Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/y1L7tdzx3Mi0if5irx6rqFC33Ek.cer
File: y1L7tdzx3Mi0if5irx6rqFC33Ek.cer (raw, json)
Hash identifier: 5QuUqzqayb3x2VrCzld+pStThdUP3SoZjSXVcFsHx5k=
Subject key identifier: CB:52:FB:B5:DC:F1:DC:C8:B4:89:FE:62:AF:1E:AB:A8:50:B7:DC:49
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7718
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:18 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 131551
IP: 103.153.132.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30488 (0x7718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:18 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=CB52FBB5DCF1DCC8B489FE62AF1EABA850B7DC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:e6:f9:0a:32:5f:79:39:36:f8:c4:b0:d0:
6c:c0:1d:06:08:1d:60:1b:49:2a:c9:c0:da:e8:f1:
ff:02:51:f5:97:f2:ae:25:c9:53:2a:08:f5:af:28:
a6:57:57:f8:25:b0:4a:6f:ee:c8:a9:26:f4:38:bd:
bd:d9:71:26:f7:1d:94:e5:d1:4e:ff:77:83:de:3f:
d2:a5:dd:2b:0d:e7:4d:46:ef:f6:28:f8:aa:e4:0a:
1f:cf:93:ba:0e:17:58:cc:a7:13:dd:c1:4e:98:7e:
83:c0:38:df:8d:f3:6e:7e:8e:cf:94:4c:63:64:f0:
af:9d:3e:f8:6c:f2:ea:fb:e1:bf:a1:7e:b7:12:68:
b3:bf:8e:cf:1b:38:6d:7c:c6:b3:81:78:e9:1c:ff:
ad:ae:be:6a:dc:ad:47:d4:4b:bc:35:be:f9:a5:76:
4e:9c:dd:63:05:58:29:39:ec:03:04:e0:c5:f9:66:
bf:f4:2b:eb:3a:27:53:8f:28:e3:3c:d3:81:06:14:
6e:f0:59:78:d1:65:46:a6:05:13:de:e4:b5:b0:c9:
67:0f:fe:86:9e:95:d8:aa:50:8a:a9:04:d7:e4:f0:
16:89:a6:96:d1:11:e2:54:54:80:5a:4f:22:b7:ed:
8a:fc:70:57:90:4d:30:21:89:4c:69:15:8e:6c:4e:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:FB:B5:DC:F1:DC:C8:B4:89:FE:62:AF:1E:AB:A8:50:B7:DC:49
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2997/y1L7tdzx3Mi0if5irx6rqFC33Ek.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131551
sbgp-ipAddrBlock: critical
IPv4:
103.153.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:cd:f5:45:59:61:f7:7c:fe:42:75:d6:d7:a2:13:c6:9f:30:
1d:e9:dc:db:15:ad:58:79:3c:a2:2c:6b:99:d7:89:22:b1:7f:
f8:44:db:1b:04:b5:91:b1:5d:2b:97:8c:44:bf:8a:6a:71:e8:
c5:c4:42:5c:e3:8d:e6:9c:d9:e2:ba:7f:9f:e1:ec:6a:cb:c1:
16:cd:13:a8:23:53:7f:87:5e:7b:73:d8:21:e8:2a:87:dc:f9:
a6:b9:62:5c:6f:88:92:47:4a:d8:3f:0c:ea:d4:cc:21:cb:ce:
82:d3:9b:0b:f5:6d:9c:86:94:0e:d8:56:24:83:ff:10:0b:83:
73:96:0f:4c:29:29:e5:da:6b:14:d3:ee:8f:5f:d6:88:54:b5:
d5:8c:ec:aa:46:47:b9:37:f8:9a:26:e2:0c:38:a6:f5:70:d3:
d9:47:d9:2b:eb:b7:f8:42:f1:98:e2:55:42:56:8c:91:54:ad:
95:4e:67:ca:a7:01:fb:f1:51:01:df:a2:86:0a:bd:0b:d8:11:
98:58:e9:32:33:a8:83:12:51:f8:d8:40:a2:39:31:00:6f:b3:
fb:c8:e8:e0:c6:78:8b:03:b0:89:87:43:dd:90:d6:67:9a:70:
d1:11:f1:1a:c3:ba:5f:f0:1d:12:7a:29:2f:df:d9:93:8d:01:
9e:f0:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org