Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer
File: fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer (raw, json)
Hash identifier: X9xYhEiUdV58b3KW1tpBBeAQ/OIeNQDhvUh54GnffGI=
Subject key identifier: 7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:57 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 137720
IP: 103.120.96.0/22
IP: 2403:5540::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30662 (0x77c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:57 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:82:ff:af:6b:2d:7e:22:bc:64:72:de:6e:
0c:15:45:29:83:b9:46:ae:a0:69:ad:a3:4f:0d:96:
66:2b:f8:35:d0:5c:4a:71:db:2b:3c:65:27:ad:62:
fc:5b:2b:54:14:34:ff:91:1f:bb:e9:05:f3:11:48:
c0:a1:f6:d5:d2:dd:98:7e:f2:65:09:b8:16:21:48:
62:5e:81:de:cf:ab:e8:79:d7:be:f9:46:71:59:81:
64:ba:c0:ff:4d:fa:06:45:d5:4f:ca:f9:36:da:94:
81:0e:a4:e8:c1:6d:e4:fd:3f:39:b8:46:c4:8c:46:
e6:bf:51:9e:b5:c8:f7:f0:71:08:ac:5a:22:a7:71:
54:0c:2d:60:31:15:28:d3:e3:f7:46:59:fc:19:e4:
74:69:5e:b1:cf:3e:73:3f:7f:4c:42:d7:63:8d:1d:
47:cd:ab:f4:c6:2b:91:8e:ad:ca:2b:2c:ac:a8:0d:
ce:72:6f:c2:53:8e:2a:95:e5:6a:39:2f:de:b1:2f:
fb:dc:84:bd:9e:9c:37:ec:4c:16:8c:6b:11:b6:0d:
61:39:7f:c2:72:76:6a:fd:41:24:4e:b3:78:02:4a:
59:3f:ae:92:19:9f:83:a3:16:f8:a9:b4:e1:cd:f9:
80:77:63:69:72:de:e8:35:bf:6a:0b:b8:c0:a7:ac:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137720
sbgp-ipAddrBlock: critical
IPv4:
103.120.96.0/22
IPv6:
2403:5540::/32
Signature Algorithm: sha256WithRSAEncryption
60:90:83:4f:43:a3:c6:9b:8a:49:0f:fb:22:11:ed:60:1a:36:
b0:09:13:9f:6b:aa:13:5f:84:c7:6d:ed:33:4f:cf:df:eb:34:
fd:4b:83:7b:22:70:25:5c:3d:9f:41:32:47:63:92:08:d2:1d:
57:13:89:98:ba:92:7a:0a:55:a0:e6:01:38:5f:e2:0b:f3:f3:
e7:07:ce:ab:da:b9:ea:51:ff:cb:d8:de:c5:6c:e3:84:52:e0:
8f:cf:fc:d6:5a:75:d0:93:d6:d2:8f:2e:a3:08:98:8f:19:24:
1f:ec:31:10:fe:1c:d0:7d:6d:4a:c3:d6:b5:2a:f8:55:db:cb:
b8:71:02:cc:93:f4:8e:b3:8a:ce:25:5b:26:f5:8e:22:d2:3a:
87:26:bd:70:29:e1:0c:60:0b:3c:81:d8:ce:7f:9f:3c:3a:f0:
e9:1b:8e:3f:7c:88:6e:d0:e9:32:b9:4f:eb:2d:e1:72:b8:5b:
f0:4e:ec:3b:cf:dd:9d:e5:60:cf:6f:8a:aa:c7:eb:c9:25:79:
93:c9:05:f6:18:a6:36:f8:2d:1d:b1:ac:71:57:f1:cd:ff:a1:
a1:a0:0d:85:09:b1:8b:ec:f5:aa:93:a4:48:fd:a2:95:30:31:
dc:c2:9d:74:40:66:1d:af:bd:12:08:3d:05:b4:22:c9:56:0c:
42:84:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org