Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/aV56pai0RvXUghcHfGeCDPd4Z_A.cer
File: aV56pai0RvXUghcHfGeCDPd4Z_A.cer (raw, json)
Hash identifier: UuDDa/ofYoythrKVbGqfCWXtiV0Ry6SDgmJIcKSufSE=
Subject key identifier: 69:5E:7A:A5:A8:B4:46:F5:D4:82:17:07:7C:67:82:0C:F7:78:67:F0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/aV56pai0RvXUghcHfGeCDPd4Z_A.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 28 Aug 2022 04:22:06 +0000
Certificate not after: Mon 28 Aug 2023 04:15:34 +0000
Subordinate resources: IP: 103.211.224.0/22
IP: 146.196.72.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36122 (0x8d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 28 04:22:06 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=695E7AA5A8B446F5D48217077C67820CF77867F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:2e:e9:ba:d5:a3:8d:8f:ca:44:fa:85:91:
06:87:b4:10:71:02:fc:5d:90:3f:e9:09:13:87:49:
09:ce:fe:12:36:e2:f8:e7:1a:50:f1:1c:bd:97:33:
27:27:8a:ee:72:8f:7d:20:82:25:45:80:a5:07:e9:
0f:6d:c6:a9:71:82:1a:44:b3:3d:81:d0:48:3f:ca:
34:a6:34:ae:65:c3:c7:dc:95:87:c5:3d:51:c9:d2:
ad:d6:9c:85:1d:bf:f1:7c:56:a2:1d:ad:37:27:59:
d1:78:d9:7a:da:f1:e3:65:35:35:9c:8d:9d:58:09:
ca:0c:5b:ec:7a:98:c3:da:c0:96:9b:97:6c:77:8f:
70:2e:f5:30:9e:7f:68:ab:55:dc:7d:2e:46:1b:43:
60:f7:55:b9:ec:13:4f:d3:3c:ba:f6:75:a3:83:7c:
85:0e:70:37:bb:eb:d7:03:03:fe:3f:1a:de:7b:1f:
94:95:38:87:54:95:58:3c:e1:1c:9d:07:5f:6d:c1:
ff:66:f3:e1:06:a1:f4:40:ba:b8:ee:db:77:02:64:
44:5a:a0:ca:39:f0:04:25:91:4a:fd:fd:2b:5a:61:
90:3b:ed:0e:8d:7b:50:c7:a7:f6:28:c8:a9:db:95:
1b:7f:85:ed:06:1b:04:f1:98:3a:3d:3e:00:7a:3d:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:7A:A5:A8:B4:46:F5:D4:82:17:07:7C:67:82:0C:F7:78:67:F0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1662/aV56pai0RvXUghcHfGeCDPd4Z_A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.224.0/22
146.196.72.0/22
Signature Algorithm: sha256WithRSAEncryption
21:fd:49:d5:6f:a8:66:4d:f9:7d:d5:f8:ec:be:0d:cc:1e:2e:
0e:08:c7:6b:33:a9:9a:bd:db:6d:48:62:ee:a4:32:2f:73:b0:
22:e7:6c:f6:6c:3b:3f:ea:5f:23:0b:30:a1:af:86:9b:ff:de:
6c:df:55:4a:c0:a3:c2:ce:46:ee:d7:8e:12:94:3f:a8:76:78:
25:b1:d8:b3:fc:b2:d2:4a:8d:a9:64:94:2b:38:15:7b:30:d1:
38:d3:3d:04:bf:67:d3:0d:b3:3a:34:65:b0:c3:70:53:8c:c7:
4c:bf:da:8c:77:b7:75:8e:e2:7a:7b:ee:98:65:4a:95:b4:b8:
ba:78:b5:49:c6:19:8e:8f:0c:28:bf:8d:fe:d3:7b:23:ed:de:
6a:eb:5b:e4:0a:f7:39:07:e8:31:17:1d:c9:3e:56:cf:b3:53:
61:1a:92:80:48:23:6b:ca:fd:64:04:cb:30:2f:3c:20:16:53:
a5:6e:e3:9c:56:fd:5c:86:e2:36:cf:5e:82:02:7d:db:0d:18:
1f:68:c7:fa:c0:41:f0:c2:bf:e7:ae:57:41:17:1d:73:c7:6c:
9a:98:9b:aa:ea:ed:06:98:8b:06:30:7c:d6:d1:b0:06:8d:cb:
0a:5c:bc:d9:75:62:bf:6e:75:dd:e9:1d:4f:39:4f:cb:d6:62:
96:ae:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org