Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iH4gwsDcTRNYlPF9jHnJDnXhC54.cer
File: iH4gwsDcTRNYlPF9jHnJDnXhC54.cer (raw, json)
Hash identifier: c+TZPwgehDZkjD0LTZUV0/sawC+ZRnZw/SM8SrCrZGw=
Subject key identifier: 88:7E:20:C2:C0:DC:4D:13:58:94:F1:7D:8C:79:C9:0E:75:E1:0B:9E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/iH4gwsDcTRNYlPF9jHnJDnXhC54.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:27 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 113.202.0.0/16
IP: 210.76.128.0/19
IP: 2405:6200::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30640 (0x77b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:27 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=887E20C2C0DC4D135894F17D8C79C90E75E10B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:2f:66:a5:a7:89:00:7d:0a:3a:64:54:7a:
9d:69:b6:60:c8:ca:25:4e:0f:3a:de:60:05:39:24:
35:66:91:7d:d5:f8:ae:c7:e9:5f:f7:c3:10:09:00:
2f:55:67:50:48:26:84:2d:83:d7:92:1b:fc:88:88:
bf:7d:af:49:1e:11:05:02:91:b3:d6:21:58:d6:e4:
14:35:8e:93:9b:96:ca:a8:a8:a2:50:04:f5:81:af:
72:1b:ce:8d:53:fc:d7:10:b8:45:a8:05:7b:f4:36:
3f:39:dd:52:38:b9:7d:09:dc:c0:b1:34:37:94:e3:
8a:1b:4f:b4:9d:d7:92:b8:f0:37:e6:4c:2a:09:18:
b6:b7:ef:d8:8f:28:a8:c9:3a:0e:a0:88:fc:b1:c2:
a7:58:2f:5a:66:09:78:61:a6:ad:bb:23:2f:22:05:
bc:e0:72:87:be:1f:da:ce:ab:c1:f8:a5:21:bc:aa:
17:80:98:cb:40:32:05:78:bf:5e:b3:90:45:51:be:
71:6f:42:31:07:14:97:02:ff:c3:0e:55:49:97:bc:
e3:87:cb:35:5b:d2:89:2a:fc:49:c7:b7:46:58:23:
2c:46:b7:a8:1e:b2:f0:20:ee:9d:4f:27:61:37:07:
e8:2d:fe:b7:b5:11:da:3d:07:52:4a:a8:3e:33:76:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:20:C2:C0:DC:4D:13:58:94:F1:7D:8C:79:C9:0E:75:E1:0B:9E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2754/iH4gwsDcTRNYlPF9jHnJDnXhC54.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.202.0.0/16
210.76.128.0/19
IPv6:
2405:6200::/32
Signature Algorithm: sha256WithRSAEncryption
52:9a:4e:a1:f9:08:a2:dc:19:ca:fc:2c:b6:8f:bb:f7:96:4f:
18:19:f3:3d:f1:e9:92:d3:db:23:ae:50:6a:f3:44:ad:1a:3e:
b0:50:b6:10:d5:14:5a:f9:f7:74:d2:89:7f:86:cf:eb:1f:b8:
1d:76:94:1b:64:e6:1d:dc:7f:b7:a8:53:dc:24:69:7c:8c:ab:
22:77:04:2f:b8:fc:d6:e3:5a:72:7e:58:25:b3:54:05:13:03:
01:3d:a3:9c:f3:c6:5d:f8:b2:0d:6b:13:27:e6:c1:d4:75:87:
4f:09:3b:38:5b:74:47:89:a8:4e:6b:d4:ab:7b:5d:2a:ca:37:
d7:0f:7c:b7:d2:f8:90:00:19:dd:c4:f8:2d:79:03:2c:78:4a:
25:ff:cc:f8:c3:97:48:7f:39:2b:d3:fd:80:ee:2e:34:02:ee:
d3:79:a6:87:e8:5f:f6:08:7a:26:a0:58:5c:37:06:95:01:d4:
64:19:fd:30:c9:7e:64:b7:93:a9:f5:e8:b4:d6:4e:59:42:97:
79:1b:58:69:04:24:a4:4a:ea:2b:f4:4c:b7:56:b3:43:97:fe:
fc:af:b5:23:5c:2d:7e:23:45:b0:61:1a:a6:5f:be:a0:1b:e3:
ef:39:a8:f1:31:6b:58:fe:84:c8:18:7d:6f:2c:91:74:7e:af:
6a:84:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org