Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZKBWlS93Mafx_HvYMDUXnDCKv6Q.cer
File: ZKBWlS93Mafx_HvYMDUXnDCKv6Q.cer (raw, json)
Hash identifier: o8DVMTW7HzDn/yMTZkAD2g11pYL92zH/qoZOtJXaCTQ=
Subject key identifier: 64:A0:56:95:2F:77:31:A7:F1:FC:7B:D8:30:35:17:9C:30:8A:BF:A4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/ZKBWlS93Mafx_HvYMDUXnDCKv6Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:38 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.60.228.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30646 (0x77b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=64A056952F7731A7F1FC7BD83035179C308ABFA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:6b:c0:62:e5:d3:d6:8f:c8:41:42:d7:97:
0e:9a:4e:d0:fc:b2:ea:18:9d:ac:14:8b:ff:e1:0d:
d5:a1:7c:9b:86:04:7a:9a:ef:ab:64:2d:e5:b6:6f:
09:d2:e8:8e:c2:e4:0e:74:2a:61:a2:f4:cd:6e:c3:
5f:d9:a9:f9:4a:e3:19:00:cc:81:c8:01:73:3e:c2:
41:bd:d6:e3:4f:b7:5c:15:b3:f6:3d:c4:f3:f1:e5:
16:8c:02:55:92:fb:1f:82:77:fc:54:a6:a9:70:13:
a5:97:ed:f0:f2:59:41:2a:06:df:31:f4:d7:12:66:
c0:24:c5:2d:66:85:0e:09:23:1b:49:be:fe:2e:fc:
a8:4e:b8:2e:96:3b:f7:30:88:bf:54:d6:fd:94:c8:
7a:61:a7:9a:5f:f5:a4:76:b3:fd:1e:e8:dd:e9:20:
eb:6a:f0:fe:27:46:4f:c4:ff:f3:0f:33:8f:5c:01:
c3:3d:b1:d9:48:e1:18:bd:91:d4:a4:9a:2d:f1:c1:
5f:71:dc:39:e6:69:77:dd:f8:5f:01:02:1b:4f:a6:
bd:95:51:2f:f7:5f:b1:3c:3f:a4:0b:ce:2e:9c:f5:
6c:f1:54:b6:55:93:55:63:42:ba:7e:e2:9f:4d:38:
7d:0e:3b:a3:10:9f:bb:cf:c5:5b:67:b7:de:8e:0f:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:56:95:2F:77:31:A7:F1:FC:7B:D8:30:35:17:9C:30:8A:BF:A4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1230/ZKBWlS93Mafx_HvYMDUXnDCKv6Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:7d:24:10:c1:0a:93:b7:75:24:26:e7:57:25:0d:e4:93:c8:
aa:a1:e9:2b:65:b6:56:4e:67:07:6f:e5:c9:da:8f:3a:e6:48:
32:7a:40:f4:ed:bb:7a:4f:19:83:9d:fd:20:a5:dd:0f:22:aa:
80:4e:f7:4b:2b:f7:62:b4:40:b1:f8:1a:a3:55:24:26:25:c0:
36:f1:a5:f8:03:97:b5:8c:1c:3d:b2:64:30:06:ce:58:80:5b:
0f:32:3f:9e:43:c9:97:74:3e:f8:75:5c:e6:29:7c:f3:9d:66:
40:06:c5:a8:ae:e4:50:de:fe:03:8b:65:f9:c2:7d:29:c7:c5:
14:59:8c:07:68:ae:a8:e2:dd:4c:6d:23:c7:e4:ba:7e:49:ad:
6d:36:f8:75:83:d1:04:5d:12:6c:c2:0e:3b:f9:7d:d4:34:4b:
71:67:3b:27:f3:38:a4:d8:0e:7b:83:a1:4a:b7:a4:ff:a3:39:
2c:10:98:e8:59:69:08:57:ac:e3:4d:ee:1e:74:d3:ce:f0:5a:
67:1c:37:46:a9:4e:47:8d:45:6e:c5:7c:a7:b5:dd:a3:dc:be:
97:38:c7:be:b4:73:ac:f3:ca:68:fd:d6:ff:68:19:18:c7:09:
32:77:1f:16:1f:28:48:49:f5:29:b6:91:c4:cc:34:bd:90:53:
6c:bd:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org