Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3oOwJdiFvhcSdK-DeB_Zab0JXD8.cer
File: 3oOwJdiFvhcSdK-DeB_Zab0JXD8.cer (raw, json)
Hash identifier: zJIEkcjTwE4OFBSoxkHEC6Wu054Tofla9YGobXN0aZE=
Subject key identifier: DE:83:B0:25:D8:85:BE:17:12:74:AF:83:78:1F:D9:69:BD:09:5C:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:44 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 218.247.64.0/19
IP: 219.234.16.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30512 (0x7730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:44 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=DE83B025D885BE171274AF83781FD969BD095C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:6e:67:03:ef:24:e6:f5:de:f0:d3:3e:19:
a1:2f:ea:10:99:71:f9:27:e0:58:02:b3:d7:b2:41:
7e:36:31:5e:90:ab:7e:c2:2d:a4:2d:bc:33:5d:d6:
c6:b5:45:1c:b9:ec:f2:8c:c3:38:48:2d:ad:2f:f9:
e7:66:75:6c:50:34:d1:1d:82:3d:c1:21:d1:a3:9b:
94:13:d2:6e:69:f6:be:20:1f:d4:9f:b2:68:68:dd:
dc:ae:86:98:63:91:fb:75:f8:b4:57:13:44:e4:95:
7c:4b:6b:b5:46:26:1a:5c:ec:77:ee:4b:da:95:79:
b4:f5:30:b8:5f:38:3f:e5:d9:51:29:1f:85:0f:28:
6b:9e:89:2a:23:67:4a:34:85:d4:b9:a4:cf:79:93:
0f:e9:87:0b:9f:50:cc:88:ea:00:70:ff:10:df:d0:
d4:c9:a1:6b:51:fc:ec:f5:09:66:e7:12:39:46:d3:
a8:54:ab:f6:92:f2:e5:e6:9c:79:cd:cd:bd:89:5b:
42:12:33:07:67:71:3c:a4:00:a8:1b:60:95:4a:7b:
99:4d:dd:8a:a2:86:88:31:ee:63:c2:54:9c:69:34:
81:7d:4e:fe:30:0c:bb:e8:7e:88:22:04:8c:59:e7:
06:7c:39:8d:9b:97:7c:dc:78:6b:1a:33:ca:c8:41:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:B0:25:D8:85:BE:17:12:74:AF:83:78:1F:D9:69:BD:09:5C:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1014/3oOwJdiFvhcSdK-DeB_Zab0JXD8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.64.0/19
219.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
07:c3:ed:fd:2d:55:4b:71:94:d1:dd:62:64:e1:ab:85:ef:f4:
b3:fb:a7:d2:66:53:f2:98:46:b8:55:47:c3:32:10:b5:e0:31:
d0:58:b5:7d:2f:05:62:82:18:11:24:89:b7:79:ed:e4:6a:82:
d9:89:ba:d6:2a:41:d4:34:e6:f9:65:61:df:54:54:56:fa:6f:
6d:98:54:1f:84:a2:c8:6f:65:5c:dc:64:e0:d9:a2:2c:38:98:
62:9b:63:c7:65:d7:69:39:e0:cc:74:50:5f:43:ee:7a:23:af:
3b:19:00:6d:1f:0d:e4:3d:81:14:da:4a:31:c2:da:71:cc:e3:
c0:5e:dd:c7:17:74:b3:56:ee:85:8c:11:fb:44:a1:c6:53:69:
7b:23:66:72:e4:9a:d8:b1:84:8f:1f:5d:71:2a:26:12:e2:0e:
b6:d3:2e:4f:7a:6b:da:ea:a7:02:d3:7e:f2:cb:80:d2:bc:15:
4a:eb:f3:de:e7:2f:f5:87:ef:ea:1a:c4:6d:5d:ba:44:20:bf:
c3:4c:db:8d:63:4a:b8:a1:92:76:31:27:15:a0:4a:3e:b5:c8:
51:c4:eb:47:11:a7:96:ae:3e:15:87:ee:65:4e:33:ab:5e:51:
15:c0:1a:b8:15:c6:cd:8d:1c:80:d4:c7:30:e5:d7:c8:02:2d:
fb:b9:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org