Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/FZxMUjhT5r4CXfQ4BIc-MWlbsWE.cer
File: FZxMUjhT5r4CXfQ4BIc-MWlbsWE.cer (raw, json)
Hash identifier: oRDCXlR+let/2G6gBieCKm7neirGeEJwwHD70M0QLy4=
Subject key identifier: 15:9C:4C:52:38:53:E6:BE:02:5D:F4:38:04:87:3E:31:69:5B:B1:61
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/FZxMUjhT5r4CXfQ4BIc-MWlbsWE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:40 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.118.204.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30648 (0x77b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:40 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=159C4C523853E6BE025DF43804873E31695BB161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:3d:9f:48:e4:d8:93:c9:d2:26:3e:9e:c5:
11:ec:fa:0d:67:f3:c1:7e:1d:ad:b6:fc:ce:99:8b:
59:18:88:13:e8:93:fa:f6:ea:28:a3:90:77:6a:fe:
41:77:4f:8c:0f:ba:d0:c2:f5:e3:2c:0f:1f:01:6e:
68:fd:75:0e:e5:6c:21:6c:d3:77:11:fb:24:ed:1f:
02:3c:7c:fe:b4:68:38:09:1f:70:c1:91:f4:8b:02:
95:be:66:df:54:64:6b:67:48:fa:90:0a:37:3f:1b:
76:4b:7b:ff:d9:c9:b6:da:06:53:82:78:e8:d7:34:
d0:e3:e9:a0:65:dd:b8:df:98:4b:39:14:b4:a6:6d:
0d:81:d4:3a:d4:f7:b2:5f:e3:91:b7:08:1b:53:48:
fd:48:07:f9:7c:9e:dc:07:10:37:05:f3:65:8c:d0:
d8:55:14:c0:8d:06:fc:e9:92:20:3e:96:89:de:65:
9b:75:87:67:3b:af:da:0f:57:86:44:4f:74:45:27:
63:52:15:5d:ae:9c:96:da:59:d7:de:54:ec:15:10:
8e:de:88:3f:62:80:04:9f:e3:25:62:9a:17:b8:a6:
81:04:0b:1f:2f:5b:53:99:ea:62:52:6f:17:ed:eb:
ad:a2:37:f5:91:c6:68:05:08:6d:80:25:5d:61:db:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:4C:52:38:53:E6:BE:02:5D:F4:38:04:87:3E:31:69:5B:B1:61
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2765/FZxMUjhT5r4CXfQ4BIc-MWlbsWE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:cf:6e:78:00:29:a9:76:c3:11:37:89:3b:37:a5:41:f0:cf:
49:de:8c:ed:6c:5a:b3:a6:25:36:53:65:fe:63:c8:bc:71:b3:
94:bb:8b:1e:b1:02:91:e0:18:12:a2:6c:03:bf:18:53:93:23:
2d:78:4e:1f:29:d3:2d:eb:2a:c8:2c:aa:c9:95:9b:16:dd:6f:
5f:98:33:f4:48:2f:28:4a:9b:be:f2:89:01:32:06:c8:b7:c4:
14:41:a1:0e:db:eb:ea:20:57:f9:3a:35:47:61:d7:0d:8b:64:
27:2e:f1:76:70:22:c8:54:2d:40:96:02:32:82:bc:28:90:da:
ba:e4:5a:9e:17:b2:99:c9:76:dc:92:08:84:57:b0:46:4b:41:
5d:07:d0:5d:e5:34:72:05:44:81:c0:c6:14:8c:b0:ec:f6:52:
86:d8:d7:ee:4a:eb:71:a6:37:10:20:5f:6a:94:53:3b:82:f6:
c1:c1:5a:c6:70:87:a1:b1:c4:10:a3:79:b6:2c:05:07:d3:88:
43:5b:e1:61:66:96:d6:3c:27:b0:44:55:12:27:26:35:77:ca:
f5:82:df:62:e3:f0:14:41:16:ed:21:2d:44:89:24:90:db:12:
1c:03:b7:0c:5b:96:73:26:90:c6:3d:06:a8:a1:47:4c:99:78:
8a:46:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org