Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/QQ45OS_AvgbGT7ZSEKxWihB8bKA.cer
File: QQ45OS_AvgbGT7ZSEKxWihB8bKA.cer (raw, json)
Hash identifier: qi0Vgf3HU9G88PNS7FdoMokA+/7IuVtGz2nHNOUi0eo=
Subject key identifier: 41:0E:39:39:2F:C0:BE:06:C6:4F:B6:52:10:AC:56:8A:10:7C:6C:A0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/427/QQ45OS_AvgbGT7ZSEKxWihB8bKA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/427/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 07 Jun 2021 19:59:14 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 119.252.240.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30851 (0x7883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 7 19:59:14 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=410E39392FC0BE06C64FB65210AC568A107C6CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:c3:5d:57:dd:11:aa:2f:d0:8a:b1:80:c4:
09:3a:35:61:8e:6c:c4:02:85:8f:83:3c:00:9e:43:
db:f3:c1:54:69:6b:f2:05:4a:a5:1b:1b:62:2a:ef:
c5:36:56:2e:dc:0e:c2:f3:78:2f:e3:0f:77:b2:e8:
2e:48:0d:ce:f2:c6:c2:e8:74:08:85:9f:ae:d6:14:
7a:f3:4f:d1:c0:36:fa:db:d4:c5:3d:1f:23:c4:74:
11:a6:7e:1a:d2:cb:0f:7e:2f:52:00:32:4a:ad:10:
bb:7f:47:08:b1:3c:2d:55:da:09:d9:2a:f4:f5:1f:
b1:80:d6:ca:59:90:ff:33:69:8c:15:28:b0:01:7c:
c8:24:31:68:7d:05:5a:d0:e0:31:6a:64:2c:39:5f:
60:94:c1:ae:ef:53:c8:66:35:e3:6f:93:e5:da:63:
73:36:e3:a5:82:12:21:96:4f:fe:82:4c:ea:b8:e7:
66:21:29:8a:8c:6e:36:15:2c:cb:37:66:a7:4f:ec:
55:1a:d5:6f:0e:68:c2:9b:26:3c:51:83:32:e9:7a:
e5:31:fb:9d:68:8b:47:c6:0d:56:d4:77:ee:ac:16:
fb:64:4d:8b:b7:2f:82:99:c2:5c:ec:32:da:84:af:
e6:33:5e:fe:2f:37:3e:a8:40:64:88:25:de:df:27:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:39:39:2F:C0:BE:06:C6:4F:B6:52:10:AC:56:8A:10:7C:6C:A0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/427/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/427/QQ45OS_AvgbGT7ZSEKxWihB8bKA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.252.240.0/20
Signature Algorithm: sha256WithRSAEncryption
50:65:1e:e8:29:08:d7:ce:2f:39:98:d4:60:09:53:3e:10:4f:
c2:5a:1c:b8:fa:a6:c1:3c:98:03:d5:f1:d1:36:76:41:e5:68:
1c:0e:67:75:ef:69:af:38:7c:c1:b6:9a:18:0b:a0:34:d3:e3:
5d:eb:be:5a:fb:bb:3b:2b:88:93:36:8c:af:98:f6:09:3d:46:
9c:47:00:83:bf:ce:3e:39:ae:09:68:28:ed:11:98:70:a0:2b:
3c:c5:88:3d:92:bb:2f:43:16:6e:f3:24:e0:af:80:9c:76:53:
a1:73:31:af:e8:5f:d8:15:ee:b1:2b:de:c8:1e:5d:a8:04:fe:
91:31:2e:d2:3f:2a:66:38:86:dd:a3:92:4d:b0:e8:4f:50:36:
95:61:67:4e:3f:6a:c1:2d:04:a2:fd:5d:e8:11:2d:dd:f0:31:
45:28:07:38:16:4f:b3:a7:5b:c0:87:66:be:dd:f8:4f:4c:e7:
9b:b1:08:96:65:8f:2b:0f:30:86:9b:dc:a7:c0:16:c0:72:d0:
d8:be:b1:b4:17:b0:ca:0a:78:b5:c5:51:b4:09:55:e8:97:43:
2e:7e:63:df:1f:6f:ec:ef:53:40:4a:53:6d:5c:2c:cc:bc:58:
68:3d:ae:77:ed:73:6e:61:88:a4:7a:39:81:29:55:c9:0b:c1:
0b:e4:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org