Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
File: mBs4AJqgO-uRJxuZnddRvshSD-M.cer (raw, json)
Hash identifier: d2Ewsmc9gy+uz1WGbFoM5bYTq4yGoKop96slE6uB8pI=
Subject key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7E91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 16 Feb 2022 08:47:33 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 59.83.128.0/20
IP: 59.83.176.0/20
IP: 59.83.236.0 -- 59.83.255.255
IP: 103.83.180.0/22
IP: 103.235.128.0/22
IP: 114.66.128.0 -- 114.66.235.255
IP: 218.98.64.0/19
IP: 2400:95c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32401 (0x7e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 16 08:47:33 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:0d:07:04:98:3d:09:74:b4:40:d3:36:e7:
3e:1b:0a:55:ac:f8:03:a2:ac:4e:53:3f:2b:32:81:
05:3b:88:70:69:02:0e:e7:32:d6:3d:ee:6c:59:66:
80:e3:cf:81:ac:d5:f1:11:64:9b:8f:02:d9:c1:56:
fb:ce:ab:04:48:9b:66:6e:8d:37:80:4c:4f:32:79:
18:1c:fd:11:87:62:50:f7:a0:41:d9:00:88:bf:63:
1a:ef:25:fe:31:3e:0c:5a:d6:3b:7b:b7:cf:81:d8:
88:22:94:cd:1d:77:7f:5f:21:23:8a:53:2c:0f:56:
3a:88:9c:e8:d9:6c:a8:fe:24:d1:0a:46:9b:33:3b:
5b:b5:e2:98:7e:fb:c5:9f:8f:02:8a:2d:2f:70:60:
b6:8a:a6:3b:6c:e8:5b:c2:48:bd:84:99:db:5a:c8:
fa:7a:e9:57:c0:b7:1d:73:7f:fb:b1:78:1e:11:14:
d8:8f:ed:63:6f:28:d6:75:86:65:e6:df:f6:ff:cb:
6b:3b:d6:0e:bb:0b:92:87:42:a6:2c:72:be:b5:e5:
d6:54:ee:23:23:1f:c3:6a:fd:89:6b:3b:13:f5:0a:
43:6b:96:69:7c:9a:40:11:19:e2:9a:18:51:02:06:
2b:58:eb:45:7a:c9:f2:36:45:2a:bc:62:6c:b5:0a:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.128.0/20
59.83.176.0/20
59.83.236.0-59.83.255.255
103.83.180.0/22
103.235.128.0/22
114.66.128.0-114.66.235.255
218.98.64.0/19
IPv6:
2400:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:da:24:80:e6:81:7b:e6:02:5b:04:0d:e0:de:6c:91:1e:45:
0a:d7:cd:a5:67:48:2c:72:66:ab:b0:d4:db:dc:a0:5f:8d:46:
72:b1:7f:e4:a6:57:78:e5:43:8c:84:cf:f0:8e:bd:be:43:30:
da:2c:44:3b:c5:37:0b:1c:1a:ae:c4:ef:7f:8a:f7:f8:78:ba:
bc:c7:cc:2d:db:6f:2a:70:0e:12:b5:54:3c:76:fd:94:23:21:
d6:a4:4d:9c:a9:e3:f6:2a:e6:6a:40:69:9f:4e:ea:8e:17:cc:
07:b9:f8:4f:59:43:c7:99:05:6e:2f:64:ec:0d:47:14:9f:85:
d5:75:0e:47:68:ab:1b:c5:3f:fe:b6:a0:c6:99:1c:79:e4:69:
ed:6f:47:2b:bf:89:60:cd:ed:6c:51:92:a0:6d:62:fc:65:fa:
09:28:8e:6b:43:76:83:32:87:f2:ac:b7:d2:b2:55:62:1c:c9:
54:3a:74:c2:a0:57:45:ee:77:56:c4:83:d8:a7:fe:32:e3:3b:
19:51:17:a3:ef:5e:02:18:f4:bc:60:43:f9:68:bc:2d:00:d0:
02:62:1d:95:e8:8a:60:d2:8c:60:9b:dc:84:f8:cf:79:df:57:
a7:ed:19:30:cf:83:20:87:93:77:35:2f:df:70:c9:e2:ea:52:
8d:44:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org