Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/k7a7FKOVHdn6_GnPz6BTIHejnMo.cer
File: k7a7FKOVHdn6_GnPz6BTIHejnMo.cer (raw, json)
Hash identifier: PhnZS3U8PJjnXL5Ir51Jz1gCDYMvOmpoI1aYWiwpQzA=
Subject key identifier: 93:B6:BB:14:A3:95:1D:D9:FA:FC:69:CF:CF:A0:53:20:77:A3:9C:CA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/k7a7FKOVHdn6_GnPz6BTIHejnMo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:48 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 131563
IP: 103.96.212.0/22
IP: 2403:ba40::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30516 (0x7734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:48 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=93B6BB14A3951DD9FAFC69CFCFA0532077A39CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:a9:da:d2:91:43:4a:ec:db:28:f4:f6:c6:
cd:cc:3f:89:dd:fd:8f:8f:25:2a:bd:28:04:a7:5f:
95:df:43:e6:89:6e:2e:09:62:0a:7f:55:7b:5e:0b:
91:43:ce:ae:91:eb:c3:55:35:24:7e:98:cc:8b:59:
45:60:55:a4:b3:60:1f:c3:73:9c:4a:05:00:a3:5a:
52:24:6a:63:c7:62:e7:fb:5a:af:da:c8:26:f8:00:
ef:5b:eb:a2:20:2b:08:08:d4:24:63:cc:75:b8:d7:
13:4f:28:1f:b6:a7:aa:37:3b:b4:70:4a:99:22:41:
a5:eb:90:4e:a1:3c:5c:f3:d7:78:da:c8:f7:9d:c0:
5f:18:b5:a8:f6:9e:8a:d0:b2:61:ec:be:9d:c9:f0:
0a:f7:6e:a2:1f:0b:d1:a0:b5:f0:f4:bf:8d:85:fb:
1b:63:9f:e2:71:d3:7c:33:a0:d8:ad:a3:f5:ce:d7:
0f:09:37:b9:17:12:16:18:d7:9c:45:a8:9e:ce:30:
d6:0a:b6:33:4d:47:00:17:0b:ca:f3:3a:fc:f1:2b:
b3:70:e8:4c:2a:06:1f:1f:32:e2:b2:21:a9:ba:64:
3c:64:a6:1d:cd:26:a7:44:aa:4a:07:28:9d:3a:d1:
6b:54:41:88:35:6a:09:ea:a6:ea:2f:41:ff:e7:e9:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:BB:14:A3:95:1D:D9:FA:FC:69:CF:CF:A0:53:20:77:A3:9C:CA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/k7a7FKOVHdn6_GnPz6BTIHejnMo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131563
sbgp-ipAddrBlock: critical
IPv4:
103.96.212.0/22
IPv6:
2403:ba40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:da:aa:c0:a4:45:86:23:29:db:c9:6b:3e:5f:59:3b:c7:45:
8e:bd:ec:c0:24:ae:c1:69:70:15:51:f5:ed:ff:34:b8:38:8f:
57:ce:13:76:8c:59:e2:e3:b6:79:c3:ec:33:92:a9:6f:0c:bb:
38:d6:3e:c9:20:a7:a1:fe:e9:e5:2e:06:9e:36:d8:d1:a7:70:
7a:47:86:d9:ba:0d:1c:ac:36:d6:70:ba:b7:e5:3d:e7:94:94:
1d:0b:2d:3e:df:fd:8a:5c:2e:a1:02:f9:f4:4b:ac:c3:25:0d:
78:f0:a6:79:f6:c7:11:77:9e:25:c6:55:e4:63:13:1c:e7:b1:
a2:88:ca:c4:b1:4c:11:12:40:3c:8e:48:70:7b:bc:75:47:4e:
e6:19:92:7f:cf:fb:eb:dc:47:c0:b6:2a:78:15:0c:56:b7:b2:
2c:8c:ed:82:5c:00:a5:1e:f6:31:bb:8c:3f:0d:db:4c:e4:93:
f0:bd:2d:bc:cc:1d:c3:ab:da:e8:68:30:11:d0:98:de:e3:16:
8d:f2:7a:16:3c:e3:27:19:43:80:ed:3a:51:6d:72:8a:50:a5:
04:6d:89:c0:15:dd:8d:cf:b7:fb:71:3b:87:8e:12:e3:d3:24:
e7:a8:5e:a0:d9:20:b4:45:0e:5f:df:29:11:7c:9c:d7:25:17:
bc:07:21:83
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICdzQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDI0OFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoOTNCNkJCMTRBMzk1MUREOUZBRkM2OUNGQ0ZBMDUzMjA3N0EzOUND
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqXqdrSkUNK7Nso9PbG
zcw/id39j48lKr0oBKdfld9D5oluLgliCn9Ve14LkUPOrpHrw1U1JH6YzItZRWBV
pLNgH8NznEoFAKNaUiRqY8di5/tar9rIJvgA71vroiArCAjUJGPMdbjXE08oH7an
qjc7tHBKmSJBpeuQTqE8XPPXeNrI953AXxi1qPaeitCyYey+ncnwCvduoh8L0aC1
8PS/jYX7G2Of4nHTfDOg2K2j9c7XDwk3uRcSFhjXnEWons4w1gq2M01HABcLyvM6
/PErs3DoTCoGHx8y4rIhqbpkPGSmHc0mp0SqSgconTrRa1RBiDVqCeqm6i9B/+fp
Yl8CAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBSTtrsUo5Ud2fr8ac/PoFMgd6OcyjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Ni8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yNTI2L2s3YTdGS09WSGRuNl9HblB6NkJUSUhlam5Nby5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHrMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2DUMA0EAgACMAcDBQAkA7pAMA0GCSqGSIb3DQEBCwUAA4IBAQCu
2qrApEWGIynbyWs+X1k7x0WOvezAJK7BaXAVUfXt/zS4OI9XzhN2jFni47Z5w+wz
kqlvDLs41j7JIKeh/unlLgaeNtjRp3B6R4bZug0crDbWcLq35T3nlJQdCy0+3/2K
XC6hAvn0S6zDJQ148KZ59scRd54lxlXkYxMc57GiiMrEsUwREkA8jkhwe7x1R07m
GZJ/z/vr3EfAtip4FQxWt7IsjO2CXAClHvYxu4w/DdtM5JPwvS28zB3Dq9roaDAR
0Jje4xaN8noWPOMnGUOA7TpRbXKKUKUEbYnAFd2Nz7f7cTuHjhLj0yTnqF6g2SC0
RQ5f3ykRfJzXJRe8ByGD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org