Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
File: Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer (raw, json)
Hash identifier: 0dNgTckLtYWKOwYVhRk4se/jSJ3DVXuoI9TPoET0P7k=
Subject key identifier: 11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:34 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 43.250.116.0/22
IP: 103.41.232.0/22
IP: 103.90.152.0/22
IP: 103.235.184.0/22
IP: 150.242.224.0/22
IP: 219.234.8.0/21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30644 (0x77b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:34 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:a8:02:97:f0:29:e2:10:e5:2d:cc:30:72:
5e:3d:b0:59:c8:87:26:30:f6:fb:5a:6c:94:dc:24:
c6:90:25:a1:36:f1:08:fd:eb:57:f6:32:b0:1d:58:
db:ce:98:89:d5:c6:05:96:46:4f:2a:3c:48:37:65:
55:9d:82:c2:93:17:43:98:a5:9a:db:1e:33:d9:8a:
03:f6:50:1b:17:e5:12:a7:6d:e7:a7:72:7d:94:7e:
79:ca:b4:d8:4c:b0:1b:6a:b0:bc:31:8a:c4:ba:bc:
9f:b9:65:d1:81:5f:b8:b4:9d:0f:3b:ee:85:b7:f4:
be:6d:76:7e:33:97:6f:7c:3f:ed:0e:6b:b5:fe:96:
2a:32:b5:af:ff:39:80:5d:6c:bd:7a:fc:69:bb:7d:
df:49:1b:8a:e8:8e:e0:9f:3e:da:ef:af:d8:01:14:
69:ff:a4:91:a3:92:d3:ab:3a:73:fd:f1:d8:4a:6d:
c8:d5:8a:84:c9:51:f0:a8:44:4e:3c:01:a6:42:4a:
ca:ee:ea:19:32:9f:44:59:13:3b:ec:ba:8a:5d:de:
c1:62:3a:0f:7b:b8:66:52:af:58:ae:aa:7e:96:6e:
47:41:0c:a3:5a:07:28:6f:12:66:99:ad:7d:64:a4:
f3:8a:63:66:66:a5:44:67:20:51:f7:47:07:8a:9a:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
103.90.152.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
80:25:18:ef:a7:b9:fc:4d:3b:ee:fa:7b:f3:2b:f2:68:7e:e5:
d2:d5:10:9a:4d:55:e3:a3:eb:e4:d0:df:7a:07:e4:19:51:d4:
bf:ed:23:5b:71:ed:bb:e9:d8:7d:f7:e0:bc:55:98:fd:74:1b:
1e:94:45:67:2d:ef:60:55:88:a5:c0:86:1c:9f:01:71:6d:ec:
a1:9d:d5:b8:1a:12:7b:3a:ea:db:83:1b:66:be:09:08:88:8f:
e0:b4:c0:1f:db:0f:ac:6a:56:2b:c2:32:77:63:bf:11:cf:bc:
94:17:10:58:a4:cb:60:cc:7e:cf:1c:ec:b2:c8:c4:ff:44:02:
ff:53:a5:69:ed:34:df:46:18:4e:41:f5:85:79:61:ec:7d:79:
56:e3:ef:f5:8f:01:d6:b6:12:3a:29:5d:1f:9f:94:0f:95:a3:
96:c2:75:d5:bb:16:15:fc:d1:f2:94:34:f3:de:39:f6:80:3a:
d0:c3:5c:a9:e5:ba:91:0e:41:29:9b:f6:e5:aa:28:23:1a:31:
f3:25:49:b6:ec:d6:5a:51:fe:f6:5e:62:39:1e:b7:26:b7:0e:
a0:34:d5:dd:d5:f4:b6:91:f5:41:d4:b4:19:72:9e:c3:bc:0e:
e7:12:aa:fb:3b:80:f0:6e:69:57:5a:bf:00:28:f7:01:d1:d7:
0c:36:c6:1a
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgICd7QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDUzNFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoMTFFRjdBRkVEMTdCN0IxREM3Q0ZEMTQyNzI4OEQwMUU1QkVCRTk0
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALm4qAKX8CniEOUtzDBy
Xj2wWciHJjD2+1pslNwkxpAloTbxCP3rV/YysB1Y286YidXGBZZGTyo8SDdlVZ2C
wpMXQ5ilmtseM9mKA/ZQGxflEqdt56dyfZR+ecq02EywG2qwvDGKxLq8n7ll0YFf
uLSdDzvuhbf0vm12fjOXb3w/7Q5rtf6WKjK1r/85gF1svXr8abt930kbiuiO4J8+
2u+v2AEUaf+kkaOS06s6c/3x2EptyNWKhMlR8KhETjwBpkJKyu7qGTKfRFkTO+y6
il3ewWI6D3u4ZlKvWK6qfpZuR0EMo1oHKG8SZpmtfWSk84pjZmalRGcgUfdHB4qa
VEcCAwEAAaOCAnMwggJvMB0GA1UdDgQWBBQR73r+0Xt7HcfP0UJyiNAeW+vpRzAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8yMzkxL0VlOTZfdEY3ZXgzSHo5RkNjb2pRSGx2cjZVYy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
PQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAIr+nQDBAJnKegDBAJnWpgDBAJn
67gDBAKW8uADBAPb6ggwDQYJKoZIhvcNAQELBQADggEBAIAlGO+nufxNO+76e/Mr
8mh+5dLVEJpNVeOj6+TQ33oH5BlR1L/tI1tx7bvp2H334LxVmP10Gx6URWct72BV
iKXAhhyfAXFt7KGd1bgaEns66tuDG2a+CQiIj+C0wB/bD6xqVivCMndjvxHPvJQX
EFiky2DMfs8c7LLIxP9EAv9TpWntNN9GGE5B9YV5Yex9eVbj7/WPAda2EjopXR+f
lA+Vo5bCddW7FhX80fKUNPPeOfaAOtDDXKnlupEOQSmb9uWqKCMaMfMlSbbs1lpR
/vZeYjketya3DqA01d3V9LaR9UHUtBlynsO8DucSqvs7gPBuaVdavwAo9wHR1ww2
xho=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org