Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/uyzJW2-DZL64_EZmXFicZXVoJUg.cer
File: uyzJW2-DZL64_EZmXFicZXVoJUg.cer (raw, json)
Hash identifier: 09mSXKXgWh5xiZyuq1z44c0AD5hJlvD13heyRdGHqrs=
Subject key identifier: BB:2C:C9:5B:6F:83:64:BE:B8:FC:46:66:5C:58:9C:65:75:68:25:48
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8BC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 28 Aug 2022 04:17:22 +0000
Certificate not after: Mon 28 Aug 2023 04:15:34 +0000
Subordinate resources: AS: 45095
IP: 27.50.128.0/17
IP: 42.1.128.0/17
IP: 2403:e500::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35776 (0x8bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 28 04:17:22 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=BB2CC95B6F8364BEB8FC46665C589C6575682548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:fb:3f:96:4b:70:50:0d:0c:62:0c:b5:75:
5a:d4:e2:84:6c:5d:dc:d9:cd:ed:69:56:c1:d7:c6:
5b:98:c2:90:e2:d7:10:d8:69:df:97:41:a2:2f:b0:
e1:81:c1:66:50:45:d1:b1:b9:e7:ff:a4:1b:bf:e8:
17:ef:af:c7:aa:be:cc:c8:c7:cd:4c:03:d2:ad:04:
c5:83:70:3f:68:1d:4c:3c:2b:d7:5c:fe:02:06:82:
d3:3b:11:db:95:a8:38:18:f7:85:53:1d:f8:ce:d9:
37:03:d7:35:42:fa:70:db:bf:e8:73:05:67:e9:3b:
04:5c:24:05:0e:46:44:1c:9d:87:73:78:28:ec:48:
ee:3a:3f:1a:26:45:fe:04:94:9a:42:62:db:68:f3:
9e:18:ae:5f:3a:f5:10:39:a6:9f:0d:fe:24:73:ab:
8c:b4:8a:5b:8a:34:28:e0:53:07:c6:2d:3b:83:c0:
24:4b:b6:eb:01:2b:0f:06:ac:b1:f6:36:c4:44:65:
7e:19:45:25:30:bb:87:2f:29:7d:60:c0:c7:0e:ba:
ad:3a:ce:05:44:68:b2:59:3c:79:b9:9e:3d:25:69:
79:8e:41:bf:1c:d1:94:b9:31:b1:a3:92:ad:f4:8c:
1a:ef:23:32:f7:82:58:de:b0:e1:de:00:0e:c2:6a:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:C9:5B:6F:83:64:BE:B8:FC:46:66:5C:58:9C:65:75:68:25:48
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/390/uyzJW2-DZL64_EZmXFicZXVoJUg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45095
sbgp-ipAddrBlock: critical
IPv4:
27.50.128.0/17
42.1.128.0/17
IPv6:
2403:e500::/32
Signature Algorithm: sha256WithRSAEncryption
a8:a3:c6:fc:22:1c:24:88:df:8f:b7:cf:15:de:27:f1:06:7e:
76:0c:8b:15:c0:3a:f8:3b:50:60:6f:78:5a:ff:8e:7c:14:dd:
ee:b8:9c:ec:34:4d:79:ca:a2:82:6f:36:59:c8:e1:06:62:ad:
f5:7c:e6:54:93:ce:5e:0e:cc:ed:0b:d2:a3:e3:1f:ca:48:f8:
da:d0:f0:30:dc:3a:f8:38:b6:b1:da:0f:45:67:07:20:34:08:
67:45:62:38:53:31:0a:db:76:93:90:98:8b:85:ab:b1:11:a4:
e0:72:4d:36:87:99:c0:da:11:92:bf:cb:23:36:ef:4c:0a:57:
76:b1:51:2d:42:63:29:53:64:a9:17:14:e4:27:cc:c2:da:52:
d0:e2:8a:ac:8b:c4:15:36:91:9a:65:d2:52:ab:ad:f7:ec:f2:
9d:9b:a2:2d:9b:b9:d9:8a:1d:62:01:88:c7:9d:90:eb:4b:06:
9f:54:24:6d:68:b6:b6:cf:f3:28:72:2c:98:44:4f:ae:6c:51:
cb:02:ca:73:23:7f:2c:c6:5c:58:3a:99:51:8d:2e:4e:e3:de:
5a:4f:37:db:eb:69:2f:9b:b7:1f:1e:d0:90:f8:a8:bf:b5:c0:
7c:96:30:ea:58:c1:85:54:c9:fa:a1:dd:af:b6:0b:70:80:f8:
a4:c6:74:3e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAIvAMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMjA4MjgwNDE3MjJaFw0yMzA4MjgwNDE1MzRaMDMx
MTAvBgNVBAMTKEJCMkNDOTVCNkY4MzY0QkVCOEZDNDY2NjVDNTg5QzY1NzU2ODI1
NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzvs/lktwUA0MYgy1
dVrU4oRsXdzZze1pVsHXxluYwpDi1xDYad+XQaIvsOGBwWZQRdGxuef/pBu/6Bfv
r8eqvszIx81MA9KtBMWDcD9oHUw8K9dc/gIGgtM7EduVqDgY94VTHfjO2TcD1zVC
+nDbv+hzBWfpOwRcJAUORkQcnYdzeCjsSO46PxomRf4ElJpCYtto854Yrl869RA5
pp8N/iRzq4y0iluKNCjgUwfGLTuDwCRLtusBKw8GrLH2NsREZX4ZRSUwu4cvKX1g
wMcOuq06zgVEaLJZPHm5nj0laXmOQb8c0ZS5MbGjkq30jBrvIzL3gljesOHeAA7C
aqyjAgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUuyzJW2+DZL64/EZmXFicZXVoJUgw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM5
MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zOTAvdXl6SlcyLURaTDY0X0VabVhGaWNaWFZvSlVnLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsCcwNAYIKwYBBQUHAQcBAf8EJTAjMBIE
AgABMAwDBAcbMoADBAcqAYAwDQQCAAIwBwMFACQD5QAwDQYJKoZIhvcNAQELBQAD
ggEBAKijxvwiHCSI34+3zxXeJ/EGfnYMixXAOvg7UGBveFr/jnwU3e64nOw0TXnK
ooJvNlnI4QZirfV85lSTzl4OzO0L0qPjH8pI+NrQ8DDcOvg4trHaD0VnByA0CGdF
YjhTMQrbdpOQmIuFq7ERpOByTTaHmcDaEZK/yyM270wKV3axUS1CYylTZKkXFOQn
zMLaUtDiiqyLxBU2kZpl0lKrrffs8p2boi2budmKHWIBiMedkOtLBp9UJG1otrbP
8yhyLJhET65sUcsCynMjfyzGXFg6mVGNLk7j3lpPN9vraS+btx8e0JD4qL+1wHyW
MOpYwYVUyfqh3a+2C3CA+KTGdD4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org