Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/j31sq3p288HI7R1PkjehvI-ojUk.cer
File: j31sq3p288HI7R1PkjehvI-ojUk.cer (raw, json)
Hash identifier: eTvCTBq3vicbsZl9cH/PQz2DgQsZUxH6PMVGkEZdpOM=
Subject key identifier: 8F:7D:6C:AB:7A:76:F3:C1:C8:ED:1D:4F:92:37:A1:BC:8F:A8:8D:49
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 8012
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/j31sq3p288HI7R1PkjehvI-ojUk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 19 Apr 2022 06:51:01 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.139.0.0/23
IP: 218.247.64.0/19
IP: 219.234.16.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32786 (0x8012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 19 06:51:01 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8F7D6CAB7A76F3C1C8ED1D4F9237A1BC8FA88D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:6f:16:aa:96:b8:35:dd:dd:c2:9b:2b:07:
d9:1f:38:f5:df:18:3a:e8:b8:67:69:77:6c:65:79:
d5:80:80:15:d8:01:18:b7:bc:65:95:59:13:bf:dd:
48:f3:1d:49:2d:d6:10:97:4b:61:94:16:96:aa:8f:
eb:ab:7b:e4:27:56:16:cc:a6:42:83:10:5c:bc:98:
ee:95:bf:fb:db:6c:0d:a2:69:8a:1a:e0:95:fe:8d:
05:77:be:e1:e5:90:07:6c:13:bf:2a:55:ea:68:3f:
bc:9b:02:30:02:91:df:a5:9e:b5:37:60:46:be:6c:
5c:df:84:ed:c2:0c:5a:34:02:c0:86:81:38:bd:42:
65:fb:6d:e9:53:07:b5:e3:a5:5f:f3:7c:62:9d:65:
c5:4e:28:77:0e:c8:6f:fe:8d:11:09:fb:7c:17:71:
20:76:9e:ba:a4:3c:57:82:1a:3d:d9:33:ad:07:8a:
3a:b2:a6:9e:a8:b9:53:5b:e7:2d:4a:73:c8:c3:ff:
62:29:9e:1b:40:e3:40:f1:93:7b:c3:60:8f:19:9c:
9d:ff:1c:96:46:e4:0d:d1:3f:a8:12:08:00:8b:37:
b1:9d:23:56:f8:5c:0f:25:fa:32:c1:27:f4:7f:79:
82:13:92:67:18:f2:c0:10:f1:8f:44:a0:3f:d2:7a:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:6C:AB:7A:76:F3:C1:C8:ED:1D:4F:92:37:A1:BC:8F:A8:8D:49
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/j31sq3p288HI7R1PkjehvI-ojUk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.0.0/23
218.247.64.0/19
219.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
82:dc:e3:5c:ef:37:29:9a:32:43:1b:d7:af:fc:af:d0:36:3d:
07:8b:e7:22:41:67:23:7b:e8:23:50:18:2e:ab:40:02:3c:94:
eb:73:ff:e7:a3:44:b0:1b:0a:ec:5f:f9:09:01:78:4d:43:2e:
87:fe:be:ea:50:91:27:7f:cf:10:01:9a:d8:4b:10:36:ae:68:
63:76:58:cf:4f:2b:7e:2b:8c:ca:dc:b3:22:90:8b:ee:48:2e:
7b:fa:14:67:b1:ee:42:3b:30:f5:88:9e:2b:25:86:c6:76:56:
27:a3:ef:80:1e:9f:1c:0f:1e:a1:20:e2:3f:46:79:e4:26:c7:
62:d2:e1:3e:ff:b0:bf:5b:f1:35:ad:d3:53:2f:72:3a:b7:1b:
84:a5:a9:df:a6:ea:26:eb:e3:89:dc:24:e2:33:85:a0:83:d8:
84:9c:cb:40:33:3f:0f:a4:d6:de:fd:4f:d8:06:9e:a2:6c:5d:
19:68:c0:09:3d:9a:63:c2:27:5f:90:1f:f7:fe:82:ab:58:ac:
a2:7b:3b:bc:48:7c:b8:ba:d1:46:d5:89:ad:5f:3c:bd:4f:e9:
96:8d:c6:7a:a5:cc:57:0a:9e:7e:ca:da:50:e4:0a:6d:2a:65:
2c:89:c0:67:b0:25:a4:39:a8:3c:a3:41:e2:c3:bc:ba:e7:25:
9a:a5:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org