Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Hg9B0oVPPcM8c7sYoQl3ozCE4ns.cer
File: Hg9B0oVPPcM8c7sYoQl3ozCE4ns.cer (raw, json)
Hash identifier: O9EBUbhMqIGR1mEoQk3IfSHcerolSWUwlqpyGd9KgaU=
Subject key identifier: 1E:0F:41:D2:85:4F:3D:C3:3C:73:BB:18:A1:09:77:A3:30:84:E2:7B
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 25BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Hg9B0oVPPcM8c7sYoQl3ozCE4ns.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 19 Jul 2022 01:22:53 +0000
Certificate not after: Wed 19 Jul 2023 01:20:03 +0000
Subordinate resources: IP: 140.210.32.0/19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9659 (0x25bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Jul 19 01:22:53 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=1E0F41D2854F3DC33C73BB18A10977A33084E27B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:40:ef:25:61:1f:58:2f:f7:77:3f:48:5f:
b6:fa:92:73:ea:ac:f6:4e:7b:ee:e3:41:27:4c:f7:
08:86:8b:00:16:6a:44:44:29:9d:9c:91:c6:54:26:
cd:9e:2e:db:ec:0e:f8:db:7c:d9:82:c8:4d:86:63:
ae:ae:9b:0a:0b:2a:9a:2a:cd:d0:0c:c2:b7:2b:ba:
0c:d0:f7:b2:77:88:3c:90:3d:a5:53:08:52:0e:60:
37:e1:67:27:90:7a:69:f0:96:0b:50:2d:08:93:a0:
f6:4f:c0:15:c5:d9:89:a3:01:6e:c5:0c:76:77:bd:
ed:5a:89:ec:e5:b2:cb:3b:b7:f3:1e:4b:00:0c:14:
2c:78:6b:14:15:32:3a:cc:a6:1a:90:5f:02:69:d6:
df:95:b0:04:c1:5b:28:e6:73:5f:de:7d:7b:bb:b8:
9a:93:e2:79:44:39:7a:18:c0:ae:2f:c0:86:f9:33:
d4:2f:88:71:fa:8f:b4:cd:f4:0e:fc:ff:86:96:2f:
aa:b5:b8:79:59:89:59:2e:99:94:ec:01:47:82:13:
07:a8:16:fc:01:9d:59:08:06:6d:42:f5:c6:eb:42:
68:27:81:1b:e2:36:c5:3f:7a:94:24:38:c6:19:df:
21:48:ce:23:5d:92:94:f1:a7:7d:29:a5:fa:b6:fb:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0F:41:D2:85:4F:3D:C3:3C:73:BB:18:A1:09:77:A3:30:84:E2:7B
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/Hg9B0oVPPcM8c7sYoQl3ozCE4ns.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.210.32.0/19
Signature Algorithm: sha256WithRSAEncryption
86:63:e8:c6:18:dc:3b:47:c9:d6:95:a7:02:32:1e:66:d8:df:
74:0f:8b:d0:60:aa:aa:a1:e9:f9:8f:30:b7:3b:93:40:8e:b5:
95:31:98:bc:a8:73:7a:a0:d0:7a:66:d6:ad:54:15:a3:09:0e:
3f:99:2a:44:df:73:83:24:58:52:84:28:18:9a:c1:82:1d:52:
8a:a0:20:21:16:d6:b1:de:ce:5f:52:5a:ba:f3:73:40:9c:54:
52:ec:b1:a9:89:4e:d6:ff:b5:b3:a0:6b:02:d0:ce:cc:46:ea:
5a:f3:e9:a2:ad:42:9f:72:9e:44:3e:07:6d:b8:e3:54:b2:48:
90:93:9a:1c:13:83:9d:39:a3:cc:49:c7:52:a4:b6:89:ba:3b:
df:d8:ae:a8:5a:41:08:d4:17:9a:f4:3f:2a:fc:ad:88:80:e2:
43:71:0f:d1:c3:48:d1:dd:d1:92:01:ff:e5:e2:1a:c0:13:ac:
f4:c9:02:59:06:30:c2:04:14:22:72:2a:5d:99:1f:67:41:0a:
5b:5b:9e:97:6f:b0:95:90:8b:73:96:df:06:24:dc:0d:e3:b6:
2b:41:53:ef:fe:cf:24:48:e9:7a:ab:9b:a9:f5:88:4e:83:dd:
0d:f5:36:10:5d:62:4f:76:d1:82:ad:4d:9e:80:cb:ba:c5:41:
7c:3a:37:a8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICJbswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw
QTU0QTk1MTk1QTExMB4XDTIyMDcxOTAxMjI1M1oXDTIzMDcxOTAxMjAwM1owMzEx
MC8GA1UEAxMoMUUwRjQxRDI4NTRGM0RDMzNDNzNCQjE4QTEwOTc3QTMzMDg0RTI3
QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMohQO8lYR9YL/d3P0hf
tvqSc+qs9k577uNBJ0z3CIaLABZqREQpnZyRxlQmzZ4u2+wO+Nt82YLITYZjrq6b
CgsqmirN0AzCtyu6DND3sneIPJA9pVMIUg5gN+FnJ5B6afCWC1AtCJOg9k/AFcXZ
iaMBbsUMdne97VqJ7OWyyzu38x5LAAwULHhrFBUyOsymGpBfAmnW35WwBMFbKOZz
X959e7u4mpPieUQ5ehjAri/Ahvkz1C+IcfqPtM30Dvz/hpYvqrW4eVmJWS6ZlOwB
R4ITB6gW/AGdWQgGbUL1xutCaCeBG+I2xT96lCQ4xhnfIUjOI12SlPGnfSml+rb7
Eb8CAwEAAaOCAlMwggJPMB0GA1UdDgQWBBQeD0HShU89wzxzuxihCXejMITiezAf
BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx
RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQz
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzY0My9IZzlCMG9WUFBjTThjN3NZb1FsM296Q0U0bnMubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjNIgMA0GCSqGSIb3DQEBCwUAA4IB
AQCGY+jGGNw7R8nWlacCMh5m2N90D4vQYKqqoen5jzC3O5NAjrWVMZi8qHN6oNB6
ZtatVBWjCQ4/mSpE33ODJFhShCgYmsGCHVKKoCAhFtax3s5fUlq683NAnFRS7LGp
iU7W/7WzoGsC0M7MRupa8+mirUKfcp5EPgdtuONUskiQk5ocE4OdOaPMScdSpLaJ
ujvf2K6oWkEI1Bea9D8q/K2IgOJDcQ/Rw0jR3dGSAf/l4hrAE6z0yQJZBjDCBBQi
cipdmR9nQQpbW56Xb7CVkItzlt8GJNwN47YrQVPv/s8kSOl6q5up9YhOg90N9TYQ
XWJPdtGCrU2egMu6xUF8Ojeo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org