Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qQe5VT01k0W_CGXT4Gll6muiHs4.cer
File: qQe5VT01k0W_CGXT4Gll6muiHs4.cer (raw, json)
Hash identifier: E9hJOC9xzpM6rhjYmUL2sFQbVqvlVIQhHau069WSgqU=
Subject key identifier: A9:07:B9:55:3D:35:93:45:BF:08:65:D3:E0:69:65:EA:6B:A2:1E:CE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/qQe5VT01k0W_CGXT4Gll6muiHs4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:55 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.28.204.0/22
IP: 163.53.52.0/22
IP: 2403:f00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30710 (0x77f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:06:55 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A907B9553D359345BF0865D3E06965EA6BA21ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:70:31:76:e4:b5:cf:55:67:84:7c:6c:20:
f2:b9:91:fd:07:f6:c0:7e:02:03:76:9c:a3:ba:29:
a7:ff:87:56:fa:f7:3f:50:c0:b2:4c:e5:4a:a5:9e:
65:48:7d:a6:42:e2:6a:87:90:ac:94:44:3f:e9:68:
50:d6:32:f7:f7:15:11:17:cb:26:57:14:ca:82:1a:
e3:4c:c3:9b:1b:53:a9:d0:21:db:23:5f:0f:85:c8:
25:a6:4f:c9:66:d6:47:ca:0d:95:5d:e7:21:20:56:
9d:31:1d:ec:9e:33:b5:7d:a9:4f:04:85:05:ef:96:
ab:84:ef:b8:2c:8a:c2:07:06:dd:3f:85:60:0e:fa:
28:10:fc:c6:35:6e:23:7b:a7:21:7e:9b:10:a7:ce:
2b:e8:9e:e2:29:4f:1c:3e:3c:57:08:62:8f:95:86:
cf:bd:74:d0:37:5d:6e:cc:b6:00:61:31:01:46:a9:
82:d5:fb:bb:f1:5b:ff:33:7a:e6:eb:2f:86:91:cc:
41:b5:a8:87:25:9b:7b:72:91:25:9f:77:9c:6a:0b:
ed:63:06:78:01:7c:cb:a4:e1:d1:e6:b8:95:39:88:
31:ac:0b:b0:4e:56:2c:b5:67:b7:59:76:59:98:11:
17:56:cf:c3:76:ba:66:7e:1c:99:69:b7:bf:fd:7f:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:B9:55:3D:35:93:45:BF:08:65:D3:E0:69:65:EA:6B:A2:1E:CE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/473/qQe5VT01k0W_CGXT4Gll6muiHs4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.204.0/22
163.53.52.0/22
IPv6:
2403:f00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:40:69:f8:df:9e:3c:56:e9:aa:42:1b:fe:53:f7:46:6b:e8:
a7:88:ad:42:10:f2:f5:71:73:85:5d:d5:46:8b:3a:a4:4c:2a:
5d:0d:f8:d3:37:53:97:56:1f:c6:e9:01:3d:e5:dc:cb:71:f7:
13:25:7c:02:27:ff:1f:c7:60:57:53:f4:ba:55:d6:ba:8a:78:
32:08:06:5e:4a:e3:96:37:3e:81:c2:b8:fc:f7:88:e8:45:0e:
51:78:e5:4c:fc:07:1e:97:59:9a:5b:66:92:16:60:a3:21:3a:
c1:9c:19:ad:45:97:62:9b:49:11:eb:be:c7:b4:6e:2f:b3:fc:
39:67:44:1b:43:71:55:81:c0:01:db:40:ed:3a:a9:10:b1:99:
cc:34:5e:e2:76:c2:ba:fc:7e:7c:e9:19:eb:49:fb:a8:b0:96:
b0:54:d4:de:c2:bf:9d:bb:48:f5:b4:27:fc:06:f5:03:f2:d1:
9a:42:0b:68:89:4e:5c:9f:ec:a7:a0:3d:16:e4:00:a3:a1:e6:
a6:5a:31:4f:99:91:24:08:70:14:9c:2c:22:d5:55:43:8a:91:
f6:e4:8d:e1:fc:b8:14:2a:23:5e:bb:19:d1:43:7d:e1:f4:de:
3e:eb:b0:fa:7f:30:9a:d6:d1:b2:de:7a:88:af:41:d1:f9:9a:
0b:50:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org