Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/X8Yn72E05KBOcygAO7Ky9qcZZXk.cer
File: X8Yn72E05KBOcygAO7Ky9qcZZXk.cer (raw, json)
Hash identifier: dFozeDHpms/SJedcLIOaq6ZVV7BtCRHUGBsB19nwDx8=
Subject key identifier: 5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 223C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 16 Feb 2022 08:54:00 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 52.130.0.0/15
IP: 139.217.0.0/16
IP: 139.219.0.0/16
IP: 143.64.0.0/16
IP: 159.27.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8764 (0x223c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Feb 16 08:54:00 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=5FC627EF6134E4A04E7328003BB2B2F6A7196579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:e1:0d:6c:53:dc:26:12:c0:50:38:15:f7:
34:20:27:12:a1:c9:80:66:ec:06:7f:95:a0:38:31:
ef:e9:04:6b:71:5d:cd:c2:6d:99:54:3f:2b:56:07:
5e:25:05:25:76:57:75:5e:f3:10:81:b5:1e:64:33:
4e:9d:03:6e:c6:a7:90:32:74:11:c9:5c:64:94:dc:
24:95:d4:bd:13:4e:b6:df:42:6f:11:a0:02:04:b0:
9f:19:36:0d:e9:f4:9d:54:8d:86:6b:98:f2:94:18:
f1:24:44:bf:1d:b7:3b:5f:18:4b:2c:0b:75:2b:f0:
2d:70:66:97:38:68:d3:9b:be:e2:4b:1d:fa:f6:bc:
99:6f:0c:44:ad:31:15:b3:dc:e9:76:cd:fe:2a:15:
09:a4:51:7e:4a:65:cd:9c:53:a9:1e:cb:6d:ab:8b:
a2:85:10:61:d6:10:b7:c2:2a:11:80:4b:cc:3c:a7:
ea:11:22:60:c6:cc:8e:a8:0a:d5:89:d0:91:6b:e5:
63:4d:06:fe:20:b7:81:78:1d:2f:a5:bb:43:27:6a:
07:98:ae:12:8b:ca:0e:31:16:d6:f0:6c:65:d7:12:
33:dd:4d:9f:a8:78:ee:38:b2:ea:65:32:e5:2a:ce:
1c:fb:35:1f:da:90:3f:7e:55:2b:ec:a1:95:2c:d5:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
52.130.0.0/15
139.217.0.0/16
139.219.0.0/16
143.64.0.0/16
159.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:fa:c4:e3:62:a2:f1:09:e7:de:97:67:a3:4f:a6:21:5e:83:
41:d6:5a:ca:07:32:7b:28:db:8a:25:34:a6:a6:e3:5a:fd:cc:
0c:bf:28:b3:f0:c3:46:41:dc:59:3b:7b:f0:68:94:87:22:7c:
38:87:4a:f2:79:3f:16:2a:9d:5a:b6:65:59:5d:86:63:c0:61:
83:91:ca:28:1e:0e:fc:cb:09:7f:06:e3:63:a5:b8:be:c3:9b:
a2:24:49:db:e0:15:ce:90:71:96:53:07:95:b0:b1:dd:fd:dd:
87:86:5c:31:63:a1:70:5b:0f:3b:07:8d:fa:36:7d:33:12:62:
2b:c5:63:31:26:80:9f:55:65:1b:15:85:98:94:9a:62:29:43:
b6:91:01:d4:b1:24:19:cf:33:0f:d2:f7:9e:a5:86:95:3c:c7:
99:a6:95:a5:bc:a7:6c:2c:bf:5c:2a:e4:2e:46:92:55:9d:fe:
93:9b:31:a4:64:80:38:0b:12:a2:30:da:1e:da:91:8e:d4:da:
70:73:95:1c:75:8e:1f:f0:50:e1:29:53:2f:ad:98:3e:01:b6:
8e:5d:f4:fd:ca:eb:15:b6:ed:43:f6:4a:75:e7:26:88:96:91:
16:55:54:05:5b:1a:fd:9e:d1:2f:62:d1:05:86:91:ed:68:50:
f4:46:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org