Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/uZMakvYmHILmg9oq5Pt31ZrdKbk.cer
File: uZMakvYmHILmg9oq5Pt31ZrdKbk.cer (raw, json)
Hash identifier: vbMuC6ezTu80fZaMzxClalsemumFwxY/qCEUZE94+yE=
Subject key identifier: B9:93:1A:92:F6:26:1C:82:E6:83:DA:2A:E4:FB:77:D5:9A:DD:29:B9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/uZMakvYmHILmg9oq5Pt31ZrdKbk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:14 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 103.115.60.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30630 (0x77a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:14 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B9931A92F6261C82E683DA2AE4FB77D59ADD29B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:7f:87:f3:3c:32:16:81:b0:8b:4a:bf:b3:
2e:69:52:b9:4b:33:ce:7d:c3:ce:02:46:a3:cf:7c:
55:2b:67:b6:e3:db:7b:27:09:7b:0d:d7:63:4e:84:
50:5c:3f:eb:ce:68:31:1f:6f:2d:11:79:eb:29:c2:
a3:cc:45:c9:5c:28:87:a8:9f:8c:89:09:bf:ef:e8:
fd:4a:6e:ff:ff:5c:af:cb:e3:58:f2:3b:59:7c:31:
63:d5:9c:00:8a:e0:20:e7:77:d5:c9:94:29:09:f3:
a3:65:9f:e6:eb:fd:42:a8:b7:3f:59:87:88:da:de:
ce:f0:d7:c0:0e:98:9d:0d:4d:fa:50:94:6b:a6:4e:
1a:4f:d3:7e:17:8f:fb:33:55:d9:b6:71:32:8c:cb:
68:ae:ba:3c:59:29:54:a1:e1:b9:98:3f:01:67:0b:
84:e3:7d:8b:8b:6c:c6:97:cd:7c:e0:77:fe:a3:c9:
ae:36:81:bd:99:b3:03:a5:76:8e:de:9a:bf:bf:53:
23:d6:74:66:26:a9:9a:c1:0e:b3:d5:96:6a:a0:c6:
ae:a2:94:96:1a:fa:5b:cd:1a:c1:eb:8b:20:24:18:
eb:4b:b7:4c:00:08:07:f3:bb:19:fc:6e:ee:ae:86:
a1:d6:45:f1:3a:1f:d0:c3:f9:f8:26:9a:26:5a:dc:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:1A:92:F6:26:1C:82:E6:83:DA:2A:E4:FB:77:D5:9A:DD:29:B9
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/uZMakvYmHILmg9oq5Pt31ZrdKbk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f6:98:9d:7e:79:2a:8d:22:5a:67:52:89:29:f6:27:6f:8c:
2b:1d:b9:57:b3:40:0e:66:12:b3:45:3d:11:85:de:17:72:7d:
f6:b8:c0:c5:77:8e:5b:9f:d9:ef:06:0a:d8:47:42:ec:8f:8f:
83:28:0b:e1:a4:cd:a6:2e:99:a4:8d:63:74:79:7e:14:f6:ba:
79:a6:38:38:2a:f3:8c:6a:1d:5e:0f:cd:69:25:c6:13:35:bf:
66:1d:1e:05:ff:f7:16:dc:b7:aa:7d:f4:ad:96:30:c6:a9:5b:
2d:70:77:3d:f9:70:6c:d1:8f:24:f1:36:12:35:80:ae:3d:ea:
a6:18:3e:46:02:ab:d1:46:3c:d3:57:c2:70:0c:0a:0d:67:67:
26:d1:ed:59:df:18:d6:f6:88:fd:dd:0c:ad:b8:12:78:2b:21:
dd:85:60:29:a5:22:a4:c4:5a:b2:d7:91:d5:12:1d:1a:24:f6:
72:83:98:88:fc:e1:c9:ed:65:ef:5e:44:38:48:43:12:ce:19:
5d:3b:b5:3b:1a:ae:1c:ee:b2:d7:27:0b:d7:a2:87:48:f1:6a:
a3:cd:cf:9f:d9:11:5d:73:fb:f3:4e:7c:a4:0d:29:b9:88:00:
bb:ee:e7:be:85:73:81:e4:3f:cb:83:01:dc:5b:36:47:db:bf:
57:14:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org