Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/jpsOFQMC6NRzWaCBchLAKog4dQc.cer
File: jpsOFQMC6NRzWaCBchLAKog4dQc.cer (raw, json)
Hash identifier: lXxTcoljEtS8QUYUg0nYwOxQpEzErQsneD4yKakdflk=
Subject key identifier: 8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A982
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:29:18 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 103.118.212.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43394 (0xa982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:29:18 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=8E9B0E150302E8D47359A0817212C02A88387507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:cb:28:86:42:a9:33:d1:7a:32:a6:38:31:
cb:31:ee:94:45:e2:96:f1:14:bc:43:2f:c1:10:75:
65:99:c0:ea:73:93:89:ee:fb:28:87:a9:0e:ae:f4:
eb:2e:db:4c:bc:71:83:a5:9c:9f:f2:de:93:57:ca:
48:22:77:99:a5:1e:22:9f:86:39:4c:3e:5f:dd:b4:
c5:69:55:88:5f:a1:b5:77:81:fd:c9:56:0a:bd:01:
eb:43:aa:40:52:99:12:fd:0e:02:b6:9f:ca:3b:35:
cb:9d:88:e1:a7:a9:a7:ef:84:b4:33:5c:a5:32:6f:
0b:76:de:e2:8f:27:ef:7f:92:bf:50:1b:0e:1b:cf:
f2:59:29:96:f4:52:05:da:d8:0f:be:57:60:69:7d:
94:26:53:26:64:94:98:39:cb:4f:71:87:5d:0d:5a:
60:4a:66:57:c2:64:79:f8:1a:aa:3a:a5:4b:87:3a:
bd:89:b1:85:c7:0b:19:e4:0e:51:11:4f:35:0a:38:
54:14:19:86:c7:e0:b2:54:49:23:2c:b8:3d:12:98:
97:91:7f:c9:29:0b:eb:db:ca:e3:fd:75:c7:f1:33:
e2:25:3a:21:af:3d:45:47:e7:42:6a:45:98:fb:9a:
08:a9:b6:59:2a:e5:3b:c9:98:d1:b3:7a:dc:cb:02:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:0E:15:03:02:E8:D4:73:59:A0:81:72:12:C0:2A:88:38:75:07
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2767/jpsOFQMC6NRzWaCBchLAKog4dQc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:86:7d:b7:d4:ec:a0:f7:95:75:1a:bc:27:91:75:7b:30:82:
96:28:e9:07:f2:17:1e:f1:15:d6:13:98:6e:06:ab:b1:1d:a2:
4c:ad:15:46:9c:a9:43:3c:06:79:3d:1b:3b:59:f7:08:b9:78:
62:45:7b:1a:dd:db:b4:e6:92:59:67:3b:8e:f6:fd:e3:a3:6e:
a2:02:20:32:46:65:30:8a:4d:ab:6a:12:85:e8:59:0e:a8:e7:
33:a2:81:3a:92:f8:df:2b:5f:a6:ee:4b:21:43:8c:fe:25:50:
69:8a:fc:01:35:04:25:e2:9b:74:c2:17:88:37:f6:d0:e3:61:
e0:07:51:46:46:e8:2d:ea:95:18:c6:c8:a1:0b:a9:f7:82:90:
2d:72:4b:13:6b:ab:c9:27:1c:b3:19:80:3f:64:5b:01:98:b1:
d3:c1:9c:da:c5:37:34:5d:65:6b:e3:3c:5c:3d:06:77:b2:7f:
cf:8d:27:c8:71:9d:2e:e7:b2:b8:28:78:8d:c4:26:cb:be:03:
49:bb:a1:72:21:01:b7:cd:10:be:98:e6:e8:4f:d7:52:d9:d5:
0c:8b:8a:92:ac:6d:f8:9a:f1:f4:b1:e7:5b:86:4c:02:43:64:
54:7c:0c:c5:cc:90:79:2a:97:74:dd:20:49:aa:87:8e:d1:e4:
ff:19:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:14 2024 by rpki-client on console.sobornost.net