Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/CEp8DZFlMSQQFxpokmg1xnHr-nE.cer
File: CEp8DZFlMSQQFxpokmg1xnHr-nE.cer (raw, json)
Hash identifier: V8nPDP1DjAD7NY03FKFzKdd/UTDGut6XfJoNSkziBSA=
Subject key identifier: 08:4A:7C:0D:91:65:31:24:10:17:1A:68:92:68:35:C6:71:EB:FA:71
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/CEp8DZFlMSQQFxpokmg1xnHr-nE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:53 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.118.240.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30658 (0x77c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:53 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=084A7C0D9165312410171A68926835C671EBFA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:28:6a:65:78:62:25:b2:b9:37:78:28:60:
33:7c:44:bc:df:8c:ef:f8:5e:6d:75:6f:c3:da:d8:
32:8f:d2:e5:63:35:80:56:92:1b:36:70:d9:06:33:
c4:2c:c8:92:3d:6e:44:3e:d3:ce:97:25:5d:be:09:
f6:e8:dc:f3:b6:be:6f:7f:ae:8e:2c:fd:ed:e5:e5:
62:93:79:8d:ef:dc:a7:38:10:95:c4:2c:26:42:ac:
fc:11:dd:db:95:18:62:74:fd:cd:65:f6:f1:a0:5a:
d4:4b:a6:08:32:6c:50:88:52:fd:0f:97:68:df:c1:
61:7a:18:4e:ec:f2:c1:d2:db:58:e5:5e:36:d9:e3:
e4:09:9b:7d:6b:88:86:0f:f5:ce:4a:45:b1:89:26:
32:a8:3e:ff:c2:8e:1a:d3:9e:4e:4b:0a:e7:0d:5c:
38:ef:c8:16:2a:e6:de:45:77:fb:a2:d7:6d:0b:49:
35:76:97:db:5a:16:ca:8a:27:57:d0:c9:81:ec:27:
c5:9f:da:45:f4:97:76:d9:88:f6:dd:de:2c:2e:68:
8e:a5:28:fa:45:55:ea:b5:22:e9:10:50:97:d6:55:
83:c3:ed:ce:2e:6a:b2:d2:89:05:34:23:5b:7d:e9:
4f:64:52:4e:51:b1:33:23:10:0b:22:15:ea:cc:62:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:7C:0D:91:65:31:24:10:17:1A:68:92:68:35:C6:71:EB:FA:71
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2770/CEp8DZFlMSQQFxpokmg1xnHr-nE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:24:75:bc:3e:a3:02:d1:92:72:ed:98:60:f7:77:be:83:cb:
ce:b0:15:7c:3a:70:12:d4:38:4b:45:8d:bf:36:15:64:50:da:
43:96:96:59:fb:f5:65:ea:47:bb:c6:81:3c:c8:6a:f2:36:e1:
b0:33:05:da:e9:09:d1:13:dd:2d:2f:e2:25:b1:89:b9:b4:18:
a6:c4:01:cc:dd:5a:d7:64:2d:db:f0:45:d5:f2:4b:6a:a5:44:
98:2c:64:51:9e:56:d5:82:7c:08:9c:43:4f:53:2a:8d:3d:eb:
18:7b:db:c7:7a:24:35:0b:7e:5c:93:11:9f:12:d7:4a:a9:65:
9f:ac:b3:1b:b9:04:0a:d4:37:ee:e0:96:f3:d2:9f:65:4c:1b:
e5:ed:44:8c:70:c3:35:90:18:50:ac:02:09:a1:04:ce:70:28:
67:62:37:57:a0:76:bb:39:37:ff:4b:d0:0e:e4:54:91:53:3f:
80:33:ee:33:c4:c2:83:e8:4b:6f:46:10:47:92:1d:bd:c6:cf:
67:d9:d9:df:bd:fa:90:5d:5b:af:34:5d:0b:f7:72:09:6a:fd:
54:d5:b0:50:21:0f:4f:1a:79:39:a3:10:eb:ac:fc:a6:35:98:
1a:eb:45:72:24:0d:35:16:cd:5e:c1:bd:1d:fd:7c:65:fc:6a:
19:0f:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org