Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer
File: mXwN1JSBnpwfO_06qYAx_vjrfaM.cer (raw, json)
Hash identifier: KZtf9EoXaXYSzyETalBC26FqlTN4PSMq2X32IoqINIk=
Subject key identifier: 99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 9433
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 17 Feb 2023 03:15:43 +0000
Certificate not after: Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources: IP: 103.208.40.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37939 (0x9433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 17 03:15:43 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:f6:32:81:1c:ea:12:ab:de:84:cb:ae:19:
bc:82:b7:b2:68:7e:75:28:89:7e:e2:07:47:6b:56:
75:1f:18:09:32:a5:a9:a8:e5:1b:10:8e:bf:ce:31:
f2:91:cb:2c:c1:4a:c7:d3:cc:6c:5b:59:a9:bb:63:
f5:f2:96:bc:66:7e:30:ba:46:7b:53:28:10:e6:26:
dd:52:d6:be:4d:45:fc:fa:d4:7e:2f:43:70:27:44:
c7:10:fa:c9:28:66:6c:6a:49:7d:35:47:ce:54:48:
7f:7b:67:c8:c6:b2:6d:7c:f7:ce:8b:46:7e:fb:f5:
40:98:52:33:bf:52:d1:0a:e1:a2:5c:9d:66:1b:a5:
f3:f2:f3:63:3c:c4:2a:63:9f:cf:91:13:8e:9c:a9:
4f:95:c5:a8:7d:f6:cf:15:d7:bb:33:b3:af:7c:05:
b4:f9:9e:9a:6d:51:bf:48:4f:07:d8:18:45:0c:ce:
76:0e:e3:f0:0f:b3:c0:4c:16:5d:d7:a1:53:0b:ea:
49:33:9a:de:ca:c3:a8:e8:81:6b:28:d4:b8:e9:c4:
44:63:aa:ac:a2:87:de:ab:33:e3:30:f7:54:91:ad:
07:c0:1d:f8:33:d4:8e:4b:be:a5:da:51:7f:b9:3f:
22:d8:7a:08:58:f8:9d:3a:e1:37:70:ee:be:f6:54:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:70:67:c5:43:2f:3e:31:93:a1:bf:1d:51:5f:59:8c:e6:c2:
75:d7:28:42:ca:81:68:53:02:f7:24:e6:7e:ec:8d:75:b7:8c:
0f:86:3f:b5:43:cf:8e:5d:b5:39:91:2a:17:40:a8:42:26:20:
96:d9:a1:e7:06:67:51:1c:ba:bb:f5:f1:45:bd:8e:45:9b:6c:
6d:8e:9e:37:32:56:18:ba:fc:03:c4:f8:63:3f:69:65:77:83:
e1:eb:9f:77:2e:fa:00:6b:f3:1a:06:ce:32:1d:fc:1b:f2:41:
34:1e:5c:e2:c7:22:a6:b7:28:a0:6e:b8:84:b5:04:21:ec:1a:
50:d7:0e:2b:90:80:58:03:b7:08:b1:dd:42:70:03:c8:cc:50:
62:8b:74:8c:f1:ad:b4:93:89:25:9f:01:3e:2b:04:64:71:62:
dd:43:29:04:8f:90:12:c1:fb:3a:ec:24:10:fe:95:97:e4:ba:
8b:38:2c:bf:c0:10:b6:77:c8:b5:23:31:86:73:d8:8a:55:0a:
c1:da:b7:0b:d1:36:3e:cd:03:d5:2b:5b:5f:6d:4e:6a:1b:56:
2b:7e:97:21:a8:65:02:57:10:05:b9:39:44:9f:d1:d6:64:c0:
26:6b:a4:be:03:bf:9e:0a:21:be:2a:8f:89:0a:c0:ff:84:16:
b4:5a:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org