Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/P8sUcex0sgltFCWIo8nBzOcyfEo.cer
File: P8sUcex0sgltFCWIo8nBzOcyfEo.cer (raw, json)
Hash identifier: eXWZHEuniJY9V28v5+OfMUr6E8d3YJ6yOnhrPoVPtGw=
Subject key identifier: 3F:CB:14:71:EC:74:B2:09:6D:14:25:88:A3:C9:C1:CC:E7:32:7C:4A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 772A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:39 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.211.224.0/22
IP: 146.196.72.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30506 (0x772a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:39 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=3FCB1471EC74B2096D142588A3C9C1CCE7327C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:5f:fd:17:a4:21:24:0a:07:b0:21:7f:e4:
40:72:23:48:5a:25:09:3f:e3:23:ee:6f:ae:1d:72:
5c:bc:e6:15:89:d6:a8:4e:34:a7:d1:56:8d:f7:80:
4a:84:1b:c6:59:e0:21:46:68:50:a4:27:b7:de:b7:
45:72:c2:ba:ec:d8:14:84:63:cc:9d:2e:50:08:61:
6c:08:05:28:10:2e:68:51:15:cc:9f:ed:2c:a3:d9:
fd:3c:26:c2:cc:7c:9b:c3:f2:a0:dd:ce:ea:81:59:
a3:20:1d:41:0a:81:c6:c7:04:6a:a3:04:c9:63:69:
5d:1c:70:ff:69:77:70:11:d7:d9:09:fb:46:f6:24:
0e:b5:25:3c:de:47:11:31:a4:d4:eb:3b:b3:cd:4d:
41:c3:ce:a9:44:a0:f4:f0:8d:aa:ab:b4:f9:bf:0e:
57:43:f0:79:5d:59:06:8d:58:e7:46:b7:71:8a:ce:
e0:61:e7:0d:a1:05:c6:81:fe:b6:fa:77:d9:1a:62:
37:d5:15:e8:18:1a:d1:8a:fe:b8:8d:3f:6a:06:65:
21:e2:f3:c4:ea:bf:e2:9a:19:c3:f0:ea:c8:a8:00:
05:15:b6:74:fd:ec:18:f4:d5:68:f3:f3:98:72:0b:
72:a1:33:31:ac:ff:d0:1d:fb:e1:32:a0:fa:ae:9e:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:14:71:EC:74:B2:09:6D:14:25:88:A3:C9:C1:CC:E7:32:7C:4A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/P8sUcex0sgltFCWIo8nBzOcyfEo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.224.0/22
146.196.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:fa:92:51:0a:0c:ce:10:40:b0:c1:de:5b:75:df:d8:cc:7c:
20:23:d3:9d:a7:b9:e5:81:27:66:72:4e:8b:b4:0c:51:a9:95:
74:3e:90:96:c3:e4:6d:db:c5:b0:aa:59:a4:dc:60:bb:53:07:
fa:8a:48:d1:dd:3c:5a:07:af:13:9b:c8:7e:94:5b:e9:b5:5d:
73:39:54:c5:34:f2:47:b6:92:2b:0b:85:88:25:da:db:9b:fe:
92:6a:a4:a1:c9:ed:cb:e5:f7:03:18:9b:74:76:a1:e8:be:01:
4b:a8:3e:4a:96:75:73:7b:a0:82:03:09:40:9c:68:c8:98:2b:
f7:7d:4f:c2:61:94:d2:a6:5f:d1:21:4a:9a:ea:57:a3:3d:16:
76:77:a5:ff:1a:88:f3:d8:af:2f:8c:71:33:07:92:89:c4:9a:
8d:90:4b:be:96:63:7e:d0:aa:50:76:b4:ba:c1:df:2c:fa:f1:
1d:f5:87:7f:35:a4:c4:52:38:bf:4e:5d:0b:68:18:84:56:c6:
9e:ce:4b:e7:8f:37:4a:93:68:92:4e:44:5e:df:15:ad:3c:63:
d2:cb:a4:8b:69:88:4f:00:8a:07:0b:ec:02:a4:33:34:0d:a6:
2d:41:38:10:16:60:3c:de:e8:43:a8:7d:1c:bf:7d:ea:f1:08:
05:3c:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org