Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ORFGpLSwfSMRgyAs9wFgHXte1wU.cer
File: ORFGpLSwfSMRgyAs9wFgHXte1wU.cer (raw, json)
Hash identifier: WCfuKdy/p17FwdAcZSOp9JmCTZTTM+VJO1YBEPxVoow=
Subject key identifier: 39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8034
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFGpLSwfSMRgyAs9wFgHXte1wU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 25 Apr 2022 07:39:54 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.20.44.0/22
IP: 114.112.0.0/22
IP: 114.112.14.0/23
IP: 116.196.14.0/23
IP: 182.50.4.0/22
IP: 183.81.172.0/22
IP: 202.69.6.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32820 (0x8034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 25 07:39:54 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=391146A4B4B07D231183202CF701601D7B5ED705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:c5:7e:17:02:3d:8a:1e:52:10:31:a9:d2:
ea:bd:de:e3:e8:55:6e:6b:48:75:55:45:38:da:c9:
77:0f:02:b1:85:7f:5d:33:ef:a9:79:ce:74:0a:3e:
43:50:0c:9e:eb:07:9c:c4:70:94:fc:ba:b7:a6:db:
71:e0:5d:d7:6b:28:c7:52:cd:a2:d7:6f:08:42:8a:
6d:2b:97:78:cb:ee:35:ca:50:af:41:1d:22:e5:b1:
4a:ba:24:15:a7:31:3c:47:a4:3e:3d:8f:95:da:2a:
6e:f3:e0:69:84:93:cf:7e:4f:c1:5c:11:21:40:c0:
dd:dd:35:89:e9:92:a4:1b:75:b8:ea:fc:dd:0c:b3:
3f:ca:a0:d8:00:82:c4:f0:9d:b8:8d:06:fe:b2:df:
25:7b:9b:eb:72:71:0a:30:32:48:00:b6:99:5b:ee:
57:f8:37:76:4d:5f:02:42:99:1e:d5:b9:22:cb:59:
32:80:82:f0:b4:de:4b:fb:2b:23:e2:c8:92:d2:b0:
7b:51:76:d3:bf:75:06:b1:a9:e1:0d:9e:17:e7:c2:
04:9b:c9:54:e9:c0:ff:69:48:1b:c2:99:0c:c8:17:
93:e5:6a:10:e3:7b:d2:7c:b6:57:49:ce:96:a7:d4:
32:dd:a5:69:bf:4a:97:07:17:3f:37:9a:0e:c8:78:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFGpLSwfSMRgyAs9wFgHXte1wU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.44.0/22
114.112.0.0/22
114.112.14.0/23
116.196.14.0/23
182.50.4.0/22
183.81.172.0/22
202.69.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:f1:46:24:bd:55:72:5a:06:46:a6:15:95:1f:73:13:c5:08:
7b:ab:e5:1d:76:f3:52:d9:85:f9:5a:0c:16:e0:3b:25:dd:8b:
5e:31:99:c6:de:9a:2c:a9:ff:97:2d:a6:72:86:00:d2:3d:86:
9a:6f:7b:78:ce:eb:e1:70:4f:5c:f2:0c:ea:05:03:36:4f:7d:
00:85:e5:ff:0c:71:b2:52:53:bf:87:cc:c5:26:50:58:ed:ad:
6b:60:01:f1:96:d6:de:eb:8a:a7:5f:12:c7:e1:cd:21:cc:33:
74:57:e1:b7:a2:2c:b3:9e:3b:d1:54:2d:91:1a:aa:fa:cf:3a:
a1:e0:34:54:ae:3f:6b:1a:e7:da:dd:8d:4b:5c:3e:9c:f2:56:
11:0c:59:c5:b9:98:44:ab:47:b8:b6:5a:4c:a0:56:06:28:49:
cd:b7:8a:fe:e0:05:f8:a9:9d:17:0c:cf:d3:e8:27:ac:12:88:
1d:2b:b5:59:33:8b:f2:5e:8e:77:f0:1f:1d:a6:ea:4c:21:64:
59:ff:e7:12:8d:f9:d1:8f:1f:c5:90:49:f3:4a:30:87:0e:57:
29:9f:df:07:88:b6:89:25:6b:d9:02:9b:3c:fa:ee:5f:77:d2:
a9:3f:fd:f8:17:f6:aa:e8:dc:73:38:4d:2d:21:a5:bc:31:04:
a8:25:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org