Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UIynXRmSIh2Xz8IAXvjNFh7E6HE.cer
File: UIynXRmSIh2Xz8IAXvjNFh7E6HE.cer (raw, json)
Hash identifier: 6Qckf4Q/ZlZjCk/MWb2ENgGmaT1mzBpHVfh/Xdy0wSY=
Subject key identifier: 50:8C:A7:5D:19:92:22:1D:97:CF:C2:00:5E:F8:CD:16:1E:C4:E8:71
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 78A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/UIynXRmSIh2Xz8IAXvjNFh7E6HE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Jun 2021 20:00:03 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.139.2.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30885 (0x78a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 9 20:00:03 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=508CA75D1992221D97CFC2005EF8CD161EC4E871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:87:58:d3:78:98:fa:20:c7:d5:c8:ae:c0:
7a:a1:96:91:b2:f3:47:38:bc:13:dc:fb:50:88:e3:
e1:ca:88:a6:dd:50:68:dd:da:9f:ec:8b:4c:99:94:
d3:88:2a:21:19:1a:0a:30:2a:a8:6a:32:fb:4a:3b:
05:7e:e2:15:c7:5e:89:38:7a:b2:f1:a1:52:13:39:
03:c2:f8:5b:bc:30:e5:c0:ef:2f:eb:fc:35:9e:24:
50:74:c0:71:dd:cb:2a:ce:02:2b:66:f2:a4:86:65:
79:0a:86:c8:89:cf:cc:be:ce:a6:b3:b2:e9:62:be:
22:6a:08:44:43:89:12:7d:9e:c2:ed:30:e3:3e:62:
d3:29:9f:b2:6e:3f:93:c9:c7:27:70:b6:0b:d8:16:
48:bb:93:4a:88:ce:75:70:2c:a7:3a:de:96:03:0e:
51:34:08:e2:44:a4:9e:67:c4:2c:07:ef:9f:1c:3d:
20:35:6b:08:79:7e:33:40:20:de:46:47:73:88:8c:
68:10:13:32:21:55:b3:8d:f8:ad:cb:ae:bc:85:1e:
0f:0c:59:a9:5d:48:0a:2e:5f:03:1f:c4:cc:32:55:
50:52:79:31:ff:59:ad:8d:8b:d1:5b:0c:10:57:22:
a6:97:92:eb:81:c4:ae:e4:97:76:a6:8f:12:2e:a7:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:A7:5D:19:92:22:1D:97:CF:C2:00:5E:F8:CD:16:1E:C4:E8:71
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/UIynXRmSIh2Xz8IAXvjNFh7E6HE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.2.0/23
Signature Algorithm: sha256WithRSAEncryption
92:7f:09:b5:14:83:62:ad:c2:a0:ca:6a:1b:33:80:6c:2c:95:
a9:9b:e8:89:19:ad:4f:ae:97:11:3c:38:4e:9b:4b:36:80:e6:
a7:b7:92:4a:bd:cd:48:85:5a:7c:83:10:af:7d:16:4f:ce:41:
c6:6b:b2:02:9b:7c:1c:ce:64:06:ec:3f:03:af:ee:b0:91:b3:
c6:1a:81:58:2b:dc:0b:ab:f3:51:79:f7:5d:a6:54:83:df:4d:
0a:7d:4f:e7:dd:b2:28:92:ca:c8:86:ba:89:21:00:f2:b6:d9:
19:7d:f8:e4:41:fc:3b:28:0e:ba:59:78:38:8e:89:98:14:05:
4a:60:c8:06:d6:09:39:81:f0:f6:05:d6:20:c3:17:1d:b5:0e:
7d:c7:1d:ab:4c:94:5a:c5:55:e5:df:da:41:3c:72:a3:bb:ed:
b5:f9:b4:3c:2f:e8:e4:34:c0:f5:e5:32:6e:e3:de:4c:79:80:
93:4b:91:f9:3f:8f:10:ff:89:47:53:60:11:35:4f:71:1b:89:
24:73:70:d0:dc:5c:64:0a:d9:63:03:3b:98:dd:d3:8f:e6:10:
7c:30:77:61:e7:a7:61:95:72:2b:e0:c1:42:42:af:d4:de:f6:
62:c5:82:8c:96:f6:70:68:c2:77:09:3a:fc:50:ef:cd:34:ad:
4f:0d:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org