Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
File: d3C3Obnvzri8H9oFYOR4VWHyvL8.cer (raw, json)
Hash identifier: hfQyd9xUObTuRTNDfAofZ/pCCiFPRmtdIfJ8OzrG+0g=
Subject key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B2D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 21 May 2024 03:31:37 +0000
Certificate not after: Wed 21 May 2025 03:30:10 +0000
Subordinate resources: IP: 113.31.0.0 -- 113.31.95.255
IP: 113.31.128.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45785 (0xb2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 21 03:31:37 2024 GMT
Not After : May 21 03:30:10 2025 GMT
Subject: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:b7:96:4d:e0:e4:ac:14:e8:69:38:44:fd:
74:f7:fc:5c:ff:a0:46:89:1e:c0:95:56:f4:3d:4c:
3f:67:d5:0c:8c:6b:60:ee:77:69:65:de:57:fe:02:
ef:79:6c:09:18:4d:62:25:6b:49:10:78:6c:a3:86:
b4:79:73:de:22:53:af:5f:61:df:ee:c9:42:08:01:
3f:7c:5f:57:7c:9f:06:22:55:76:62:67:d2:b6:42:
2e:94:a5:04:36:72:63:8b:86:c0:49:c2:b3:48:49:
48:f3:4c:f2:cc:f8:57:73:1a:c7:1a:5d:91:a1:4a:
2e:f4:29:4d:b5:47:eb:d6:d5:33:b3:29:a9:94:a7:
86:85:9a:fa:61:e1:7b:a6:bb:a7:3d:e7:d3:20:5a:
32:54:bb:a4:ec:76:5f:d0:c2:52:1e:30:f9:9d:de:
12:f6:dd:6d:be:c7:3e:00:e6:26:c3:66:16:24:36:
e9:7c:64:9c:4d:22:c9:f5:a8:0e:ea:aa:e6:f0:3f:
c8:41:ff:b3:a2:90:14:c4:dc:d8:b0:09:ba:8e:0a:
17:1c:b5:fe:8d:b6:8f:05:d3:17:ab:9e:b1:19:b7:
d8:96:28:c1:62:f7:ed:cf:a7:2b:25:fa:0c:67:7d:
11:7b:38:aa:a1:6b:bb:2e:02:43:a4:89:8b:fc:97:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0-113.31.95.255
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:19:18:e6:03:b4:dc:2d:c2:b0:14:dd:98:68:45:ed:57:dd:
c4:0a:5c:3e:36:7d:23:6c:e7:28:77:64:0e:7d:4e:0e:b7:77:
59:d7:4d:d6:15:86:d0:b4:5b:f9:c2:00:dd:f0:e8:52:fe:83:
76:d2:74:08:88:23:ed:f7:ec:59:b4:cd:83:bc:76:e0:01:95:
ef:16:88:be:c5:04:c6:da:3f:10:c4:de:91:79:39:82:f5:81:
87:16:da:59:68:15:13:db:2a:5b:d8:2e:40:56:9e:3b:ab:0b:
9a:a7:bc:c0:cf:85:43:35:ab:e1:b1:02:4c:4f:69:16:81:db:
95:41:40:e1:5c:68:96:a7:cc:f5:54:e4:01:b5:a7:17:78:9b:
4a:09:58:a9:07:97:8d:e4:5f:6a:11:23:37:b4:31:be:fc:38:
7d:96:b4:71:93:d4:e5:e5:54:02:3f:63:a2:19:36:b3:1d:6c:
bf:f7:f7:e4:ed:fc:d5:55:ed:1c:84:49:ca:e4:c9:61:d0:98:
c2:ba:8c:a6:17:87:2d:75:36:a1:f1:ab:11:ac:97:ac:05:be:
6d:90:f8:f1:af:c2:e9:92:c5:1e:79:62:c9:fd:85:8e:a6:08:
64:a7:82:ac:21:23:fc:68:82:59:ad:96:05:5c:4f:02:f1:7b:
e9:fd:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:10:30 2024 by rpki-client on console-fra.rpki-client.org