Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_kCLChfM0YvSz40HuUVC3dTs1J0.cer
File: _kCLChfM0YvSz40HuUVC3dTs1J0.cer (raw, json)
Hash identifier: JP33UEH28zeR46m1N+bfA4D5qvfGGq7P0dlj8M7MGTc=
Subject key identifier: FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 9755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 28 Mar 2023 01:16:41 +0000
Certificate not after: Wed 27 Mar 2024 01:13:10 +0000
Subordinate resources: IP: 103.91.252.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38741 (0x9755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Mar 28 01:16:41 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=FE408B0A17CCD18BD2CF8D07B94542DDD4ECD49D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:8e:2d:d3:65:1a:33:fd:17:bb:3e:04:c2:
df:90:26:6c:be:cc:3c:50:75:77:3c:a6:03:5a:e1:
c9:4d:94:76:22:7a:52:d3:ef:0e:dc:92:e4:52:e5:
8f:1f:03:85:68:c0:01:3e:c1:b2:06:bb:21:97:21:
33:3b:f7:63:c1:89:ef:e6:2d:3d:3d:1d:3d:16:a8:
e3:6d:87:0b:e0:ed:4f:ee:d9:bb:c8:b6:ee:98:ad:
e6:07:cf:46:ee:4f:67:68:b3:c5:3c:52:5f:ea:9e:
0e:c4:4b:9f:ce:23:74:cd:f7:fd:43:d0:05:34:4c:
94:b5:e3:80:b5:29:40:b7:ac:9a:a4:64:ff:99:94:
5a:7b:64:43:db:42:93:2d:ad:7c:71:56:ff:15:ed:
72:45:4c:09:33:aa:4c:d0:8a:13:33:e8:49:54:60:
7d:ef:fc:fa:cf:18:21:1a:10:a8:89:72:5e:65:0b:
44:13:b4:46:f0:d6:f4:ad:08:89:73:dd:e2:39:b8:
80:ae:96:00:e1:15:f7:26:62:5d:68:be:84:2a:e6:
51:eb:49:9d:59:a8:c8:58:4f:58:ec:1c:0e:86:e6:
ff:fe:a2:7b:00:7e:ed:14:a6:80:44:7a:8c:a8:4b:
51:80:56:fe:6c:c9:9b:b5:70:dd:4d:a4:65:75:22:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:40:8B:0A:17:CC:D1:8B:D2:CF:8D:07:B9:45:42:DD:D4:EC:D4:9D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2417/_kCLChfM0YvSz40HuUVC3dTs1J0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.252.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5c:16:c5:d7:61:ad:c4:18:05:60:33:c9:f6:06:33:0d:93:
5c:8f:4a:02:d7:a6:21:aa:21:2f:da:9f:42:c8:23:e4:78:fc:
ce:f7:be:22:e8:4c:d1:14:c7:4a:57:a5:d1:2c:18:7a:64:7b:
58:b0:1b:ee:c2:be:23:4f:9b:fb:f3:6e:02:8a:46:6a:dd:57:
9d:5a:7e:37:51:4d:b4:32:6e:6e:cc:89:f1:67:d3:aa:80:02:
31:1a:36:86:28:e0:dc:65:b0:cf:27:90:50:51:ce:28:d5:d2:
a1:92:b5:d9:e9:15:4e:6a:58:9f:9c:10:c5:80:47:74:84:6b:
e1:e4:aa:22:41:4e:a8:a4:86:5c:4b:df:fe:ea:8a:23:75:c7:
4e:44:94:30:8c:3d:1d:f3:e7:58:71:4e:2a:46:26:69:92:c8:
c5:f3:1e:80:22:9a:db:68:2f:d5:0a:c6:84:45:7a:22:85:86:
d6:0b:52:95:a1:31:c9:f3:b5:0e:fc:9a:7b:41:79:b1:61:51:
91:6b:12:f0:a4:16:43:bc:fd:eb:b2:ef:d3:93:b4:ef:57:40:
57:ae:0d:73:23:5a:78:a6:13:76:ab:54:2f:5f:49:ad:90:28:
5f:ef:83:eb:5d:db:5e:22:1a:f2:87:7a:80:e2:aa:41:cc:84:
02:99:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org