Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JecQBcfuYxT4zAIWzFBoQroUtBI.cer
File: JecQBcfuYxT4zAIWzFBoQroUtBI.cer (raw, json)
Hash identifier: xI4UNZqgyhBz/YBmaEpl8ozvgct+MFJY2HVuw81EjJY=
Subject key identifier: 25:E7:10:05:C7:EE:63:14:F8:CC:02:16:CC:50:68:42:BA:14:B4:12
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/JecQBcfuYxT4zAIWzFBoQroUtBI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 15 Jun 2021 19:31:04 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 45.113.20.0/22
IP: 103.52.172.0/22
IP: 218.244.112.0/20
IP: 2403:1d80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30931 (0x78d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 15 19:31:04 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=25E71005C7EE6314F8CC0216CC506842BA14B412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:bf:e0:ba:a7:1d:96:42:17:53:6a:07:90:
a0:57:10:86:62:cf:0f:1e:39:e9:38:2f:44:58:fe:
d7:77:db:be:95:21:a5:0c:1a:e9:ba:0b:cd:a1:91:
64:f7:21:39:f3:74:63:67:49:d5:4c:88:8d:d0:0c:
6f:34:fe:89:0c:31:4b:48:8c:0a:c0:11:57:2d:96:
bc:9d:81:45:d7:bf:c2:05:5d:05:c2:d9:aa:f1:fa:
00:e4:f8:7f:91:83:f7:20:a0:d0:7d:6a:17:bc:95:
ce:8a:09:d2:f2:ce:9e:79:e9:b3:56:d4:32:18:ca:
5e:68:2e:f3:c1:a6:39:4b:be:8c:ce:46:a4:ac:09:
68:45:19:ea:d9:fc:ac:4e:e7:26:b9:b5:82:75:61:
32:73:a2:1d:a3:7d:d2:a3:f7:83:47:c2:4f:2f:26:
1a:46:4b:c4:76:a7:b1:e4:6d:ae:5f:a7:50:42:26:
f3:a0:e2:aa:35:95:a8:28:81:30:3f:8a:d7:61:45:
4f:ab:51:e4:22:d8:51:16:c5:b6:73:d1:9b:93:24:
c6:8c:c0:38:13:73:cd:ae:5d:51:f5:25:df:cf:7a:
b9:58:2e:94:4a:88:3a:84:56:ac:93:62:8c:7f:5c:
65:0c:28:35:a2:b6:b0:20:90:f9:7e:e9:e2:33:01:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:10:05:C7:EE:63:14:F8:CC:02:16:CC:50:68:42:BA:14:B4:12
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2721/JecQBcfuYxT4zAIWzFBoQroUtBI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.20.0/22
103.52.172.0/22
218.244.112.0/20
IPv6:
2403:1d80::/32
Signature Algorithm: sha256WithRSAEncryption
67:3e:06:fc:89:17:e2:28:f5:5f:e7:e9:11:60:02:17:d5:c0:
81:9f:bb:2a:a7:14:39:5e:f6:d1:77:94:ae:25:4a:88:fa:49:
28:e7:9f:19:e2:ee:84:cf:44:92:65:bc:4b:82:e2:8f:fc:e8:
5a:72:0c:fc:2d:c7:10:03:70:eb:6a:cb:b0:67:08:95:4f:51:
19:17:3e:96:b3:93:6d:d3:86:cd:41:49:b4:cf:05:4b:b0:82:
44:e3:fd:e4:03:d6:85:b3:14:21:38:1f:c1:fc:bb:1e:79:7f:
0a:3a:9a:98:3a:8f:5a:25:18:f0:17:ee:43:e2:16:cf:81:eb:
93:e4:c7:8e:31:f4:1c:33:ac:95:7c:f3:ee:a5:5f:b9:d8:5d:
c5:c7:ad:40:2d:a8:35:3d:75:39:39:2e:99:f1:75:6b:bf:6d:
f3:b0:6e:44:74:cd:bd:2c:9b:f0:3e:28:c3:45:fa:0d:91:05:
4a:c1:70:02:3e:89:42:2f:69:ae:77:ba:9c:3a:33:58:db:29:
92:2c:66:7c:4d:4b:05:17:12:91:d7:fe:21:35:6a:da:12:72:
f1:a9:e9:16:ac:c4:18:51:f8:b8:9b:c9:37:9e:5a:57:9d:53:
3f:0a:ca:70:1d:1d:92:ca:e8:05:1b:67:e1:90:5e:81:ca:65:
29:a9:5f:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org