Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/e8_vKg-5tfUJ6z_kaxYiOMb7vCc.cer
File: e8_vKg-5tfUJ6z_kaxYiOMb7vCc.cer (raw, json)
Hash identifier: S3hgK3dNcQ1/7bFFkgeBuzLW1YGBgejVPnnqBTmtPxo=
Subject key identifier: 7B:CF:EF:2A:0F:B9:B5:F5:09:EB:3F:E4:6B:16:22:38:C6:FB:BC:27
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7780
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/e8_vKg-5tfUJ6z_kaxYiOMb7vCc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:04:35 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.108.196.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30592 (0x7780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:04:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7BCFEF2A0FB9B5F509EB3FE46B162238C6FBBC27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:b4:af:b0:a5:89:dc:fb:87:a6:ad:a6:14:
df:16:1a:7e:62:7b:69:24:50:ef:7d:94:cb:71:0c:
11:87:ce:71:6c:9c:2d:48:c1:d8:10:b7:5c:5f:0e:
42:49:ae:45:c8:9f:dd:b0:04:1d:71:20:f2:9e:0e:
be:b1:e4:57:c7:95:19:42:ab:63:78:84:70:2e:8a:
13:f0:2b:8c:31:9f:56:0d:b9:58:16:e3:04:7b:ef:
3e:ed:30:6a:77:69:ff:db:55:c0:3e:8f:dd:7f:39:
3c:4f:6e:93:13:f2:5f:9a:0f:1c:0d:04:b7:1e:a6:
e9:82:f1:56:ec:56:0f:bc:16:db:c7:0e:1f:c7:6e:
2c:0a:f4:57:70:fb:20:94:c1:5b:d5:34:e9:b7:23:
e7:0e:9b:b3:14:e7:d3:f1:53:61:ec:61:94:fd:69:
03:14:6e:0e:85:2e:d0:f1:81:c1:3a:57:95:9f:54:
88:28:79:87:e4:b7:7b:b0:de:ef:f2:c3:36:48:2c:
f1:86:a8:a4:80:b8:e2:37:f3:85:ce:6b:a8:d7:8f:
f3:db:a0:9b:33:2f:46:45:36:1d:22:2f:88:01:c1:
10:f6:27:47:ce:ff:75:c1:35:dd:97:98:21:01:28:
bd:c7:fb:c8:33:f9:71:98:21:93:ee:18:91:7f:5a:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:EF:2A:0F:B9:B5:F5:09:EB:3F:E4:6B:16:22:38:C6:FB:BC:27
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2674/e8_vKg-5tfUJ6z_kaxYiOMb7vCc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:e0:ca:e6:09:ea:15:05:21:ea:64:87:ac:b5:f3:9e:60:f0:
aa:db:0b:89:81:54:dd:0c:b1:4e:11:2a:32:14:e3:60:90:fc:
bd:e2:40:1e:e8:eb:1c:f8:14:47:6f:04:a0:a6:ca:4e:ce:87:
73:4b:ef:8c:f5:09:e7:93:90:64:7d:83:7b:4e:91:7c:31:da:
36:40:97:b6:b3:ad:23:46:45:97:bc:73:fc:de:b9:63:05:38:
18:34:fb:d2:dd:af:4e:59:a5:a3:fd:c2:23:06:a9:2a:de:73:
4d:a6:04:16:64:a9:16:5c:5c:3c:4b:cb:e7:87:f5:13:7d:68:
aa:53:ba:14:c2:15:a6:3a:73:4b:da:41:40:8d:b3:f2:15:c1:
79:d3:8d:8e:0f:85:2b:6c:d9:13:6b:51:9a:bc:74:80:f5:96:
94:25:61:51:ce:45:2e:bb:07:50:ab:0e:68:f8:70:a2:49:95:
77:95:03:7e:60:92:c3:d6:bf:01:77:e1:a7:c5:13:1a:f8:b5:
a8:dc:ee:5d:d2:81:96:2b:c7:38:f6:0e:0b:65:95:d3:82:79:
f5:7e:a6:ab:77:b8:bc:9c:4a:58:04:65:f1:89:c9:b3:80:5e:
66:9b:b0:92:63:d7:06:47:06:d0:52:c0:36:c9:2a:4a:fe:a5:
d6:86:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org