Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bAMbWJ7Pi06njK0ea4CEHPp6qp0.cer
File: bAMbWJ7Pi06njK0ea4CEHPp6qp0.cer (raw, json)
Hash identifier: Cn4w/0I+jH2fW94ssP84eOZ7S87+dFyyFbvUB/izibU=
Subject key identifier: 6C:03:1B:58:9E:CF:8B:4E:A7:8C:AD:1E:6B:80:84:1C:FA:7A:AA:9D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/bAMbWJ7Pi06njK0ea4CEHPp6qp0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 10 Sep 2021 13:35:59 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 43.242.156.0/22
IP: 103.38.40.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31446 (0x7ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 10 13:35:59 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6C031B589ECF8B4EA78CAD1E6B80841CFA7AAA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:ea:ae:3d:b2:f0:6d:4e:ee:0c:b6:57:57:
ce:3e:1d:5b:6b:db:4f:df:9a:13:6b:9f:87:2d:78:
34:f8:73:86:dc:6a:d4:67:cb:bb:e4:bf:f9:5f:58:
36:a8:f1:11:07:cc:e3:e8:4a:57:50:a9:27:2c:6d:
84:3a:f4:c3:60:e9:ec:9e:9d:c8:33:d3:7c:c3:9b:
f2:bf:75:db:1b:ae:ee:70:81:df:19:f9:98:95:44:
d6:4b:10:44:3e:8f:1f:99:3f:ad:39:f8:d5:b1:90:
ac:46:2b:45:bc:aa:bd:54:dc:22:e5:0b:72:1c:32:
e6:ad:60:00:96:64:e0:e2:6a:65:41:05:84:d8:28:
71:88:21:7e:f8:2e:9a:7d:dc:66:53:43:de:ea:9b:
6d:c2:ab:50:88:e2:71:45:55:ee:19:4c:24:df:5f:
e0:82:65:14:8d:cc:c7:82:94:97:2c:13:f2:ad:9e:
85:52:6d:46:2f:0e:43:c3:55:87:65:65:3a:62:01:
0c:17:32:6f:5e:12:93:bf:9a:64:22:31:7a:51:6b:
9b:66:fd:83:73:9e:a8:3e:f5:69:19:2a:b3:de:6f:
67:c0:fc:fa:c1:10:01:20:bc:cb:49:33:da:b6:a1:
92:dd:02:7e:5a:3c:eb:b7:67:46:41:ef:dd:4d:f9:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:1B:58:9E:CF:8B:4E:A7:8C:AD:1E:6B:80:84:1C:FA:7A:AA:9D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/925/bAMbWJ7Pi06njK0ea4CEHPp6qp0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.242.156.0/22
103.38.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:30:28:b4:d5:56:0a:2e:4d:8e:01:70:67:c3:9b:85:ae:1f:
32:7e:11:c6:96:f9:d8:95:f2:a0:9e:ba:45:47:04:a7:8f:b4:
07:bc:55:fe:7d:25:bf:ac:0a:05:77:b0:3c:52:09:bd:71:cf:
03:5a:8e:1f:60:41:0c:24:81:b1:87:d3:db:80:ad:f2:c5:d3:
39:18:8f:7c:fe:78:55:c2:4a:2a:ee:8c:13:82:72:2c:3b:08:
0c:0c:67:85:f1:9b:7f:01:13:81:a1:6e:56:8e:01:b1:2c:25:
22:7b:44:24:d7:dc:e9:78:dc:c6:e0:e2:f7:f4:45:f6:2c:ab:
a8:5c:a0:f2:74:be:f7:86:ef:a0:49:ed:a3:50:34:d1:71:51:
d0:e2:2c:27:57:52:c3:ba:9a:a2:a5:ee:d5:7d:3d:be:eb:88:
8a:2f:9e:d3:0f:bb:2f:d6:cb:01:01:55:2a:76:2b:78:6a:e8:
19:70:77:7d:78:b9:02:9c:32:11:01:b1:c1:c4:e1:06:67:0c:
5a:ad:3b:d4:41:7a:1f:3a:63:9c:fc:3a:d1:ac:1c:40:0e:d8:
ad:2e:b0:a0:36:4d:2c:48:d5:f9:65:44:91:ef:f8:01:ce:23:
8f:67:7a:fd:87:8c:22:7e:75:a0:70:29:70:64:96:d0:63:0d:
d4:74:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org