Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/x75YJXN6hx9lg5xo9LMsKUAkM10.cer
File: x75YJXN6hx9lg5xo9LMsKUAkM10.cer (raw, json)
Hash identifier: HrmaxFmsL6m9xWU8iJABvVBEpqj8FEKd/jFh40fCokk=
Subject key identifier: C7:BE:58:25:73:7A:87:1F:65:83:9C:68:F4:B3:2C:29:40:24:33:5D
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 205A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/x75YJXN6hx9lg5xo9LMsKUAkM10.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 14 Nov 2021 20:16:43 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 167.189.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8282 (0x205a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Validity
Not Before: Nov 14 20:16:43 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C7BE5825737A871F65839C68F4B32C294024335D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:0d:69:1e:ac:38:9b:ef:37:c1:7f:1b:59:
83:ae:a4:a3:cc:e7:61:70:40:b2:2d:dd:78:aa:74:
46:e2:a1:04:3d:a4:c0:f6:9c:60:b4:29:c7:47:6e:
8d:cb:81:82:05:8c:9f:3f:67:f9:bb:c6:ca:17:b3:
0d:6c:b7:09:49:de:29:48:0a:94:38:be:88:c4:44:
14:bc:d6:37:b9:a7:4d:3a:91:96:b6:e0:ee:05:f6:
9b:8f:3b:7e:c7:22:7a:ae:06:5e:d1:c0:eb:22:80:
03:7c:9a:08:99:df:c9:de:ca:c0:af:9a:5d:d7:b0:
fa:40:a6:27:cb:70:ee:35:eb:27:f3:d1:d4:2e:c4:
79:eb:32:b3:d7:fe:75:5c:0f:5f:54:fe:14:ad:0f:
2e:a8:88:84:24:24:5c:a0:36:ed:0e:f4:08:54:eb:
07:9c:de:c6:6a:11:2b:94:f6:bd:b5:79:40:6a:7a:
f7:76:85:3b:d5:f9:a9:ea:4f:da:65:f0:f2:07:87:
87:e8:f5:a0:c1:a4:42:f8:97:58:00:27:37:78:2b:
76:45:3a:b0:d9:ad:45:ab:6b:ee:59:01:df:03:6d:
f8:0c:01:b7:3e:15:e1:64:8f:c3:8c:2f:97:88:2c:
89:f8:a3:8a:1e:16:89:50:ed:b8:c2:2c:4c:16:3e:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:58:25:73:7A:87:1F:65:83:9C:68:F4:B3:2C:29:40:24:33:5D
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/x75YJXN6hx9lg5xo9LMsKUAkM10.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
167.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:14:bc:f5:81:e6:db:3e:0f:8c:92:98:4f:11:82:9b:c9:e9:
c9:cc:c0:28:d2:c4:2d:a6:72:34:27:b6:8f:64:9a:fc:9a:03:
8b:15:dd:99:b4:0d:1b:12:37:9b:c1:e7:db:17:15:2a:00:9f:
28:c5:f4:5e:fd:ef:e0:8e:35:81:af:d6:ce:0c:dc:f3:62:cf:
02:61:72:0e:fc:91:9d:85:65:47:59:69:3f:af:7f:32:df:3f:
e9:32:18:22:ad:1f:b6:77:a6:75:ef:8f:18:d6:f7:3e:3c:d7:
b5:25:6a:24:2f:db:e9:bf:89:bd:41:ba:45:a9:c5:05:c8:ea:
08:e2:17:83:cf:01:a4:71:cb:13:52:0d:6a:85:a9:19:c7:99:
91:df:20:c6:b1:e3:04:87:32:8c:41:54:bd:42:1a:af:92:85:
03:c9:0b:58:9e:34:90:ba:e4:7d:b4:9d:84:a2:b3:fe:a2:5a:
a9:f9:1f:d7:bb:3f:5f:2a:0e:27:01:12:47:66:d2:16:f2:7a:
c3:00:14:61:4d:6f:54:d9:34:ee:c8:c4:96:97:b4:10:c7:f7:
18:0d:11:10:5a:ff:29:9e:cf:79:cb:b6:7c:a4:8f:6a:e5:40:
55:14:54:7a:12:e4:c0:eb:af:36:c0:7b:a7:21:a6:4f:3d:34:
62:62:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org