Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
File: k-dJ5lSyqdzFv7NMLKmudf2DC90.cer (raw, json)
Hash identifier: 2ytN/uaXbmu0fDF7lkkIKcEH12hFgU6vknWgGltPZt0=
Subject key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 9477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 17 Feb 2023 03:16:21 +0000
Certificate not after: Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources: AS: 137732
IP: 103.160.244.0/23
IP: 2406:f4c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38007 (0x9477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 17 03:16:21 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:aa:1f:4d:55:d0:ff:e8:9c:bd:00:46:b3:
eb:1b:4b:81:c0:46:ab:c2:ab:cc:eb:30:45:a2:0a:
57:94:7d:3b:8b:83:c3:18:30:8e:07:ae:d1:6d:b9:
06:c2:ab:c1:c4:33:14:49:2d:75:27:ce:9b:3c:b5:
fa:c1:10:04:28:f6:18:f1:08:d2:da:48:7f:f7:5d:
67:69:ab:47:e6:ab:48:60:23:d5:80:29:da:6a:4c:
ec:39:ac:02:7e:b5:2d:78:14:e6:bf:01:90:6d:56:
15:45:9d:e3:77:d4:a2:cc:55:48:fe:ed:e6:89:ed:
5f:bc:3c:e6:15:91:fa:c1:84:5d:fc:a9:87:21:96:
be:ff:fc:30:0b:36:09:ee:6a:ba:ed:95:2f:69:1a:
01:fb:49:ce:ad:69:32:da:3a:03:b2:54:f9:1d:d7:
4a:95:83:bd:27:d4:a8:d0:52:2c:01:ac:b1:56:b7:
a4:ef:de:b5:53:f8:fe:dd:5f:9b:1d:b7:02:5c:e8:
88:6e:ec:5f:97:4c:93:08:d4:c9:d2:b1:ff:76:c0:
c4:78:79:8b:73:36:20:74:c0:47:ab:3d:eb:ac:c7:
9f:c3:fd:f4:46:7c:4d:0d:cc:b8:1d:03:91:fc:0f:
e6:0e:89:40:fe:53:42:6f:15:4b:c0:65:d9:50:48:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137732
sbgp-ipAddrBlock: critical
IPv4:
103.160.244.0/23
IPv6:
2406:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
66:fd:7e:38:5b:25:43:af:29:e7:25:06:4d:41:2d:09:de:5a:
73:85:97:97:6d:a8:11:73:1f:c9:ea:b2:ff:0c:e6:f1:5f:af:
93:df:6a:29:72:b6:b2:75:94:4c:d2:ba:26:98:ec:2a:86:05:
39:7e:42:bd:b5:95:4b:01:6f:b9:74:e5:0b:73:19:53:77:fb:
f0:c7:7f:6a:ad:08:4b:64:4d:2e:dc:2e:44:fc:a2:1a:d7:37:
b5:1a:56:9a:4f:a9:12:54:37:b1:43:80:a3:a6:21:a9:f9:10:
2e:dc:38:8e:31:b8:c8:e1:46:1b:88:79:f7:92:4f:b4:3b:3f:
9c:06:a5:c0:e7:53:11:65:9c:ff:9c:37:bb:8e:b4:01:17:44:
9c:ec:94:9e:fa:1d:0b:ad:66:b4:e8:fb:d1:da:07:a1:e8:bd:
7e:50:b7:e1:68:e4:e0:74:29:0f:a0:91:95:9c:c4:24:45:44:
dd:5b:4b:2a:09:6e:7b:7d:6a:d5:68:8e:a9:06:c1:d2:95:0d:
92:45:83:83:6a:74:2b:5a:9a:ce:ae:50:61:fa:1d:1d:20:f8:
07:8b:fb:f9:f9:3a:05:a9:1f:b3:84:05:22:8b:bc:c1:db:77:
e2:c3:f9:a8:66:ce:07:68:62:e7:a8:06:f8:80:97:4e:44:35:
33:93:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org