Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/u-bmsvRBlwH39UaMU0PmqUW5JhE.cer
File: u-bmsvRBlwH39UaMU0PmqUW5JhE.cer (raw, json)
Hash identifier: INNtAmHtUcdiRYRe/D2P3E7SMjGYcQUn62w/xgB7U8Q=
Subject key identifier: BB:E6:E6:B2:F4:41:97:01:F7:F5:46:8C:53:43:E6:A9:45:B9:26:11
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 787F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 07 Jun 2021 19:58:52 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.118.208.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30847 (0x787f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 7 19:58:52 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=BBE6E6B2F4419701F7F5468C5343E6A945B92611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:cd:72:af:50:c6:f4:c2:d7:5f:e3:ca:24:
20:a5:e3:58:31:10:19:a6:fe:1b:45:80:b1:9a:99:
5a:30:e7:b3:2e:d6:88:10:8e:72:48:1d:e2:81:61:
39:14:b3:71:52:5b:8e:6e:ff:9f:35:58:74:78:9f:
ec:3e:93:15:11:2f:28:05:86:15:92:56:9a:b5:df:
1a:dd:b4:b9:6c:08:9e:2a:03:b0:26:2e:bf:19:75:
50:61:63:81:d2:0f:be:66:bc:9c:1f:b3:39:89:d0:
07:45:66:81:09:a6:f2:76:26:bb:be:33:de:27:87:
8f:54:65:f8:98:ce:5c:81:b8:c0:c9:4c:3e:16:23:
d2:2e:8f:d4:a9:3a:a8:e5:42:c4:29:5f:56:5f:ff:
dc:3f:aa:6b:8d:8a:c9:02:4f:0d:9a:71:60:f8:3f:
35:6e:f9:bd:30:78:f4:23:08:3b:29:d9:7c:83:36:
ef:24:1a:60:8a:d1:bf:7d:1a:22:70:e4:43:d6:18:
85:82:bd:29:4d:68:04:55:16:64:be:4d:7b:21:9c:
b9:38:7a:a5:dd:9a:24:95:51:81:38:87:57:d2:7a:
7a:af:02:fc:01:02:e7:1b:5b:05:9d:6d:7b:ad:b6:
f0:6d:69:95:50:15:bd:98:e2:68:a8:63:86:f9:3b:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:E6:B2:F4:41:97:01:F7:F5:46:8C:53:43:E6:A9:45:B9:26:11
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2766/u-bmsvRBlwH39UaMU0PmqUW5JhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:17:4e:40:c4:f4:c8:2a:56:b5:99:43:c1:4d:ec:ab:71:51:
44:ef:75:96:b2:34:0c:26:f5:bd:95:5f:b8:c1:66:2e:26:17:
3c:1d:f2:91:86:4a:af:ba:57:66:95:24:69:f9:8f:4d:fb:5d:
f2:3b:e8:ca:10:82:74:25:46:ab:81:85:17:1a:e0:ac:33:ca:
19:78:53:91:a5:51:83:9b:b6:32:02:35:85:04:2c:ea:6b:25:
2a:0c:e3:06:e8:53:e0:d3:a8:5a:72:c5:e5:75:22:8d:73:51:
5f:31:75:c0:8c:e9:8d:ca:2c:1c:d7:7a:a1:5d:a5:e1:82:a6:
cf:a7:99:9b:ba:af:07:80:10:8a:7e:41:0a:22:20:0a:59:be:
e3:db:51:25:81:a9:82:21:e2:ac:fe:99:cc:1b:c7:7b:f1:f1:
68:94:9b:b1:78:c1:a7:71:a7:d8:3c:a2:7d:8f:b9:71:38:2e:
dc:f7:41:29:36:62:70:7e:8b:ce:3e:31:c9:b2:bc:53:e1:ac:
c0:f3:9f:3e:71:44:a0:6b:9d:e2:12:bb:f1:8b:86:72:66:ae:
73:e4:81:7b:bd:56:d4:30:a9:03:2d:ad:82:d0:fb:1f:8d:83:
f7:e1:1d:37:3e:d9:07:13:a7:09:bf:ef:f1:fb:ab:04:18:53:
91:89:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org