Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yOKdHZenrjDOu2peRiljRaYygjY.cer
File: yOKdHZenrjDOu2peRiljRaYygjY.cer (raw, json)
Hash identifier: WGSLeJ06FoABNj1O2A3zMMnHZKXgK3ESVkgIt0XpsAA=
Subject key identifier: C8:E2:9D:1D:97:A7:AE:30:CE:BB:6A:5E:46:29:63:45:A6:32:82:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 786B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/yOKdHZenrjDOu2peRiljRaYygjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 05 Jun 2021 19:59:36 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30827 (0x786b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 5 19:59:36 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C8E29D1D97A7AE30CEBB6A5E46296345A6328236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:8e:0d:5f:5f:dc:f2:66:5f:16:19:e1:16:
4a:a2:25:d8:88:5e:de:45:87:92:29:55:a3:35:c7:
40:3b:82:25:1c:1a:66:5d:44:5c:f6:75:40:e9:65:
f6:70:cb:0a:c2:41:2c:f5:b6:42:56:87:96:1c:28:
44:f3:2a:35:17:f9:0f:fb:73:69:5c:44:dc:02:dc:
ab:6e:28:c7:5e:a6:a7:a7:53:bb:e0:8f:c8:14:39:
17:5d:af:32:d4:8c:24:f4:f7:a6:d4:0f:1a:8e:a1:
a7:6a:c6:95:23:d1:a6:cc:f9:15:39:bd:3e:0b:a1:
e6:f5:b6:f6:2d:dd:c8:e4:df:40:3f:4c:26:d6:85:
2a:c9:c7:c3:af:86:89:9b:82:92:1d:ff:40:74:ba:
dd:10:83:11:82:75:ae:e4:42:50:25:0b:d2:5d:d2:
71:0b:c7:41:de:5b:59:19:1e:7a:97:f3:3e:43:79:
dd:c6:15:c8:6f:34:86:f8:fc:83:7c:06:b2:d2:ca:
67:5a:fc:9e:fd:9a:f8:c0:19:64:3c:3c:77:f8:c3:
45:16:59:a5:a8:1d:93:35:05:4b:90:da:9f:4b:64:
3e:57:4c:52:8e:44:23:0f:0f:ec:c0:d1:15:d8:66:
9b:71:92:8a:fd:77:f0:85:92:27:b2:b8:bd:64:06:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:9D:1D:97:A7:AE:30:CE:BB:6A:5E:46:29:63:45:A6:32:82:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/yOKdHZenrjDOu2peRiljRaYygjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
72:07:bf:73:36:2d:2f:bb:f0:cc:64:82:6e:45:94:0a:b5:42:
ee:28:27:fb:5e:60:01:4e:ba:44:4d:70:6c:40:96:68:e8:04:
bb:dc:fa:23:75:4c:2d:39:8a:21:69:c7:a8:1a:4d:25:7b:6e:
a4:71:c9:fb:32:a2:d8:29:de:e2:e1:58:78:7d:f4:7b:24:a1:
d1:9e:36:c9:ef:61:20:3b:a1:5f:6f:c7:15:94:17:9e:a4:ef:
f5:38:a2:8f:06:ff:33:81:27:ad:e1:7b:3e:95:85:cd:e3:7d:
8f:d1:c8:7a:30:ee:b8:d7:99:02:f8:28:0c:0a:a2:21:4c:86:
d1:4e:62:40:da:b3:90:99:17:48:1b:e4:1a:44:04:c0:52:87:
6d:17:9f:2a:43:59:34:2e:00:2d:3a:3e:97:26:3d:11:35:62:
70:65:2a:bc:0a:18:ca:e6:83:66:65:cf:e7:cf:8d:16:df:62:
b2:df:d6:7d:ff:db:8a:3a:b8:0d:e3:7a:0b:4c:35:ab:a3:f2:
e0:8b:46:24:13:13:74:12:40:13:b4:f0:f2:14:03:60:5d:73:
0f:9e:35:c0:9f:69:4e:9f:0f:2c:ad:a8:00:a4:75:77:cd:ea:
82:a0:9b:f3:36:90:55:8c:d1:be:99:b3:30:62:88:49:21:b2:
29:fe:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org