Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KxEygUOEL-zz7FMDKUumbWxecEM.cer
File: KxEygUOEL-zz7FMDKUumbWxecEM.cer (raw, json)
Hash identifier: qqMBTP6qgpITmqGqGJ7qTG6EkxYgbfX//1FaICGMRSk=
Subject key identifier: 2B:11:32:81:43:84:2F:EC:F3:EC:53:03:29:4B:A6:6D:6C:5E:70:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7DDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/KxEygUOEL-zz7FMDKUumbWxecEM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 13 Jan 2022 05:42:36 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.227.100.0/22
IP: 163.53.188.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32222 (0x7dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jan 13 05:42:36 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2B11328143842FECF3EC5303294BA66D6C5E7043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:47:b5:aa:d0:6c:8b:72:12:b1:16:e5:7a:
60:5d:42:40:30:9a:9c:5d:0f:6b:ea:66:00:e1:53:
ae:02:2f:f4:45:70:cf:f8:1e:1b:50:09:a6:40:25:
07:1f:e7:c6:a5:f5:df:fe:12:b6:0f:db:57:6d:34:
7e:95:65:42:4e:7f:1b:27:69:07:47:2d:40:dd:a9:
99:68:c1:f0:2a:bb:e5:25:6a:d0:87:2c:75:f9:42:
42:97:0a:a4:39:07:81:ee:b3:10:53:41:11:6e:ea:
4d:f7:66:41:76:2d:2b:de:ab:65:65:e4:bd:b1:72:
63:33:64:be:5e:e5:40:30:ae:cb:92:1e:f0:cb:25:
73:db:8f:7c:2c:39:35:94:af:f8:06:66:7e:07:74:
7b:d5:01:4f:63:9b:4b:ee:92:31:06:1f:68:fb:41:
da:15:5e:0f:6d:56:81:46:8c:57:56:74:fe:37:03:
b8:6a:91:9d:91:53:be:97:be:c7:ea:80:b6:db:61:
c8:0a:ec:a2:9d:d1:de:76:03:ef:57:36:19:be:34:
f8:cc:e6:f6:7c:b2:13:0c:93:c7:5d:6d:69:66:75:
05:3f:27:b9:aa:17:da:55:ee:55:e3:40:0b:81:e2:
eb:20:95:dd:b9:dd:e1:15:88:53:37:e1:35:0a:3c:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:32:81:43:84:2F:EC:F3:EC:53:03:29:4B:A6:6D:6C:5E:70:43
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/531/KxEygUOEL-zz7FMDKUumbWxecEM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.100.0/22
163.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:1a:a8:3c:cc:91:b4:38:fe:87:4a:09:fb:ac:4a:fc:0c:5b:
d2:7e:08:2e:32:4f:8a:30:62:43:fc:e3:a3:0c:a9:89:a1:85:
40:a5:6e:4b:d5:92:3b:60:5b:d1:b8:ba:60:5f:fe:77:a5:df:
76:8c:66:a7:e8:f7:c0:d7:29:e0:1b:c0:09:10:82:bf:0e:08:
44:82:92:cb:46:a6:74:43:d6:99:d1:c9:e3:67:67:9f:84:28:
46:71:83:56:c5:30:a7:c3:d1:de:06:62:be:5f:2c:01:6d:05:
92:9c:42:29:5d:96:0b:a7:8c:1f:be:fe:83:00:9c:11:84:99:
a3:89:7d:f6:e6:99:68:5f:c5:c6:b5:3d:98:2e:9c:13:61:65:
55:86:10:ca:ba:d5:f7:bc:82:e3:5e:f7:45:29:8c:92:c7:01:
e9:33:e1:5a:b2:1c:15:ce:df:9c:5e:1a:3c:a4:a7:1b:68:fd:
3c:d6:8d:29:36:03:40:63:53:8e:c3:a8:67:5e:41:bb:d2:68:
14:58:67:9a:28:cc:3a:b8:c5:5d:a2:e5:66:d3:53:bd:80:ce:
8d:a9:78:da:c5:e6:ff:ce:a2:38:78:a4:e4:93:9e:77:b4:f3:
98:5d:55:13:be:06:b4:86:bf:07:49:c2:57:7f:6a:9d:49:58:
1c:89:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org