Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0k8kp8OGTYPGsNsIBjmKVN0DWfc.cer
File: 0k8kp8OGTYPGsNsIBjmKVN0DWfc.cer (raw, json)
Hash identifier: wWPfqINbgYKGYaj9zKGiKBLwCaiYIjyvwf8aqJ2JaPA=
Subject key identifier: D2:4F:24:A7:C3:86:4D:83:C6:B0:DB:08:06:39:8A:54:DD:03:59:F7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7828
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/0k8kp8OGTYPGsNsIBjmKVN0DWfc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 09:54:07 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.91.252.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30760 (0x7828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 09:54:07 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D24F24A7C3864D83C6B0DB0806398A54DD0359F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:52:e5:78:8f:e3:2f:71:11:10:50:2d:fd:
92:34:79:64:5e:56:fe:91:37:13:8c:ff:46:d9:3b:
01:cf:a3:14:24:5c:e5:44:a8:2a:d9:7e:9e:37:80:
c8:a9:44:87:cc:fc:e6:93:60:83:2b:4f:a2:6a:80:
39:ce:20:6e:54:bd:48:32:2f:ed:7d:77:06:3b:c9:
80:90:e0:9c:7d:23:75:a5:83:f1:5d:f6:d6:05:1f:
6a:9b:04:c6:d2:75:e4:e4:7a:97:08:db:6d:2b:18:
95:85:11:a6:2a:46:ec:c6:9e:75:81:ae:3a:3e:4c:
a0:03:35:60:8c:0d:4b:ca:49:87:06:b6:bb:be:ae:
29:ff:74:0e:3e:36:9b:ca:80:c3:ca:d7:8a:62:25:
e7:04:6d:bf:15:a0:75:e4:ed:09:4c:12:0a:29:88:
d5:32:7b:2b:04:b9:7b:bd:38:7b:9a:56:37:b3:53:
45:3e:b2:55:cc:8e:30:c6:07:b0:56:3d:ab:8b:3b:
65:d1:84:0f:6e:4a:42:61:df:56:cd:8e:fd:13:3e:
51:d6:7f:c5:67:c7:13:35:97:94:6e:30:0c:19:e0:
75:94:f5:eb:8e:c4:73:22:14:24:e1:f6:cb:f7:c4:
8c:0b:93:c6:63:ec:00:99:16:9c:0b:05:54:82:31:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:24:A7:C3:86:4D:83:C6:B0:DB:08:06:39:8A:54:DD:03:59:F7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/0k8kp8OGTYPGsNsIBjmKVN0DWfc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:3c:63:78:d1:b8:4d:25:7e:31:a2:15:84:88:52:69:47:29:
85:3d:83:fb:01:b2:0c:fd:5e:0b:3f:11:d3:45:dd:b3:8d:69:
ed:f5:b0:5d:18:35:4d:db:e3:6e:16:c6:b5:7d:ad:32:34:ea:
68:c7:96:6a:c4:8b:c8:4e:9b:b5:3d:02:7c:58:c1:4d:31:c9:
28:86:9f:2f:fc:75:37:8c:68:ed:f9:08:74:19:c0:56:b4:44:
a7:c6:02:b3:ab:de:86:84:b1:86:a5:ca:5d:1e:e2:6d:50:64:
b3:65:e1:f1:56:27:e9:c3:f6:cc:d4:51:32:ff:d6:73:72:93:
5e:8d:e8:c4:9d:e4:95:6c:a9:e3:e2:cf:d7:33:29:0c:d0:db:
63:16:cb:ca:94:48:01:a9:77:53:f5:81:32:3b:11:f3:19:1b:
72:ff:17:bf:65:85:52:1c:0c:64:7d:bd:b0:77:03:93:b3:c6:
99:6c:0e:ca:4f:2c:64:f9:6b:2b:7f:bd:73:59:11:20:f9:1a:
0f:09:15:a0:0b:9c:a9:28:50:50:cf:3d:e1:20:de:8e:85:11:
8e:c5:cd:3b:5e:bc:44:b5:ff:eb:83:d2:f3:b4:9b:22:d1:aa:
e8:1b:31:48:0e:58:86:e7:6c:3f:3b:d8:cb:ff:c7:90:2c:0d:
b4:e5:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-ams.rpki-client.org