Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/pD2pEr0ApojC2LVRVxLcOlo6T-8.cer
File: pD2pEr0ApojC2LVRVxLcOlo6T-8.cer (raw, json)
Hash identifier: R8sLyRjNMO5vCHRiXpyMuYdN7Kua4USg7PB5Ql1GxWc=
Subject key identifier: A4:3D:A9:12:BD:00:A6:88:C2:D8:B5:51:57:12:DC:3A:5A:3A:4F:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7C6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 14 Nov 2021 19:46:25 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 43.246.112.0/22
IP: 45.249.112.0/22
IP: 103.25.40.0/22
IP: 103.35.180.0/22
IP: 103.234.244.0/22
IP: 150.129.136.0/22
IP: 163.53.48.0/22
IP: 220.158.240.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31850 (0x7c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Nov 14 19:46:25 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A43DA912BD00A688C2D8B5515712DC3A5A3A4FEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:b1:e0:1d:1e:49:31:e4:ff:33:ab:c3:c7:
dd:6c:17:97:ab:4f:90:bf:f1:cd:cc:36:72:b8:1a:
6b:f9:3e:eb:af:fd:c0:58:e7:9b:1c:5a:30:7a:3a:
38:30:49:48:a5:fe:5d:0b:15:d2:75:99:03:31:3d:
56:55:72:fa:6f:c4:04:2f:83:0f:11:74:40:38:97:
c5:d8:a5:d5:84:e6:03:f7:40:5c:ad:75:17:ea:57:
ba:68:58:60:67:e1:0a:01:a2:f2:f2:82:98:40:62:
4f:aa:ac:b5:bf:37:d0:e9:07:a6:bb:12:d0:83:29:
e6:35:d2:8c:63:e1:1f:2d:5e:01:ea:a7:4e:1a:46:
d2:32:d5:27:59:b4:1c:e7:8a:39:95:57:2e:74:cc:
75:7d:45:78:27:45:9d:e5:77:14:42:06:06:2c:2d:
d4:34:07:88:5d:6b:0b:e9:04:ae:db:83:81:e8:57:
53:6d:e7:02:c1:67:00:11:ce:26:1d:89:62:8c:8b:
59:42:7a:fd:03:2c:04:23:ba:e9:fa:ef:71:6d:66:
6c:51:ee:87:ea:7c:a6:60:e8:a6:ed:0d:2e:00:f1:
d3:9a:f1:67:dc:28:77:b0:0f:54:3c:28:86:51:c5:
55:d3:90:5f:b6:19:38:80:bc:32:c4:28:b8:b6:f8:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:A9:12:BD:00:A6:88:C2:D8:B5:51:57:12:DC:3A:5A:3A:4F:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/587/pD2pEr0ApojC2LVRVxLcOlo6T-8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.112.0/22
45.249.112.0/22
103.25.40.0/22
103.35.180.0/22
103.234.244.0/22
150.129.136.0/22
163.53.48.0/22
220.158.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:e8:68:06:cf:ac:9e:0a:4f:13:6b:68:b2:3f:e5:4b:b8:eb:
14:2f:d4:c3:be:ce:06:a2:c1:26:89:42:65:46:5d:5b:f3:f2:
3d:67:c7:04:65:f5:8f:1c:ad:93:d7:27:cd:3c:df:cf:7b:6d:
f4:0f:cd:c6:19:12:f3:e3:6a:fa:3c:3c:32:08:ef:b4:24:49:
69:2b:a0:14:53:0b:40:50:63:c2:23:15:74:40:41:f0:19:46:
1d:cc:6b:51:af:2c:f6:bb:d7:f1:c3:36:72:35:ea:3c:ad:4b:
fc:a5:bb:27:ed:71:27:2e:cc:48:dc:38:5a:3f:66:71:1f:65:
b5:d4:e9:e4:7c:83:fd:98:b8:57:e5:5e:f2:b7:d4:73:21:41:
ff:da:ce:5d:46:b4:9e:6f:10:fd:40:a6:5e:36:6a:a7:0a:d8:
6f:48:6f:d3:df:f1:16:b2:27:c9:8b:ec:ee:c4:e0:bd:18:74:
19:cf:d9:52:03:e8:a3:d4:0e:28:49:09:2b:9f:db:27:8a:9f:
44:cf:ac:80:80:3b:ca:af:c2:d3:a5:f8:68:85:79:09:2c:5e:
7d:bd:35:94:36:eb:37:d2:ef:f0:8a:c3:00:d5:d0:63:a5:21:
5f:9c:11:a0:78:8e:0f:24:14:ef:56:bf:38:15:09:4d:df:20:
3e:2b:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org