Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qpeyukrPx9jybaTOcRM9yhzIQKk.cer
File: qpeyukrPx9jybaTOcRM9yhzIQKk.cer (raw, json)
Hash identifier: uRup0ELuXCZYmrfdFlfA9WA9ORLTSODkQbTgqPe1FGc=
Subject key identifier: AA:97:B2:BA:4A:CF:C7:D8:F2:6D:A4:CE:71:13:3D:CA:1C:C8:40:A9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7D9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 03 Jan 2022 04:00:23 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 43.224.208.0/22
IP: 43.226.120.0/22
IP: 43.226.160.0/22
IP: 45.112.228.0 -- 45.112.235.255
IP: 103.45.168.0/22
IP: 103.45.224.0/22
IP: 103.52.96.0/21
IP: 103.248.100.0/22
IP: 160.202.148.0 -- 160.202.155.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32159 (0x7d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 3 04:00:23 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=AA97B2BA4ACFC7D8F26DA4CE71133DCA1CC840A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:3e:e4:15:8f:e8:52:6b:6a:d5:6b:a6:a5:
f0:73:f2:4b:e3:1e:41:a9:5e:94:7a:18:4d:10:aa:
04:0b:f4:ec:52:3b:fe:c8:50:16:d9:e1:0b:2c:5d:
ed:28:22:e1:33:55:2c:33:be:23:f3:bf:32:a4:4d:
4d:4a:04:8a:92:c5:5d:33:7c:fd:86:31:7d:d7:73:
72:e4:b2:6d:46:0b:27:53:b2:21:a5:9f:ba:81:65:
f5:c5:d8:68:aa:5c:24:fc:83:0a:c6:93:ad:a6:00:
44:f2:7a:4c:ca:c7:79:69:f6:44:28:be:54:cd:c7:
ba:61:f5:45:82:45:4b:f0:2f:8a:90:9f:d5:2d:29:
ae:db:31:20:be:cd:05:04:12:e6:5c:43:08:f9:a2:
6c:a1:73:93:9f:da:80:86:b8:a2:2a:67:f9:cc:48:
f5:58:c1:ad:7c:3e:13:1c:56:da:07:e9:23:66:9e:
65:33:52:c9:3a:8c:8f:01:55:d8:fe:62:14:66:0f:
e5:8c:75:43:a3:89:3a:33:ed:9a:5d:3a:bb:1c:cb:
4c:92:c9:f7:9b:d1:55:18:ee:cf:19:e0:44:23:5e:
7a:94:d0:63:8d:3e:37:39:8a:b8:41:7f:52:cc:eb:
44:45:d4:ba:1a:a9:6e:4e:65:db:41:54:24:66:db:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:B2:BA:4A:CF:C7:D8:F2:6D:A4:CE:71:13:3D:CA:1C:C8:40:A9
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/598/qpeyukrPx9jybaTOcRM9yhzIQKk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.208.0/22
43.226.120.0/22
43.226.160.0/22
45.112.228.0-45.112.235.255
103.45.168.0/22
103.45.224.0/22
103.52.96.0/21
103.248.100.0/22
160.202.148.0-160.202.155.255
Signature Algorithm: sha256WithRSAEncryption
62:6d:6e:84:41:d4:4c:92:c7:8d:10:ee:d2:bd:be:ad:5c:4d:
9f:f5:35:f7:28:15:ae:3c:5e:02:bf:79:4a:a4:09:8c:87:d1:
04:da:36:fc:72:25:3e:31:41:57:25:c4:75:be:4b:cb:f4:72:
a5:a4:0a:cf:e4:fa:fc:e6:21:97:98:3c:99:1e:e9:d8:fe:9b:
43:05:90:be:72:4f:d6:58:82:5b:8f:65:7a:72:f2:2a:78:77:
42:69:60:1c:68:6e:a0:28:96:00:46:33:8a:ef:4b:30:86:0f:
17:a8:58:2b:fc:25:ea:00:7e:00:43:1e:95:f6:ba:b7:64:88:
f7:53:97:63:40:93:70:5d:39:28:fd:95:92:d7:13:16:7f:a8:
30:26:b0:aa:a9:dc:2f:22:98:7d:61:82:28:57:48:f4:13:08:
db:6c:39:7a:e7:af:f8:71:cf:96:06:41:f9:06:2a:60:08:f9:
20:b9:e9:83:02:fc:99:b4:22:85:51:c5:1d:6a:56:4d:f1:01:
1e:df:17:64:f2:00:6a:92:54:a1:1e:a5:c9:06:d6:da:f6:70:
bc:2d:d9:b7:ae:34:e2:6e:95:25:8c:15:a5:8c:ef:2b:52:f9:
56:d3:46:ba:71:3d:f9:a1:67:fb:87:9f:e0:71:31:e1:d3:ba:
3c:23:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org