Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HVq-6c8RzzUWr5hHJ8zTdujXEMc.cer
File: HVq-6c8RzzUWr5hHJ8zTdujXEMc.cer (raw, json)
Hash identifier: piGZ0soMsIomYk1cfHHPTUPZIWNlBX87DlZwRaujy7o=
Subject key identifier: 1D:5A:BE:E9:CF:11:CF:35:16:AF:98:47:27:CC:D3:76:E8:D7:10:C7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/HVq-6c8RzzUWr5hHJ8zTdujXEMc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:16 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.131.152.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30676 (0x77d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:06:16 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1D5ABEE9CF11CF3516AF984727CCD376E8D710C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:c7:61:c8:6a:46:45:57:4f:98:29:31:c3:
08:98:9a:28:38:a2:2d:6c:8a:c1:45:b8:26:ec:d6:
3a:29:fd:a5:17:d1:39:1b:4a:68:c9:ef:b2:d3:7a:
77:7a:94:97:47:ba:0e:8f:55:5b:12:05:bb:f1:4a:
65:4c:ed:59:8a:9a:8f:14:55:b5:08:bf:2c:80:8d:
51:79:82:eb:d5:a6:e3:36:6a:dc:f0:6e:dc:1b:3f:
21:11:8e:9f:e0:1d:85:7c:8c:3d:0e:fe:4b:f4:d4:
df:33:0f:0d:39:d3:d4:59:87:fd:75:51:7f:25:b7:
0b:4a:8c:1e:ea:c4:5a:75:cf:d1:a0:13:1e:18:3c:
08:eb:14:bb:a5:51:05:97:0e:57:d0:98:ab:25:04:
7a:b2:46:c3:94:16:b1:9a:ec:37:27:3f:8d:9e:6c:
62:ba:bc:6c:23:8d:cb:6d:5f:2d:a4:c1:d2:6d:cd:
36:f9:65:78:2c:73:e5:d3:de:4c:d8:66:0f:8b:69:
d9:39:ad:f9:6f:17:bd:46:22:bf:78:28:f9:c1:5e:
ad:08:f0:d3:da:3a:f6:c2:51:75:ed:02:f2:2a:c9:
33:24:7b:32:9e:b1:39:ee:a8:a0:ce:46:00:73:5e:
11:e5:e1:1a:a2:59:2f:37:08:d8:d7:e3:ae:85:2b:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:BE:E9:CF:11:CF:35:16:AF:98:47:27:CC:D3:76:E8:D7:10:C7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2818/HVq-6c8RzzUWr5hHJ8zTdujXEMc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:20:70:88:30:fa:ab:d8:aa:99:8a:f0:e8:16:1d:a4:d3:52:
32:78:16:ba:cc:ac:a0:9c:29:e2:b5:2c:d6:72:bb:84:15:84:
fa:13:77:98:8b:ed:27:f9:07:9b:8a:8e:78:9c:c8:98:6e:20:
2a:10:af:da:9a:f4:ec:b6:56:a8:fc:68:e4:ec:24:37:58:6f:
c4:8f:b4:bc:54:f2:a8:16:15:1d:09:0e:ba:7b:74:e1:8f:5e:
69:40:1f:a3:73:88:a6:f5:55:c0:65:2a:ad:a7:e5:ec:ea:a3:
fd:fe:5e:76:7a:36:4c:b0:8d:c9:c5:27:5b:16:40:d5:06:94:
ad:16:43:ad:b6:72:98:9d:01:0f:27:e0:86:15:92:d5:3c:ac:
9d:fd:d8:7c:ee:c0:3e:be:c4:bc:1a:2f:5e:cc:e7:5a:40:ca:
40:0d:45:4e:47:df:b7:0b:1f:78:b4:54:46:68:a7:c8:c3:68:
2c:8b:d9:d8:92:6e:59:1e:87:3d:89:fa:cc:9f:dc:5b:07:e6:
b0:de:c6:c9:f4:4f:ad:a9:32:69:2b:40:83:1b:c7:5d:b4:0f:
89:d1:04:a4:7a:04:8b:50:37:4b:4b:d2:aa:4b:2d:74:e7:ac:
2c:b1:09:53:3e:95:e5:e9:03:96:1d:b9:26:d3:5a:b2:82:70:
4d:f7:67:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org