97:2d:8f:72:74:c3:3a:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:54:A9:9B:19:14:CE:A2:AB:08:40:FD:3C:9F:66:94:24:23:37
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/ZIZUqZsZFM6iqwhA_TyfZpQkIzc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63560
sbgp-ipAddrBlock: critical
IPv4:
103.203.96.0/22
115.31.64.0/22
IPv6:
2403:c180::/32
Signature Algorithm: sha256WithRSAEncryption
a8:97:fb:dc:5a:93:ea:0d:31:a4:9a:69:29:68:a0:72:0e:9b:
94:fa:1e:37:86:55:20:e5:57:cc:ef:07:60:e0:fc:11:a3:10:
41:df:ec:f2:d9:8d:19:48:22:7c:4b:bd:cc:24:88:74:7e:d1:
e6:71:0a:29:0c:fc:91:18:01:88:cf:eb:5e:23:ca:4f:48:d9:
4e:da:cf:56:9e:dc:62:9b:33:b1:55:2a:d1:97:94:57:20:21:
48:a0:89:9a:dc:46:93:67:8c:af:ca:91:cd:a0:ed:f6:04:82:
f7:f1:45:48:91:90:bf:25:e8:9f:9a:44:be:65:9d:3c:1f:2b:
e6:05:fa:29:12:f6:99:fa:27:a2:af:df:bb:31:62:52:d1:1b:
05:ab:a6:c3:a8:a8:05:83:52:0d:58:a1:a6:8e:a4:31:37:79:
39:3c:41:5c:99:1c:83:5e:91:23:0c:78:45:18:d5:a7:36:08:
6b:44:f1:8e:c0:a1:da:2e:b1:56:fe:5a:80:7d:a7:eb:1f:6d:
99:2e:c5:c6:89:1f:3b:d0:bf:35:72:3b:59:26:32:8c:6e:fa:
f5:a6:a0:81:c4:9d:db:1a:38:02:41:03:33:da:ad:b4:d9:0d:
1d:93:0b:b4:26:08:08:78:70:cc:97:cb:b7:23:20:bb:eb:7d:
e3:07:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org