Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Xo2xIR0FFmCiyepejVubk0w7mvQ.cer
File: Xo2xIR0FFmCiyepejVubk0w7mvQ.cer (raw, json)
Hash identifier: ULe8LUJlICkd39TwsWzEKZqFnFLc5kSUXtGf3ByeA4o=
Subject key identifier: 5E:8D:B1:21:1D:05:16:60:A2:C9:EA:5E:8D:5B:9B:93:4C:3B:9A:F4
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 1CDB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:03:38 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 139.159.0.0 -- 139.159.95.255
IP: 139.159.116.0 -- 139.159.127.255
IP: 140.210.64.0/18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7387 (0x1cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: May 27 05:03:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=5E8DB1211D051660A2C9EA5E8D5B9B934C3B9AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:5c:31:b0:97:64:52:b2:bb:bf:f4:87:cd:
34:9c:e2:a4:4c:f1:ad:6f:9d:da:48:63:87:e2:d2:
6a:e5:ef:a1:8e:93:39:0e:d6:83:a8:37:56:3d:bd:
fb:a0:a1:76:f1:e4:9a:59:65:18:17:47:f0:f2:ee:
25:cf:9e:d1:ef:1e:b1:c3:98:e1:7b:3c:2f:c6:26:
74:c2:e0:9b:fa:04:56:d2:64:37:e3:35:12:fe:34:
7e:e5:b4:dd:cb:c3:f1:01:94:54:c7:ae:61:ac:6a:
cd:66:bf:20:22:72:f1:e6:68:56:a2:58:81:d9:a0:
55:de:82:81:88:e2:c2:7f:dd:16:00:fd:8e:36:3c:
8c:b7:7e:b5:5b:ef:68:8f:a5:f9:d7:e4:8b:76:fc:
2c:f2:a5:86:8a:0f:de:b9:14:3a:77:bd:21:5a:57:
76:b4:ce:a0:91:0e:02:96:bf:d2:19:5f:77:b7:29:
53:bb:af:b2:99:dd:f6:fb:73:29:52:f0:58:46:da:
de:ad:e4:9b:2c:82:31:c4:53:3a:6b:b8:0e:ea:72:
2f:7b:ff:b9:83:07:45:99:34:99:5f:d9:50:6c:c8:
d8:71:51:92:1a:44:90:6f:b4:ce:da:52:eb:a0:ab:
0b:5f:56:d8:59:50:60:4b:36:72:54:53:fc:d2:f4:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:B1:21:1D:05:16:60:A2:C9:EA:5E:8D:5B:9B:93:4C:3B:9A:F4
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Xo2xIR0FFmCiyepejVubk0w7mvQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.0.0-139.159.95.255
139.159.116.0-139.159.127.255
140.210.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:a3:24:b3:65:29:eb:7e:1e:e0:39:24:f0:51:05:ed:68:47:
cf:f1:88:e5:88:4e:14:46:8f:9a:b5:25:af:2b:d4:d5:f0:86:
be:8b:31:a7:98:24:33:00:90:40:aa:68:d2:02:c8:3b:82:42:
0d:be:9c:ea:41:01:a6:01:4a:14:d2:94:df:69:a8:e5:cc:35:
45:f5:3c:bc:aa:c8:68:ea:cb:49:8d:fc:13:0f:6c:6b:2d:5b:
59:51:22:92:6c:85:72:f2:5e:c3:02:d3:14:17:69:61:cd:76:
ba:b9:87:5a:2c:61:b8:93:d3:26:b0:57:ae:6a:d3:20:db:62:
bd:d8:32:12:a2:29:15:a0:36:fe:3e:9b:19:59:e7:3d:0f:df:
bc:70:de:c2:d9:0c:1d:df:69:c3:b5:cd:e3:3d:ba:94:f2:98:
c5:27:65:45:39:9e:3b:24:34:6f:cc:4d:26:56:62:c0:09:61:
29:62:7b:21:3d:81:e5:b6:89:01:e4:f5:1f:d1:18:b1:84:f4:
7b:46:0e:a5:08:5f:ff:f2:ee:93:28:dc:53:a0:49:5d:34:35:
ba:9a:c4:90:29:a1:e4:06:d0:e1:c1:e4:7a:79:35:14:49:5d:
cb:9a:06:a1:86:fa:1a:02:38:aa:b8:52:48:dc:70:d8:60:ca:
ed:bd:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org