Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
File: gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer (raw, json)
Hash identifier: 8WzCEw31sH5po2OUuzPFNvu+7ARO+XnrdvOwm6yZzm0=
Subject key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:08 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 59033
AS: 63689
IP: 103.204.72.0/22
IP: 202.160.140.0/22
IP: 2402:1440::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30480 (0x7710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:08 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:47:a2:fb:91:87:c2:82:52:ac:36:f6:8e:
78:04:bb:05:8b:9c:b8:e0:0b:ce:59:cb:91:2c:a4:
1e:55:44:25:21:53:ab:0e:68:b7:11:3a:45:3d:c0:
f7:86:8c:64:02:42:d4:e0:04:ed:6d:b1:2b:8c:5b:
fa:d6:8a:d1:d5:24:f5:ef:07:ec:24:93:03:3b:7d:
8e:bd:45:06:91:65:0f:a5:63:a9:50:70:ba:da:45:
50:e3:20:be:5d:9a:6c:dd:db:ff:17:22:2f:86:e0:
4a:2e:3b:2c:6a:f6:f5:7f:88:37:a3:4f:ea:f4:db:
b3:b2:ec:43:c4:13:42:bf:8e:75:e5:1e:5b:11:d7:
ad:06:81:78:7c:76:bf:06:51:ed:a4:54:ab:d2:58:
a5:e1:2c:b6:53:49:0c:50:2f:c9:79:03:86:13:7f:
63:2a:97:4f:5d:8d:c6:20:79:3b:47:2f:53:70:26:
15:cc:8e:87:05:f7:b1:d8:a6:46:c7:99:9c:f7:62:
27:f1:3e:05:de:35:1f:08:d6:de:e1:05:4f:56:24:
18:73:42:02:e9:80:65:7e:2a:37:18:7e:0b:74:ba:
67:81:92:05:17:fa:f5:1b:e5:7d:f2:0f:fd:d5:38:
3e:b8:fd:40:f7:6c:f6:9b:c7:d1:47:c0:45:b9:fb:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59033
63689
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
IPv6:
2402:1440::/32
Signature Algorithm: sha256WithRSAEncryption
92:22:f6:19:05:da:01:8a:8e:83:ce:84:d4:01:5e:78:00:c0:
e6:39:94:2c:b6:be:1a:62:97:95:9a:7a:ad:f2:68:a8:56:48:
45:fd:dd:7c:3f:31:ad:ee:7f:85:e3:a0:74:6e:1c:b3:bd:cd:
3f:b7:58:96:f5:0e:97:c3:eb:55:9b:58:98:4c:90:50:ec:18:
81:f6:ab:e8:3c:7b:7a:08:9c:bc:0f:b9:0e:50:88:3a:7c:45:
55:61:8f:ee:56:6b:e8:98:58:4d:82:99:55:89:50:34:a6:7c:
dc:bc:63:52:61:65:82:4f:58:40:54:a2:8f:5d:6f:ed:7d:17:
ca:2a:cf:5d:5b:04:d7:de:b4:59:4d:33:8b:df:84:fe:24:5b:
47:31:3c:83:e4:4f:2b:27:a0:0f:a7:99:d2:2f:6c:19:4a:79:
95:58:a1:70:8d:17:46:e8:a2:d2:64:10:9b:d3:2a:3f:2d:f1:
c2:46:b9:ce:25:ec:11:8d:68:f1:09:f5:9b:74:c1:09:13:b8:
2a:c1:b9:fe:58:26:4d:63:0a:c1:61:3c:95:30:f2:10:36:9f:
3b:03:51:b4:8b:42:9e:03:28:e0:52:a2:06:2e:e1:1e:fd:b2:
75:23:c0:61:ff:c1:25:2c:cd:0e:bb:ec:5e:1d:40:0c:29:ce:
8a:2b:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org