Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/U8Llcrj5SP4FaAc093QX5BDHFqg.cer
File: U8Llcrj5SP4FaAc093QX5BDHFqg.cer (raw, json)
Hash identifier: OSCzRSxZybx0PhptsfWs0JbkXEUSdNf+tTwesWE5qtI=
Subject key identifier: 53:C2:E5:72:B8:F9:48:FE:05:68:07:34:F7:74:17:E4:10:C7:16:A8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 81BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 31 May 2022 11:30:50 +0000
Certificate not after: Wed 31 May 2023 10:59:38 +0000
Subordinate resources: IP: 110.173.96.0/19
IP: 202.173.224.0/19
IP: 211.148.128.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33210 (0x81ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 31 11:30:50 2022 GMT
Not After : May 31 10:59:38 2023 GMT
Subject: CN=53C2E572B8F948FE05680734F77417E410C716A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:96:bd:63:a4:02:e8:c0:a0:34:a5:e9:4b:
cd:0d:63:64:7f:28:60:c9:d2:df:eb:ca:e6:07:60:
6e:95:36:20:1d:d8:a5:53:98:0b:b6:50:f9:87:31:
7f:e1:f5:33:af:e5:07:63:06:9d:b2:d7:93:b8:b1:
95:04:1d:e9:1b:dd:93:b2:77:c9:a1:67:1b:9e:27:
60:ff:d6:00:5c:e6:60:c2:92:dd:de:ea:a4:10:2e:
2f:17:5c:62:e6:88:22:3b:8b:b2:5d:38:5f:18:22:
07:b6:bf:ee:19:10:47:4a:dc:bd:4b:a1:e4:7d:f3:
3a:b9:c7:4c:9a:65:a7:94:2f:0a:32:77:d4:e7:e7:
ab:79:ab:21:49:cb:4a:b6:f3:48:bc:b3:0d:c4:b3:
ff:9a:56:08:6a:0c:69:b6:51:1d:c5:11:da:c5:84:
d1:dc:f2:2e:69:c4:ee:3e:d5:f6:81:45:89:3d:71:
d6:9c:05:c3:74:7b:ad:7a:33:99:d4:77:c4:8a:c6:
3f:cb:a4:65:c6:d9:94:e9:e3:47:c7:43:42:ae:9e:
ee:15:26:1f:a7:5d:42:07:5f:3c:03:65:5e:c1:aa:
93:fc:93:db:d1:73:9c:08:fd:34:d0:66:cc:97:b8:
85:68:10:79:ec:22:c9:01:59:ca:13:96:d9:3e:1e:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:E5:72:B8:F9:48:FE:05:68:07:34:F7:74:17:E4:10:C7:16:A8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/U8Llcrj5SP4FaAc093QX5BDHFqg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
202.173.224.0/19
211.148.128.0/19
Signature Algorithm: sha256WithRSAEncryption
23:e5:c7:31:10:62:ca:ed:b4:bc:a6:c7:dc:e2:06:2f:1a:c7:
40:59:69:52:ce:aa:6d:d0:e2:fe:65:9c:b8:6a:12:47:dd:3c:
5c:01:e8:2b:61:65:79:ed:d9:c4:f8:51:4f:89:f6:93:5d:dc:
73:36:8b:35:1c:10:85:fe:b9:d7:a8:73:78:18:ac:95:65:b2:
24:d2:02:4f:78:58:78:e7:dc:2d:e0:32:13:c1:30:1b:21:0c:
ca:1d:2f:8c:ad:ab:75:e9:9b:f2:b3:b2:3b:69:4e:e0:39:dc:
18:26:57:ae:23:03:cc:55:50:f8:a4:94:e3:26:91:7d:1b:16:
26:2f:a2:ab:21:59:08:0d:14:6e:58:14:47:18:57:4f:d1:cf:
6b:ba:d6:9e:8e:63:0d:6f:84:93:19:86:6b:b4:6e:fc:ab:ef:
58:40:72:0c:27:ae:21:fd:96:f5:31:26:00:dd:91:ac:cd:ad:
6c:4b:98:4d:fe:9c:70:d2:6a:dc:8d:20:95:6d:9d:21:dc:11:
7f:05:ae:3d:cc:10:58:60:35:65:ff:c8:1b:57:f0:89:ed:9b:
75:a1:ce:df:76:ed:94:d0:40:1e:6c:32:be:d5:a3:d0:23:c9:
13:49:8b:32:0b:15:5f:82:07:68:96:b0:ba:b5:9b:eb:8e:f6:
d3:b3:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org