Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2K31sszMmrgmeweD0a4U-AEdJcg.cer
File: 2K31sszMmrgmeweD0a4U-AEdJcg.cer (raw, json)
Hash identifier: aznVTqILWHsLIficCKp26suZ19dAZeXynt81kk4NJ40=
Subject key identifier: D8:AD:F5:B2:CC:CC:9A:B8:26:7B:07:83:D1:AE:14:F8:01:1D:25:C8
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 1CDD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:52 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 139.220.192.0/18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7389 (0x1cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: May 27 05:06:52 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D8ADF5B2CCCC9AB8267B0783D1AE14F8011D25C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:e1:d8:57:05:08:02:d5:18:80:18:f3:85:
62:2a:7e:9a:1a:d8:99:06:2b:ad:53:80:89:9f:4e:
a1:9b:f9:ac:ea:ba:fe:72:97:69:31:45:6d:d9:26:
18:3f:c5:2d:fa:5c:2b:b5:e6:96:72:7b:5e:57:77:
13:6a:a2:19:9f:b6:46:48:38:fb:bc:9a:53:5f:de:
f8:b0:b2:f7:23:c2:7e:83:a5:bb:72:e4:22:6c:ac:
99:09:75:03:1a:18:b9:64:33:db:bd:8c:a6:07:ec:
55:b4:bb:dd:41:18:16:d9:dd:1f:e4:49:cc:05:e4:
4f:29:4c:d7:d5:19:38:83:f2:c7:b3:29:e5:94:ae:
e3:d3:d7:0b:15:7c:f6:95:0d:3b:e4:ef:f4:fa:1f:
36:da:02:01:dc:7e:a2:0c:24:c5:73:3c:f9:6e:35:
69:3b:6d:84:42:8f:b9:29:0a:4e:0f:93:b3:04:ee:
53:76:57:ae:d6:b9:52:e7:eb:30:24:c5:5f:eb:06:
3b:9d:e9:a1:02:d3:42:78:72:72:34:d5:4c:f9:a6:
31:6d:c2:2a:8a:c3:33:89:fb:3c:20:21:aa:c8:9e:
5e:a0:51:9e:2c:69:8f:f5:f7:13:19:01:86:ec:60:
95:df:59:3c:52:ba:18:6a:5d:34:e5:de:af:9d:26:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:F5:B2:CC:CC:9A:B8:26:7B:07:83:D1:AE:14:F8:01:1D:25:C8
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/423/2K31sszMmrgmeweD0a4U-AEdJcg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
60:d7:b8:0e:cf:44:7d:76:a7:a4:29:34:1b:4f:9f:d0:2b:2b:
1a:50:76:34:96:3c:d8:06:d1:15:16:16:83:82:58:7f:84:28:
6e:44:83:68:c8:5f:88:1b:ca:bd:92:f0:d0:80:cd:c7:93:ff:
ea:30:60:44:bf:a6:4e:29:e0:14:e9:db:bb:73:3b:d5:b4:e8:
53:78:f0:2c:64:47:01:2e:a7:df:d8:04:2e:86:c7:8b:77:02:
3e:8e:6f:d7:88:db:a2:57:11:66:f4:e1:05:63:27:7d:41:b1:
df:2b:a5:d9:ba:fc:e0:a5:c8:8f:67:f5:33:66:fa:40:01:54:
bd:d2:bf:04:13:0f:8d:59:25:69:05:5b:31:b3:85:dd:eb:9b:
cb:da:f1:e2:f8:87:6c:79:a8:e0:6f:9b:eb:e2:fe:ce:4c:dd:
ae:d7:ae:8f:8e:77:2b:77:1b:d5:ad:7e:ed:8c:41:0c:ca:08:
24:5c:9b:c0:50:ba:d1:86:85:4e:a2:ee:b6:fe:be:39:d1:de:
d2:b9:d8:5c:69:73:03:7a:c6:72:87:2e:2d:be:a7:61:62:47:
11:98:a9:78:58:a8:64:63:8b:b8:57:d3:fd:24:09:19:4d:29:
dc:f5:66:3b:42:2d:c1:b4:14:56:6a:6b:2c:04:a4:dc:39:73:
a7:73:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org