Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dc3hPIPM8xq3Xd29PkAAfbmxNts.cer
File: dc3hPIPM8xq3Xd29PkAAfbmxNts.cer (raw, json)
Hash identifier: wNfFkIWRjkZH2Y+HABpvYeR00pxoqqVR6mm+aXG+zGE=
Subject key identifier: 75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8D90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/dc3hPIPM8xq3Xd29PkAAfbmxNts.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 09 Sep 2022 09:32:05 +0000
Certificate not after: Mon 28 Aug 2023 04:15:34 +0000
Subordinate resources: AS: 63566
IP: 27.112.0.0/18
IP: 103.252.204.0 -- 103.252.211.255
IP: 103.252.232.0/22
IP: 103.252.248.0/22
IP: 118.194.0.0/17
IP: 122.11.0.0/17
IP: 2402:1f80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36240 (0x8d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 9 09:32:05 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=75CDE13C83CCF31AB75DDDBD3E40007DB9B136DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:03:48:c6:ac:af:9d:3f:dd:ed:62:ad:0d:
49:4e:8c:cf:da:cd:9b:b0:36:c8:5b:10:b1:f1:1b:
6f:66:4c:cc:e6:9b:f2:a8:b6:7d:11:ca:95:4e:4f:
7e:83:df:38:b4:04:95:77:46:2f:cc:df:27:35:ec:
7f:3f:f3:6d:63:6b:28:6f:db:5d:91:4e:76:a6:1a:
b2:86:f1:07:00:1f:10:c2:38:0b:8e:2b:18:e6:ea:
0f:55:c3:9b:00:d2:4a:80:c8:38:cd:f2:cf:22:9b:
1a:59:2c:58:86:53:e9:d6:d5:6a:ff:62:c9:0f:8f:
b3:09:1a:1a:7f:a6:1a:34:f1:51:b3:6e:cf:13:1a:
f1:00:f4:62:b6:9d:31:9b:49:26:2a:5c:ac:48:c5:
dd:66:d3:22:e4:b0:8d:59:a8:da:cc:04:65:37:93:
d3:70:42:b2:1e:e7:d2:45:ad:42:59:ee:b4:0c:91:
8b:0e:67:54:15:03:a9:8a:41:df:6d:b9:78:f0:92:
6c:4d:3d:6c:84:db:8a:f3:a6:47:0c:37:8c:e4:16:
09:73:b1:b7:21:37:ad:9a:b1:82:68:f3:46:46:64:
10:e7:d9:2a:cb:be:bb:2e:a0:b3:b4:80:ee:1a:0f:
b5:0e:f6:17:de:49:b8:fc:12:7a:6d:e4:38:83:55:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/dc3hPIPM8xq3Xd29PkAAfbmxNts.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63566
sbgp-ipAddrBlock: critical
IPv4:
27.112.0.0/18
103.252.204.0-103.252.211.255
103.252.232.0/22
103.252.248.0/22
118.194.0.0/17
122.11.0.0/17
IPv6:
2402:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
b0:25:2e:53:75:9d:92:12:d3:4b:34:90:b5:aa:41:19:1a:86:
05:0d:96:38:19:f5:c3:c9:c0:d4:96:e8:89:1f:19:1e:b5:1b:
26:f4:97:61:5c:f4:41:81:4a:f9:3b:b7:80:78:b3:54:37:bd:
d9:d2:21:eb:c8:e2:ca:88:a1:22:66:db:0f:c2:cd:a5:bb:14:
e2:f1:39:96:60:cc:ae:3a:20:50:9f:2c:2f:8b:58:b5:4e:46:
a7:81:31:58:5c:6f:0e:94:54:d9:99:20:95:5f:39:7a:95:fb:
d7:26:a1:d2:ef:7e:4b:8c:09:2d:72:51:73:e4:01:58:a4:71:
1b:93:21:8b:b3:fc:e6:05:de:63:8b:db:d8:b8:29:b5:b4:d9:
56:25:87:80:46:7b:f8:bd:89:f0:78:fb:08:b7:be:90:7a:3e:
38:5b:c6:d3:06:68:fe:f9:5b:a5:f2:71:8e:58:1e:8f:e6:b1:
d2:b1:41:ed:98:ea:70:16:77:f7:54:12:ef:9f:28:57:36:d9:
1a:50:76:32:16:c4:f2:b3:68:7b:3d:bc:99:1b:e3:51:7a:a4:
c8:63:5f:5c:d0:0c:57:88:9c:84:7e:2b:f3:3d:22:9d:38:f2:
9a:85:45:42:b1:0f:67:27:c8:9c:91:de:61:66:fe:9d:d9:ab:
ba:dc:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org