Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qeFupBr3VWjrO9wZ3lTvVu3L9HU.cer
File: qeFupBr3VWjrO9wZ3lTvVu3L9HU.cer (raw, json)
Hash identifier: 1OZuImEwQfxsOgZ6QtFnAPweQXa9AIHdiLjliDbM6aU=
Subject key identifier: A9:E1:6E:A4:1A:F7:55:68:EB:3B:DC:19:DE:54:EF:56:ED:CB:F4:75
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/qeFupBr3VWjrO9wZ3lTvVu3L9HU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:51 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 45.114.96.0/22
IP: 45.123.132.0/22
IP: 103.54.48.0/22
IP: 103.63.248.0/22
IP: 103.74.56.0/21
IP: 103.80.176.0/21
IP: 106.3.16.0/20
IP: 106.3.192.0/20
IP: 110.173.32.0/20
IP: 114.115.0.0/17
IP: 122.112.32.0/19
IP: 122.115.0.0/20
IP: 122.115.224.0/20
IP: 203.100.192.0/20
IP: 2400:55c0::/32
IP: 2400:5640::/32
IP: 2407:2280::/32
IP: 2407:2380::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30656 (0x77c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:51 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A9E16EA41AF75568EB3BDC19DE54EF56EDCBF475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:54:c5:54:fe:e9:ed:eb:c6:54:eb:1a:73:
22:8b:86:eb:93:d5:10:72:ad:40:42:1b:83:2d:f3:
3a:e0:6e:30:f3:9a:86:09:75:02:55:73:60:80:00:
ca:83:08:02:5b:4a:dc:e4:3d:36:d8:56:24:73:fa:
95:2c:66:d7:92:e5:92:2c:b0:c7:03:d6:4a:4e:b5:
94:80:04:cc:2f:0a:d1:63:92:08:97:78:3b:1c:26:
34:e8:6c:60:f7:ca:f5:36:b2:a6:3d:aa:59:2b:9c:
0d:bb:d4:c7:89:d2:76:c3:4e:28:80:4d:72:12:5f:
ee:6d:f4:19:f9:eb:74:a8:d9:54:08:26:90:9b:46:
a6:c8:df:da:85:9f:36:93:32:da:e1:2a:69:bb:34:
f7:09:15:12:fd:fc:8c:f2:eb:45:b2:2c:a3:2d:9a:
b5:ed:38:f6:cc:36:f6:ec:37:be:8d:51:1e:b6:fd:
1e:60:48:20:e9:16:b2:fd:14:4b:b3:35:8d:6b:b0:
4c:fa:09:83:de:6a:96:44:bd:39:48:a7:3f:70:46:
70:7f:4b:c8:e9:89:63:2e:bb:cf:46:53:85:ee:00:
dd:08:33:1c:aa:ba:16:8d:04:d7:f6:9b:e3:c5:3b:
44:87:fa:a1:d3:04:8c:67:a8:cb:27:01:4a:5e:02:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:6E:A4:1A:F7:55:68:EB:3B:DC:19:DE:54:EF:56:ED:CB:F4:75
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/qeFupBr3VWjrO9wZ3lTvVu3L9HU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.96.0/22
45.123.132.0/22
103.54.48.0/22
103.63.248.0/22
103.74.56.0/21
103.80.176.0/21
106.3.16.0/20
106.3.192.0/20
110.173.32.0/20
114.115.0.0/17
122.112.32.0/19
122.115.0.0/20
122.115.224.0/20
203.100.192.0/20
IPv6:
2400:55c0::/32
2400:5640::/32
2407:2280::/32
2407:2380::/32
Signature Algorithm: sha256WithRSAEncryption
13:41:9c:a9:7a:b2:9a:1f:bf:d3:dc:8b:84:68:56:ac:23:83:
3d:42:08:c9:6b:6e:27:00:44:8b:fc:e6:1b:f5:cd:94:69:36:
0e:be:a7:72:ba:ab:41:c6:fa:e3:f2:99:aa:b3:5f:9e:e8:dc:
a0:f7:d0:42:23:c2:99:41:ee:d1:1d:b9:84:9b:fa:f7:e6:92:
db:2d:22:da:f1:6a:ae:7a:3d:c7:e5:22:87:be:fd:48:1e:fc:
06:6a:32:49:ff:78:2c:45:ba:87:4d:83:e6:7d:82:d5:64:af:
7a:db:c9:e9:5d:1d:c8:06:c8:e8:2b:a4:8b:d9:3c:fb:5d:64:
0f:a2:85:4b:cb:e8:16:3e:2e:9f:2a:f4:a5:b5:b5:7b:d0:31:
c9:d2:8a:bf:6d:c4:e5:30:57:04:2b:da:76:b7:5a:57:4d:26:
8f:fc:83:63:65:14:4d:b8:4b:9f:0a:4f:10:ba:59:b5:eb:48:
57:38:65:ee:b1:01:6e:a3:18:d5:4b:09:63:99:d8:74:4f:30:
57:5e:c9:73:6c:b1:f1:ff:68:4b:1f:e8:d1:db:95:0b:b4:22:
70:50:94:f2:06:55:f4:7d:45:6d:83:c0:a0:d2:6b:72:0a:5a:
be:05:6b:24:d8:94:49:a4:86:66:8a:33:1c:bb:6f:bc:ae:52:
56:f2:9e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org