Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SH6jQ2Tx444aRSIN_O1EpkpG8t4.cer
File: SH6jQ2Tx444aRSIN_O1EpkpG8t4.cer (raw, json)
Hash identifier: SguT3qwkXQWIqptpARvuZRnruls1GIMqRNdNO2lEDe8=
Subject key identifier: 48:7E:A3:43:64:F1:E3:8E:1A:45:22:0D:FC:ED:44:A6:4A:46:F2:DE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7869
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/SH6jQ2Tx444aRSIN_O1EpkpG8t4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 05 Jun 2021 19:58:58 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 210.73.128.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30825 (0x7869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 5 19:58:58 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=487EA34364F1E38E1A45220DFCED44A64A46F2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:c6:e5:68:b8:bd:7c:d1:54:e8:86:92:c3:
6d:06:da:af:84:4c:f6:42:f8:75:2c:77:64:cb:3c:
8f:f2:2f:eb:73:6d:90:d2:1a:30:8a:18:ab:b1:ca:
bd:56:cd:a7:f6:53:ee:3c:0b:c3:49:b0:22:19:9f:
19:75:da:0e:8f:c0:94:84:2d:eb:21:33:6b:d5:db:
79:31:dc:30:15:8a:f1:31:90:c1:70:6d:95:f7:52:
d7:77:8c:3a:da:c0:27:d2:08:25:e2:3c:f6:26:a9:
08:f6:43:4b:51:2e:39:a1:6d:7b:42:1e:c0:13:b5:
2a:69:0b:86:5d:5e:72:a3:97:d3:29:c0:47:7e:72:
03:20:81:0c:6a:4d:04:db:f4:25:2c:de:e9:9b:b4:
a8:5d:63:b8:15:e1:15:e7:6c:12:6e:92:20:84:21:
26:21:b3:1e:a5:99:63:54:5f:eb:d8:cb:95:10:73:
93:12:8f:36:9e:a6:39:0b:8b:f9:36:a5:a4:f9:2d:
50:bc:a9:bc:06:3f:33:98:28:a3:4f:11:0d:b3:5c:
91:51:d6:52:ea:b9:cc:e7:a3:6c:f4:d5:bd:9e:b0:
1d:37:d2:70:7c:6f:15:a1:9b:33:17:57:a3:de:19:
f4:e8:a1:cb:d7:3a:08:d2:d1:83:12:d7:0a:42:41:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7E:A3:43:64:F1:E3:8E:1A:45:22:0D:FC:ED:44:A6:4A:46:F2:DE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/23/SH6jQ2Tx444aRSIN_O1EpkpG8t4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.73.128.0/19
Signature Algorithm: sha256WithRSAEncryption
77:3c:aa:e5:0b:38:6f:5f:b5:a5:70:20:b3:f8:cc:ed:a5:07:
36:fa:67:f6:b4:e9:fe:7f:0a:be:33:cf:48:20:b4:81:29:11:
c1:64:5d:93:40:ec:11:d8:33:ca:39:18:d6:88:f4:ca:bc:6e:
27:8f:6c:0b:9c:36:9f:38:17:0a:b3:40:af:9d:3f:9c:c3:7c:
59:b9:cd:43:13:1a:82:f6:6c:58:b2:07:a8:e3:32:a0:20:17:
87:93:cc:e1:c7:5c:8f:d5:92:a9:8b:a4:3d:e3:e1:b9:35:a5:
f8:fa:9a:d0:41:f9:65:03:51:80:68:bb:d6:de:bf:aa:84:a6:
02:da:6a:74:c2:24:84:9d:8f:ce:58:c3:24:0f:b6:53:07:b7:
fe:24:f7:9b:64:7c:aa:f4:a1:bc:4f:8b:55:43:19:02:22:c3:
89:db:be:b4:6e:37:5a:45:b7:89:af:84:8d:e1:61:a2:85:75:
62:90:a9:80:6d:fe:ec:f0:ca:36:6b:1b:39:12:b2:ae:14:d5:
c8:bb:47:be:14:ec:1c:3d:52:b4:65:2e:eb:26:08:11:18:5c:
17:5a:c7:4e:48:9f:6e:89:37:e9:c0:d8:d8:4f:b3:34:06:f1:
57:7f:47:3f:4d:5c:e3:f0:22:86:4e:2f:42:50:57:cd:c2:93:
03:b4:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org