Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/uPJm-XvdgtQorfJOnTDhZeMJZg0.cer
File: uPJm-XvdgtQorfJOnTDhZeMJZg0.cer (raw, json)
Hash identifier: JZnV3X5IDmCke0JtNVjlNsGRtpxULXR/BhHzpRYtwQg=
Subject key identifier: B8:F2:66:F9:7B:DD:82:D4:28:AD:F2:4E:9D:30:E1:65:E3:09:66:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 29 Oct 2021 19:43:01 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 9298
IP: 106.50.0.0/16
IP: 116.58.208.0/20
IP: 203.81.16.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31748 (0x7c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 29 19:43:01 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B8F266F97BDD82D428ADF24E9D30E165E309660D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:e6:1e:0d:ab:18:74:75:ba:a8:72:9d:4e:
b3:88:aa:eb:ec:72:a1:38:69:a2:04:92:3f:cc:90:
3f:8c:73:39:9b:84:0c:d3:ee:e1:39:0f:48:39:e6:
54:cd:5a:0f:04:aa:4c:a6:71:ba:80:cb:6d:1d:61:
f2:68:82:cc:71:7e:48:60:3a:d7:77:75:98:c3:d2:
9e:c0:c4:45:07:39:59:e2:4c:ac:2d:86:bc:39:e3:
70:1d:47:4e:d1:be:40:cd:f5:f9:e4:84:31:fb:9f:
4f:8b:06:ee:85:64:68:63:e2:b9:96:db:c4:28:80:
fb:98:7e:73:ed:31:6b:99:31:ad:e9:4f:65:45:b7:
b4:2d:b6:d7:40:e9:30:d8:32:3f:eb:c9:ab:e3:6c:
8b:bd:42:ed:02:8c:2c:28:15:41:4a:3f:96:fa:74:
35:98:1e:09:38:a1:29:5b:3c:0a:1a:7a:b2:1a:32:
da:c2:49:e1:24:65:df:b9:58:55:c8:5f:4a:22:76:
3d:3b:26:05:83:60:c1:c0:a6:e5:09:09:17:14:07:
95:dd:28:0d:da:b7:1e:e5:8e:da:5f:2e:0e:07:68:
46:47:31:1f:a9:b4:04:f1:c2:20:36:48:d9:cf:55:
f3:f6:71:2a:2c:94:ac:37:ee:39:e1:80:db:c9:2d:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:66:F9:7B:DD:82:D4:28:AD:F2:4E:9D:30:E1:65:E3:09:66:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/434/uPJm-XvdgtQorfJOnTDhZeMJZg0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9298
sbgp-ipAddrBlock: critical
IPv4:
106.50.0.0/16
116.58.208.0/20
203.81.16.0/20
Signature Algorithm: sha256WithRSAEncryption
08:43:78:92:9d:6d:5f:d9:f2:36:a2:2f:69:a0:37:5b:e7:27:
40:b5:a8:45:8f:8b:ec:eb:1e:52:32:73:c0:80:9c:d9:d1:1f:
68:63:9b:72:48:29:d7:f7:09:71:07:3f:88:88:f7:71:9e:2e:
34:eb:31:20:66:a8:6f:cb:5a:68:6b:91:25:f6:8e:a8:5a:4f:
36:04:51:bb:de:17:9f:be:79:ae:c8:81:c0:1c:d0:43:3b:ee:
63:70:a2:94:52:c8:0e:d6:33:ea:54:62:d1:86:0a:e6:ef:cc:
26:ae:04:48:4e:02:cb:1b:52:40:6f:03:b6:00:a3:5e:fd:b5:
34:b9:3d:4d:b0:6e:29:00:0c:ab:49:e6:8a:00:e5:be:6b:e8:
25:67:a5:f3:63:35:3b:7d:6c:1a:c8:36:09:93:0b:7a:67:fb:
5e:3f:03:8a:00:48:b4:80:56:8f:7c:97:7c:5b:f4:73:6e:52:
b3:31:33:9a:57:5d:80:e4:05:b5:1d:11:0c:f2:b6:80:8d:31:
94:35:7a:ff:16:20:e5:b0:28:e6:70:fa:3f:31:fb:c4:5a:e0:
f4:88:a3:5d:2c:51:10:c6:63:cb:d8:9c:8e:37:f8:c3:79:c6:
69:4f:9a:4f:73:4d:43:d1:93:29:d3:9a:fb:10:ea:97:02:74:
2c:27:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org