Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/et0zyRuMqD8s1cTYCKJ_V5eNgoc.cer
File: et0zyRuMqD8s1cTYCKJ_V5eNgoc.cer (raw, json)
Hash identifier: NxjEgMkIkVfNuPZE9840PrjtBc9RLfw1RSav7IwBs20=
Subject key identifier: 7A:DD:33:C9:1B:8C:A8:3F:2C:D5:C4:D8:08:A2:7F:57:97:8D:82:87
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7B78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/et0zyRuMqD8s1cTYCKJ_V5eNgoc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 08 Oct 2021 00:00:46 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.249.244.0/22
IP: 163.53.60.0/22
IP: 218.245.48.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31608 (0x7b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 8 00:00:46 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7ADD33C91B8CA83F2CD5C4D808A27F57978D8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:a6:4c:c8:5e:9f:c8:5f:5f:67:e0:95:e7:
8d:fa:af:53:66:29:d1:3d:08:d4:54:5a:e7:9f:fe:
9d:2f:88:c0:6b:da:39:56:91:05:08:8f:7e:77:cb:
9e:0e:3c:3d:f8:15:95:c8:d6:30:47:78:38:96:a2:
1b:4c:fe:9a:f4:72:92:4e:69:a2:3c:88:f8:10:ac:
99:5c:2c:5a:5b:7f:f7:7c:7d:e5:fa:45:ff:10:e9:
6f:cb:82:9e:a9:f5:8f:1e:c3:32:4b:2a:fa:04:3e:
04:a5:ce:9c:7f:5c:bb:71:7b:ba:a2:2a:ea:25:bf:
b1:bd:12:d4:97:c8:7f:58:77:e7:bd:13:96:3a:f4:
50:40:37:12:0f:79:a3:15:91:e0:7f:4b:71:0d:20:
c8:e2:31:8d:ec:b7:eb:74:4d:0f:23:53:b1:6e:91:
5f:38:3e:bb:b6:cd:cf:fb:95:6f:6f:28:04:46:04:
b8:cf:db:41:53:90:f2:6f:32:44:b2:9d:76:cc:0f:
3a:58:d5:1c:fb:d4:c1:b2:e7:6d:1e:d2:9d:f5:b0:
ff:3f:6d:d1:93:50:ab:b9:0d:83:11:9d:82:c6:8e:
39:e2:70:09:9f:ea:78:53:d8:3c:2b:68:9b:ee:6d:
d8:33:7a:d4:51:62:51:89:00:88:fa:36:97:3d:70:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:33:C9:1B:8C:A8:3F:2C:D5:C4:D8:08:A2:7F:57:97:8D:82:87
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/616/et0zyRuMqD8s1cTYCKJ_V5eNgoc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.244.0/22
163.53.60.0/22
218.245.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:00:09:e0:9b:4c:f5:9c:5f:f8:0b:05:c7:68:c6:1e:16:a1:
9c:b9:b7:3f:45:56:9e:cd:d6:5e:7b:13:89:e5:c5:9a:0d:30:
ec:81:2b:1e:8e:b9:a0:04:b4:8c:c6:1b:46:22:18:1e:22:50:
d7:9d:f1:e9:74:56:5b:3e:d8:49:7c:99:aa:eb:73:b8:b8:bc:
90:18:b4:a6:f1:a8:24:68:c6:7c:e4:37:33:05:63:39:2a:2c:
b7:a2:8f:d6:c7:91:20:7a:33:7e:3a:a9:e5:aa:5f:4e:8c:da:
cb:de:67:84:12:d3:fd:cc:7c:96:48:d8:c1:43:bb:95:fc:48:
1a:f6:fc:44:d6:ad:e5:0e:97:bf:ca:df:61:8b:ff:75:0d:72:
e1:01:c1:bf:15:5e:5c:fe:ff:57:e2:de:61:72:e0:b6:7b:74:
7f:60:76:cc:36:79:6e:1c:d6:01:83:a1:70:19:3a:70:9b:21:
2c:61:3d:12:7a:21:3e:c4:81:8b:57:fa:ce:55:f3:17:1d:fe:
43:db:75:97:8a:43:d2:eb:7a:df:e2:67:96:d4:7f:52:59:82:
04:81:49:56:3e:a7:f4:39:0c:1b:3a:2f:40:2c:37:3b:0c:15:
dc:92:29:eb:64:8b:70:1d:3f:04:dd:17:86:10:db:a4:f5:31:
19:aa:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org