Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sv5IqNDfCKHm90nrWrbMKHMYC-Q.cer
File: sv5IqNDfCKHm90nrWrbMKHMYC-Q.cer (raw, json)
Hash identifier: RWJKWusSj6e3cc6cS46tf+eTU9jqkE3wGzFKhmk/j9k=
Subject key identifier: B2:FE:48:A8:D0:DF:08:A1:E6:F7:49:EB:5A:B6:CC:28:73:18:0B:E4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7748
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/sv5IqNDfCKHm90nrWrbMKHMYC-Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:03:09 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 14.103.0.0/16
IP: 43.247.200.0/22
IP: 60.206.0.0 -- 60.206.11.255
IP: 60.206.16.0 -- 60.207.255.255
IP: 101.126.0.0/16
IP: 103.238.20.0/22
IP: 115.181.0.0/16
IP: 115.183.0.0/16
IP: 115.190.0.0/15
IP: 118.144.0.0/18
IP: 118.144.96.0 -- 118.144.255.255
IP: 118.145.32.0 -- 118.145.255.255
IP: 218.241.128.0 -- 218.241.151.255
IP: 218.241.160.0 -- 218.241.255.255
IP: 223.255.0.0/17
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30536 (0x7748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:03:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B2FE48A8D0DF08A1E6F749EB5AB6CC2873180BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:c7:87:01:bf:75:ea:05:75:43:22:ae:e7:
59:8e:9f:27:c4:8d:51:3c:d4:da:7c:4b:a6:0d:b2:
c2:01:c6:16:d3:6f:7b:e5:60:6e:84:fc:02:1e:a3:
0c:76:a1:6a:94:8c:f6:18:db:f5:e9:67:61:e5:dd:
9a:60:cf:fb:5c:e9:20:56:db:59:45:e7:31:85:7c:
01:52:71:48:f7:92:61:ea:eb:72:ce:6d:c8:5c:ed:
97:6f:0a:80:b0:8d:05:28:07:35:78:26:f7:69:18:
6a:bd:78:ba:6e:73:7c:c6:9f:46:ad:d5:bf:83:5e:
9f:24:d3:07:73:df:d8:e1:1f:64:1c:6e:46:3b:10:
2b:ed:88:35:89:2a:f3:44:26:6d:00:dd:2b:c6:e2:
7c:11:ee:9c:76:33:7a:5e:7d:f8:f9:bb:82:16:6c:
09:9e:a0:ee:b6:c5:a4:6c:fa:ff:9a:05:90:bb:64:
d3:9f:e3:4d:7c:f6:b1:3d:4f:9d:f6:c8:b1:27:9a:
c9:04:2a:77:f9:f0:aa:28:6c:a4:0f:c7:57:20:b4:
35:fb:b2:2b:fa:78:cf:ac:ad:f6:b4:87:a7:4a:fa:
52:90:dc:90:ea:a0:5c:9c:ae:a7:22:c2:69:1f:ee:
cd:58:b3:18:d7:4e:1e:57:bf:3c:0b:56:25:46:bc:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:48:A8:D0:DF:08:A1:E6:F7:49:EB:5A:B6:CC:28:73:18:0B:E4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/223/sv5IqNDfCKHm90nrWrbMKHMYC-Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.0.0/16
43.247.200.0/22
60.206.0.0-60.206.11.255
60.206.16.0-60.207.255.255
101.126.0.0/16
103.238.20.0/22
115.181.0.0/16
115.183.0.0/16
115.190.0.0/15
118.144.0.0/18
118.144.96.0-118.144.255.255
118.145.32.0-118.145.255.255
218.241.128.0-218.241.151.255
218.241.160.0-218.241.255.255
223.255.0.0/17
Signature Algorithm: sha256WithRSAEncryption
30:a9:41:10:90:d7:07:31:48:41:72:c3:df:7b:17:90:7b:6d:
75:e8:75:a0:4e:63:60:28:e9:04:59:5e:13:07:fa:2f:37:4a:
93:c5:f1:ab:30:28:52:93:59:a9:6c:42:7f:65:20:ea:10:92:
4b:44:7e:bc:c6:67:a7:17:80:57:f8:21:6e:a5:06:73:55:48:
c0:d3:5e:cf:80:a6:5f:16:6f:43:b6:4d:1f:6e:69:f4:99:1b:
11:d6:5f:0b:f3:c2:0e:2c:d6:31:ed:fe:b7:49:2d:82:7b:8c:
f8:85:dd:77:4d:b1:22:f0:c7:5a:71:ed:e5:7e:a4:40:1a:07:
ff:aa:e1:3f:6a:91:2a:ad:65:31:18:d7:6e:c9:14:3e:85:76:
c5:fc:14:45:06:95:a9:21:6c:ff:af:d2:06:bb:83:33:4e:72:
9e:b9:3c:31:44:c9:77:a6:53:e8:82:73:9f:a4:c5:1c:22:42:
5c:f9:9d:70:24:98:97:ff:ed:97:b1:8b:e6:5f:5a:4a:aa:ce:
6e:6c:3b:14:f0:59:ec:8b:43:7c:6b:3d:19:3e:80:1c:11:80:
02:3b:99:61:08:f9:63:e7:b2:f9:d2:5d:ff:85:3e:7c:20:79:
cd:3b:b7:6b:da:d1:bb:4f:f8:a0:ae:04:e3:ec:b0:97:c3:bb:
9f:a6:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org