Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nZoUUfI4td01CLQ8JsGf0Li9Ugg.cer
File: nZoUUfI4td01CLQ8JsGf0Li9Ugg.cer (raw, json)
Hash identifier: 2syZe+09I0Hv0J+e3zFkAidkzFLRAlP+VfqZ6cij84Y=
Subject key identifier: 9D:9A:14:51:F2:38:B5:DD:35:08:B4:3C:26:C1:9F:D0:B8:BD:52:08
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7952
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/nZoUUfI4td01CLQ8JsGf0Li9Ugg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 05 Jul 2021 01:26:12 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.20.128.0/22
IP: 103.64.160.0 -- 103.64.207.255
IP: 103.64.224.0/20
IP: 103.213.48.0 -- 103.213.95.255
IP: 103.213.144.0 -- 103.213.191.255
IP: 103.223.144.0 -- 103.223.175.255
IP: 103.223.192.0/18
IP: 103.255.68.0/22
IP: 119.80.192.0 -- 119.80.203.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31058 (0x7952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 5 01:26:12 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9D9A1451F238B5DD3508B43C26C19FD0B8BD5208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:1d:5b:92:0c:e4:72:4f:2d:7d:81:e6:fe:
07:31:6b:69:dc:48:0e:40:5b:66:dc:78:f1:51:5c:
a1:24:9f:83:51:92:7e:6f:a1:98:a7:99:cb:7c:7d:
a4:40:94:d6:ba:90:21:b2:61:d2:cd:af:ee:62:c7:
db:a2:c6:12:5c:7c:7b:00:ea:fe:ff:a7:5f:c3:18:
08:84:0f:a1:fb:23:e6:66:b4:39:87:96:47:bb:92:
e7:eb:0e:70:72:ed:de:28:78:55:42:e2:0d:e9:7d:
72:20:f2:be:e6:a6:ce:f7:6e:d1:b9:af:d0:7b:84:
e2:dd:c3:4a:73:8b:24:0e:81:12:5c:ad:0d:0a:b4:
81:5c:67:30:da:8f:86:53:20:2d:f9:2d:1f:6e:89:
83:81:c4:e6:ab:16:15:96:8f:18:f1:aa:60:af:9f:
74:05:d0:7e:67:e1:e2:1d:6c:8f:ca:4d:e8:61:51:
68:8b:dd:32:b8:21:85:ff:b7:ec:87:5c:43:e9:3d:
ab:be:7b:bd:23:a5:39:06:20:08:30:b6:fd:e7:52:
cd:d4:96:2d:ae:23:46:3d:bb:06:74:4d:54:fb:8b:
9b:0f:c2:c6:c0:ee:9c:33:d3:6b:2f:93:8a:61:3c:
c6:63:3e:ca:f5:17:91:ee:46:5a:6a:77:a2:48:6f:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:14:51:F2:38:B5:DD:35:08:B4:3C:26:C1:9F:D0:B8:BD:52:08
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/510/nZoUUfI4td01CLQ8JsGf0Li9Ugg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.128.0/22
103.64.160.0-103.64.207.255
103.64.224.0/20
103.213.48.0-103.213.95.255
103.213.144.0-103.213.191.255
103.223.144.0-103.223.175.255
103.223.192.0/18
103.255.68.0/22
119.80.192.0-119.80.203.255
Signature Algorithm: sha256WithRSAEncryption
88:5f:da:a7:b6:f5:81:11:8b:e7:74:4d:bf:e2:9a:08:91:a1:
17:5c:6c:39:14:2a:81:d3:11:f1:3f:42:ae:a7:09:65:48:89:
31:fe:6a:00:3a:f2:48:0b:4a:0a:ce:a2:d2:b4:c0:a4:29:18:
ca:5f:78:31:21:7d:45:c2:2c:6e:90:56:72:bb:3e:1a:20:3b:
e3:0c:1d:1f:5d:10:41:59:21:82:6b:10:32:05:89:f3:a5:05:
3f:4b:17:33:4a:1c:15:7e:85:e2:3d:15:c5:1e:44:63:99:71:
37:41:de:e3:d7:de:be:94:fd:7e:27:f6:b3:29:ac:0f:b8:03:
59:ee:db:65:7c:85:dc:85:6d:ec:cd:53:0f:20:d6:f6:f9:e8:
36:62:ec:ce:ac:f9:09:6b:3a:c6:64:9f:c0:0e:5f:b5:a4:75:
96:14:0b:a4:2a:5b:75:e2:d8:3f:1b:e7:ae:e5:e5:b5:44:79:
15:34:20:47:15:3c:e5:6d:85:55:00:e7:66:9e:f2:99:13:7a:
d0:53:61:12:be:68:46:9f:5d:f6:0f:9e:e9:5a:8c:94:f0:fa:
3b:55:84:8b:b3:78:a2:5b:bb:3a:c8:95:cb:f3:bb:72:8d:3a:
a8:6c:23:8e:85:71:e7:c0:c0:7c:fa:a7:73:50:88:0c:a3:8c:
68:11:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org