Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3uVM5pPNd6zxYRqdamTHe-5pvhg.cer
File: 3uVM5pPNd6zxYRqdamTHe-5pvhg.cer (raw, json)
Hash identifier: P5DgXanOtZh2CEQjs+dhGDmtBqinKxTZLHIR+jzVHMY=
Subject key identifier: DE:E5:4C:E6:93:CD:77:AC:F1:61:1A:9D:6A:64:C7:7B:EE:69:BE:18
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 20:29:15 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.108.192.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30887 (0x78a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 20:29:15 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=DEE54CE693CD77ACF1611A9D6A64C77BEE69BE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:d2:61:64:9e:84:39:79:9c:20:da:c3:a5:
ae:fa:97:7e:84:e7:c5:b2:8e:ad:2b:42:79:3e:4a:
22:3a:51:c4:fb:e6:f7:ba:4a:dc:41:86:44:41:f0:
c0:4f:17:cf:af:66:34:72:bc:de:79:94:00:7e:0b:
21:5e:6c:65:31:10:06:6f:6a:4d:e3:06:19:e7:20:
f6:59:ba:02:7d:ed:36:c0:13:26:60:6b:e0:1e:5c:
7b:aa:ea:39:bd:b0:61:60:7a:74:97:59:39:ac:31:
11:a6:fa:90:1e:21:a9:7f:85:35:5b:95:e4:a9:7a:
c5:c2:47:53:8a:a5:39:f6:3b:aa:93:75:a0:c4:c5:
e5:bb:34:3a:63:ef:d5:8a:4c:5b:89:eb:39:de:20:
7e:d6:ac:6d:72:42:c7:24:fc:72:b1:da:a0:1c:fe:
74:c7:32:8e:d6:62:3b:9a:9d:c2:34:a4:61:26:ab:
4b:a5:b9:f4:dc:5f:25:e3:35:35:e0:a6:04:07:67:
b2:cb:f0:b7:96:55:a1:42:81:4e:99:dc:0e:d7:c4:
74:b5:e1:ed:6e:90:df:28:bc:dc:85:24:ba:8d:fc:
14:91:b1:2e:46:95:68:18:3e:87:26:59:03:2f:f8:
69:6d:5e:10:73:ce:50:e4:59:9c:0b:66:6f:c2:d5:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:4C:E6:93:CD:77:AC:F1:61:1A:9D:6A:64:C7:7B:EE:69:BE:18
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2673/3uVM5pPNd6zxYRqdamTHe-5pvhg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c6:11:fb:82:fb:ed:5d:31:93:14:8b:70:2a:57:eb:a1:33:
ba:4a:1c:81:5c:8b:b4:11:64:d5:87:62:c8:96:89:8b:69:51:
c5:4f:75:0e:c1:dd:60:60:cb:40:4c:e1:dd:29:6d:4b:97:b7:
83:57:8c:bd:8b:75:8c:ce:f2:3b:90:ee:a2:e8:fb:0e:a8:92:
73:ed:cf:6a:84:2b:00:3b:06:a1:a4:4b:81:6b:94:fe:71:7b:
cc:5f:3d:da:36:37:1c:66:28:7a:a7:bc:ed:98:a5:a5:af:bc:
f5:4f:cf:a1:58:12:7a:6b:d2:44:91:ee:45:ef:10:a7:0a:9a:
30:06:c4:e1:93:15:46:82:97:c1:6d:52:3f:d1:c3:f0:23:2f:
45:a0:b3:b5:86:b3:02:a5:1f:06:48:d8:52:2e:1d:25:8b:41:
dc:fa:90:d8:60:10:d1:39:a3:40:9e:55:75:ee:c3:89:a5:98:
4d:54:3f:3a:2f:98:e8:d7:51:8d:7c:68:ab:38:a6:2b:60:b0:
af:3f:79:be:f7:61:6d:01:cc:db:39:97:d5:a6:af:34:0e:9e:
8b:1e:fc:fc:60:dc:50:2d:9f:3f:21:39:bc:a0:5b:b7:f7:b1:
99:8a:5e:16:76:ec:64:3e:24:56:32:0f:ba:cb:72:42:9e:cb:
77:02:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org