Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/C4R5TwlXOInHnuy4R3zNf8G92eE.cer
File: C4R5TwlXOInHnuy4R3zNf8G92eE.cer (raw, json)
Hash identifier: fykUryFiqq5DAvRCfhFcFPDo55UYS0VtvlTruuDUzy0=
Subject key identifier: 0B:84:79:4F:09:57:38:89:C7:9E:EC:B8:47:7C:CD:7F:C1:BD:D9:E1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7712
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:11 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.156.174.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30482 (0x7712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:11 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=0B84794F09573889C79EECB8477CCD7FC1BDD9E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:45:47:8c:61:df:fd:15:6d:a6:f1:32:07:
de:58:1b:3f:eb:ef:34:34:78:a1:71:43:89:d7:7a:
66:f9:2f:63:58:3f:e9:b0:7a:d3:16:8a:75:76:cc:
b1:b7:90:8a:8c:dd:8b:06:66:f3:01:ba:08:68:50:
06:a7:a6:90:d2:a1:01:24:90:8f:95:ee:e2:e1:83:
32:f8:a5:7d:61:63:09:70:21:39:cd:1c:e5:ba:88:
7d:46:6f:4a:5c:7c:8c:64:c6:cb:52:04:0b:5e:7a:
60:47:9c:e7:82:bf:7a:4a:54:f3:fa:45:d4:69:d4:
1f:12:38:9e:77:84:e7:80:9f:c1:00:9e:21:65:e7:
c6:b6:18:ed:04:11:53:43:31:81:63:95:f1:10:34:
a6:c1:8d:9f:9e:8d:db:0e:7e:bc:78:68:ea:0f:a2:
ac:4e:88:df:20:5e:b1:03:1f:2e:96:88:d6:d5:95:
35:15:80:7f:bf:f3:98:85:f5:e3:4a:bc:ab:12:15:
87:ba:f3:05:e5:39:d6:20:98:31:4f:88:c3:3d:76:
a7:44:16:28:19:c0:cc:3e:16:9e:df:fd:ee:44:49:
c8:a8:1e:f1:a6:05:65:e3:55:da:16:b2:20:4d:50:
3f:fe:4f:b0:9f:9a:15:bb:67:36:07:33:ba:dc:40:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:79:4F:09:57:38:89:C7:9E:EC:B8:47:7C:CD:7F:C1:BD:D9:E1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3023/C4R5TwlXOInHnuy4R3zNf8G92eE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.174.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:cc:55:cf:eb:d1:4b:9d:77:45:16:25:62:bd:7d:60:ef:75:
49:99:c8:78:b5:2c:29:eb:90:8b:1c:b9:be:27:c1:b3:32:79:
d1:2b:6f:bc:9e:78:ff:82:29:c2:d7:c1:23:7c:7c:89:c2:b6:
79:c0:ff:75:35:bb:11:95:75:60:27:e4:d5:ab:96:cf:96:d8:
7b:11:26:83:a8:69:58:65:f6:03:ee:f0:f2:c7:ef:41:d5:21:
5e:10:fb:f8:05:c1:bc:80:c2:76:bf:2f:24:51:e9:d5:88:05:
c0:f9:e8:7b:04:02:f1:0e:82:29:ef:79:4a:0c:60:2e:3f:be:
a0:7e:db:e2:cd:4e:3f:92:74:cd:3e:e9:54:7b:ea:b1:63:f0:
32:42:f9:f2:2f:87:49:f9:ad:a3:cd:1b:cf:82:3e:a1:71:49:
ae:d4:15:91:a0:6b:94:73:75:6c:4e:4d:aa:34:e0:68:d8:21:
0c:50:dd:d3:a5:32:ec:f7:63:13:81:64:6d:2c:3e:11:b7:98:
c3:8a:8f:a6:8c:ee:9d:14:97:2d:8f:c7:64:17:1a:df:ca:d2:
bb:6f:bc:10:8b:d0:e2:d9:b6:a8:b3:9d:59:4d:33:6e:5a:8f:
8a:9d:45:d4:f8:e4:ca:5a:5d:37:70:8a:78:2f:eb:aa:85:d5:
90:42:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org