Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TExXa7UMbU05SyffzwtTVE0PVnw.cer
File: TExXa7UMbU05SyffzwtTVE0PVnw.cer (raw, json)
Hash identifier: k+WRz2Q0RWEwT7FiVv40EmPr/VJsj5qtvsQHalrmoJE=
Subject key identifier: 4C:4C:57:6B:B5:0C:6D:4D:39:4B:27:DF:CF:0B:53:54:4D:0F:56:7C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/TExXa7UMbU05SyffzwtTVE0PVnw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 20:30:11 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 60.247.128.0/17
IP: 211.149.128.0/17
IP: 219.234.0.0/21
IP: 2403:db00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30893 (0x78ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 20:30:11 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4C4C576BB50C6D4D394B27DFCF0B53544D0F567C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:1b:71:33:0a:ea:ce:e1:29:43:8c:c2:a7:
96:42:ce:f0:e1:c2:e2:18:e0:1f:64:25:94:58:1c:
94:6f:9f:f8:f6:f8:ef:62:2b:50:93:8d:e5:87:17:
7b:35:a7:90:e5:d9:3e:d0:6d:31:5a:84:d5:2a:32:
33:75:4d:74:b7:e1:51:11:89:c9:bf:07:e4:08:68:
da:10:8a:40:7e:c5:2e:bb:53:7c:5e:18:af:b9:9a:
9b:ac:98:22:0a:4b:80:4b:ed:00:0d:2e:69:72:57:
9a:70:ae:4a:68:2f:16:10:a7:73:cd:0b:58:1b:b4:
0e:3f:b2:10:4b:01:e2:d1:a6:16:0b:15:63:0c:ba:
1e:8b:1f:aa:85:2b:d7:50:f2:d8:44:7e:31:23:32:
7f:87:76:a9:d9:6d:85:c4:b6:19:f9:10:a3:5d:6e:
db:cd:19:c6:8b:84:32:9f:5c:2a:dc:95:ce:32:7b:
7b:ec:6a:07:22:cc:0a:a8:1e:5a:2e:b5:ce:55:97:
d1:e3:96:83:ff:f7:63:a9:d9:d8:f5:ba:05:14:33:
c1:4d:a3:22:3e:9a:91:1f:58:03:1b:15:d4:c1:05:
4a:c2:d1:35:85:b9:87:82:68:42:82:df:9a:56:61:
a4:e1:f1:96:5d:70:e0:32:b0:b3:55:93:a7:fe:54:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:57:6B:B5:0C:6D:4D:39:4B:27:DF:CF:0B:53:54:4D:0F:56:7C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/479/TExXa7UMbU05SyffzwtTVE0PVnw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.247.128.0/17
211.149.128.0/17
219.234.0.0/21
IPv6:
2403:db00::/32
Signature Algorithm: sha256WithRSAEncryption
37:fc:2b:00:36:cb:d7:dc:8c:78:a9:05:6b:bb:6a:da:52:91:
a4:3e:aa:a3:2f:f0:f0:e1:ae:6a:91:11:65:f5:13:08:b4:7d:
8b:8f:1d:c9:d6:9b:15:e6:ad:60:17:37:90:08:e2:b8:05:b2:
f9:b0:2c:73:47:24:4b:3d:6d:cb:7a:9a:de:9a:79:fa:e0:e4:
fe:f2:e3:ba:0d:29:38:be:07:f7:e4:63:dc:aa:b6:fe:28:20:
54:7c:83:1b:3d:14:84:2f:2e:aa:93:8b:76:d9:4b:3f:b4:08:
30:42:de:62:84:87:9b:b1:76:eb:21:7d:ee:ff:2f:1f:08:76:
62:5d:2c:5e:4b:ef:19:8e:9b:7a:da:fb:1c:a7:59:dc:e5:94:
1e:dc:3d:a1:d7:4a:83:84:cb:d8:37:c8:1c:45:b6:4b:a4:6d:
e3:0e:b5:da:7e:6f:b2:cb:d6:22:70:b1:a6:75:8c:42:a1:31:
87:4f:65:31:ba:f9:51:a6:4e:73:c7:8a:dd:34:d7:1a:91:63:
d7:3f:a4:4f:d3:bd:55:0d:7d:69:4e:27:be:70:c2:81:10:f2:
77:a4:e7:5d:42:f2:70:17:76:df:22:99:ca:a4:57:4c:a1:68:
28:f8:d8:17:00:43:4b:d4:89:11:d0:d1:67:94:34:71:9f:d5:
a7:4c:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org