Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vyYXTl7UummQoE_rcgAGRDDnGEI.cer
File: vyYXTl7UummQoE_rcgAGRDDnGEI.cer (raw, json)
Hash identifier: nBQZitU+gxpExDmSyLLANpPmXjB6bYXKyfo3sqR7dgs=
Subject key identifier: BF:26:17:4E:5E:D4:BA:69:90:A0:4F:EB:72:00:06:44:30:E7:18:42
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 93CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 17 Feb 2023 02:47:12 +0000
Certificate not after: Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources: AS: 131573
IP: 103.94.72.0/22
IP: 2401:3640::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37839 (0x93cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 17 02:47:12 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=BF26174E5ED4BA6990A04FEB7200064430E71842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:7a:7e:0e:cd:eb:66:82:45:fa:2c:54:69:
03:8c:ea:c6:09:59:14:25:72:f3:b7:fd:c1:47:7a:
05:46:a8:2a:1b:cd:93:9a:ff:3b:b6:63:20:bb:64:
f1:2b:51:fe:02:aa:c4:69:7e:c3:4c:e6:ec:59:10:
e8:a3:60:5c:8f:75:33:1b:fb:27:78:9b:8b:9d:6f:
9f:1e:f9:93:dc:b9:41:30:3d:95:5b:a3:1c:ef:05:
9b:42:98:57:7f:fb:57:f4:ae:50:37:84:fc:fc:f9:
37:ad:8d:fc:3c:3d:6d:ac:61:d2:1c:9d:68:e6:a1:
fa:5e:1a:ef:c2:21:96:44:33:2a:22:ac:7f:b6:79:
70:73:64:ec:3a:4e:76:4c:35:a1:56:9d:e4:83:2d:
6f:5f:24:89:68:4e:69:42:cd:a6:13:37:c3:7a:0b:
c1:26:15:eb:a7:53:00:12:c5:9e:5d:e7:f4:d2:63:
83:2a:cd:e0:65:7d:ff:c3:97:a0:77:27:f1:81:41:
ec:1d:d1:64:d4:e5:a0:98:a8:87:d6:ec:50:df:7d:
fd:fa:64:c1:a9:b2:95:e1:68:5f:a2:80:7c:99:6a:
59:0b:88:dd:5c:18:f2:bd:cd:46:87:0b:71:00:16:
0f:80:b7:c5:df:18:87:35:20:ac:b3:9b:a2:fd:b5:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:17:4E:5E:D4:BA:69:90:A0:4F:EB:72:00:06:44:30:E7:18:42
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2457/vyYXTl7UummQoE_rcgAGRDDnGEI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131573
sbgp-ipAddrBlock: critical
IPv4:
103.94.72.0/22
IPv6:
2401:3640::/32
Signature Algorithm: sha256WithRSAEncryption
44:55:a4:d4:2a:8b:c4:a2:1f:ca:b8:7d:4b:d7:7d:a2:5e:02:
97:73:c7:be:8b:b0:90:ee:71:a4:44:c2:51:40:b7:1c:a0:83:
8c:68:34:dc:49:e7:ff:18:59:74:9f:63:7b:76:f0:06:c0:37:
2d:c3:75:ae:d3:e4:9c:2b:c8:39:2f:c3:1b:4d:bd:2c:fb:c8:
91:91:38:30:4c:a7:9f:99:ec:39:09:5a:ba:95:bd:ae:91:98:
94:67:c8:46:06:00:57:ed:db:ac:74:7e:d4:33:55:fd:48:27:
00:9d:9e:97:fc:db:cf:ba:75:30:5a:a4:84:ee:fd:aa:62:93:
ea:87:cb:8d:1a:3f:70:91:69:cb:7c:7f:6c:ee:d7:1b:06:62:
a7:de:97:c8:f6:c2:8b:ce:df:c8:fe:4a:c3:24:97:5d:ba:37:
c9:06:aa:3b:5d:05:ca:7d:98:d3:8f:8f:cb:1b:91:6e:f5:f0:
8d:b3:94:d3:d4:6d:9f:a1:b5:40:75:61:4f:65:0a:8f:77:3f:
d6:de:c1:fc:c9:9f:b3:4b:6a:44:f4:6b:f2:ea:73:bd:dd:15:
ab:85:1a:45:16:3f:56:70:48:04:a0:c3:ce:9c:60:93:d5:d2:
c6:56:f9:78:76:46:12:ca:ee:d1:59:b7:7a:4f:fd:66:3f:c3:
b8:a9:d7:d3
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIDAJPPMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzAyMTcwMjQ3MTJaFw0yNDAyMTcwMjQ2NTlaMDMx
MTAvBgNVBAMTKEJGMjYxNzRFNUVENEJBNjk5MEEwNEZFQjcyMDAwNjQ0MzBFNzE4
NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nnp+Ds3rZoJF+ixU
aQOM6sYJWRQlcvO3/cFHegVGqCobzZOa/zu2YyC7ZPErUf4CqsRpfsNM5uxZEOij
YFyPdTMb+yd4m4udb58e+ZPcuUEwPZVboxzvBZtCmFd/+1f0rlA3hPz8+Tetjfw8
PW2sYdIcnWjmofpeGu/CIZZEMyoirH+2eXBzZOw6TnZMNaFWneSDLW9fJIloTmlC
zaYTN8N6C8EmFeunUwASxZ5d5/TSY4MqzeBlff/Dl6B3J/GBQewd0WTU5aCYqIfW
7FDfff36ZMGpspXhaF+igHyZalkLiN1cGPK9zUaHC3EAFg+At8XfGIc1IKyzm6L9
ta0FAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUvyYXTl7UummQoE/rcgAGRDDnGEIw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0
NTcvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjQ1Ny92eVlYVGw3VXVtbVFvRV9yY2dBR1JERG5HRUkubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIB9TAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAmdeSDANBAIAAjAHAwUAJAE2QDANBgkqhkiG9w0BAQsFAAOCAQEA
RFWk1CqLxKIfyrh9S9d9ol4Cl3PHvouwkO5xpETCUUC3HKCDjGg03Enn/xhZdJ9j
e3bwBsA3LcN1rtPknCvIOS/DG029LPvIkZE4MEynn5nsOQlaupW9rpGYlGfIRgYA
V+3brHR+1DNV/UgnAJ2el/zbz7p1MFqkhO79qmKT6ofLjRo/cJFpy3x/bO7XGwZi
p96XyPbCi87fyP5KwySXXbo3yQaqO10Fyn2Y04+PyxuRbvXwjbOU09Rtn6G1QHVh
T2UKj3c/1t7B/Mmfs0tqRPRr8upzvd0Vq4UaRRY/VnBIBKDDzpxgk9XSxlb5eHZG
Esru0Vm3ek/9Zj/DuKnX0w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org