Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zEp-CQUWwis8PTkXV3qQMIbzkzM.cer
File: zEp-CQUWwis8PTkXV3qQMIbzkzM.cer (raw, json)
Hash identifier: X8wmbmdIJvA6zW9RE69pYmeaAl3RFWtPIi44P8tJAVw=
Subject key identifier: CC:4A:7E:09:05:16:C2:2B:3C:3D:39:17:57:7A:90:30:86:F3:93:33
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 93FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3121/zEp-CQUWwis8PTkXV3qQMIbzkzM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3121/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 17 Feb 2023 03:15:09 +0000
Certificate not after: Sat 17 Feb 2024 02:46:59 +0000
Subordinate resources: IP: 103.176.244.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37883 (0x93fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 17 03:15:09 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=CC4A7E090516C22B3C3D3917577A903086F39333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:c2:d8:cd:2d:f4:e1:b6:ca:1d:e4:cf:56:
29:91:d5:f6:e7:f3:a9:31:5f:21:22:34:f7:85:a4:
58:7c:95:22:a7:e1:20:cd:d8:a9:65:50:04:64:54:
77:76:46:e0:74:87:41:67:da:60:77:5d:29:f4:c9:
60:42:85:23:fc:5c:0b:93:bd:21:78:65:34:2f:21:
1f:68:fc:12:80:db:d9:11:ee:54:1d:32:e1:d8:45:
c1:fb:81:3a:e8:b6:8a:62:2d:f3:f9:d8:73:43:6a:
d5:c8:ff:b2:7f:95:5c:c8:60:7f:03:c8:1e:93:e7:
a5:81:3a:3a:91:cc:2f:68:a9:fd:18:86:65:0f:b1:
da:9b:68:dc:74:17:f6:ca:6d:27:e7:2b:13:31:b2:
3f:15:52:13:e6:6c:5f:e2:59:3a:7f:c6:64:68:9a:
99:00:a8:30:10:70:69:95:37:eb:cc:28:dd:c0:71:
4b:a1:f3:55:4e:30:6c:7f:60:b8:68:20:57:00:9a:
9f:27:56:bf:66:ae:23:d1:19:17:8d:9b:e6:5b:42:
84:fd:30:9c:a3:ba:ed:8f:18:2c:c2:86:a0:f6:36:
34:f9:79:9c:67:9b:f5:c8:78:ea:6a:5c:7a:77:83:
5e:ac:e9:e0:15:41:42:d4:48:9e:24:56:e8:85:98:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:7E:09:05:16:C2:2B:3C:3D:39:17:57:7A:90:30:86:F3:93:33
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3121/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3121/zEp-CQUWwis8PTkXV3qQMIbzkzM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.244.0/23
Signature Algorithm: sha256WithRSAEncryption
06:7a:35:7c:12:63:b2:b5:4c:f0:b0:6f:85:74:a1:ab:62:2a:
af:6b:e8:55:c0:de:d8:ce:f2:14:e2:94:dc:e8:0d:8c:b1:5a:
f5:a6:19:8d:1e:08:6a:19:59:cc:c0:7d:c8:23:ec:32:bc:75:
5f:04:d6:d1:ff:61:e9:32:f1:6d:1e:a2:a9:40:62:ce:f9:9f:
aa:0d:34:03:b3:36:b9:f8:a0:46:1a:4a:1b:e0:1b:94:e7:4e:
a6:23:cc:6c:84:71:d5:5f:b3:5b:33:d8:e6:82:24:38:0d:67:
24:f1:3c:a2:4b:29:fe:74:5e:df:72:dd:f9:51:ea:48:92:19:
df:ec:b7:52:43:8c:d7:3c:b3:57:4c:f8:ec:22:fa:b2:bb:50:
ee:ef:45:65:1d:b0:ff:b2:95:e4:d1:c7:e6:c7:c0:05:dd:9d:
0a:d1:cf:e7:bb:ab:e4:e2:1e:b1:7c:b2:cf:e8:2c:b7:fd:78:
48:c7:b3:94:24:bf:f7:40:bd:dc:91:67:0d:15:17:4f:0b:f3:
1b:2e:f1:68:b5:66:f1:33:1c:71:c9:e3:f7:f0:1a:5c:56:4a:
7b:df:76:12:cd:b1:d5:27:28:1a:64:9b:ce:d3:fa:b6:47:ca:
6d:a6:02:b9:a4:6a:cb:f4:a2:de:5c:eb:c9:81:35:64:9c:02:
e3:09:b9:47
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDAJP7MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzAyMTcwMzE1MDlaFw0yNDAyMTcwMjQ2NTlaMDMx
MTAvBgNVBAMTKENDNEE3RTA5MDUxNkMyMkIzQzNEMzkxNzU3N0E5MDMwODZGMzkz
MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDMLYzS304bbKHeTP
VimR1fbn86kxXyEiNPeFpFh8lSKn4SDN2KllUARkVHd2RuB0h0Fn2mB3XSn0yWBC
hSP8XAuTvSF4ZTQvIR9o/BKA29kR7lQdMuHYRcH7gTrotopiLfP52HNDatXI/7J/
lVzIYH8DyB6T56WBOjqRzC9oqf0YhmUPsdqbaNx0F/bKbSfnKxMxsj8VUhPmbF/i
WTp/xmRompkAqDAQcGmVN+vMKN3AcUuh81VOMGx/YLhoIFcAmp8nVr9mriPRGReN
m+ZbQoT9MJyjuu2PGCzChqD2NjT5eZxnm/XIeOpqXHp3g16s6eAVQULUSJ4kVuiF
mGoHAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUzEp+CQUWwis8PTkXV3qQMIbzkzMw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx
MjEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzEyMS96RXAtQ1FVV3dpczhQVGtYVjNxUU1JYnprek0ubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7D0MA0GCSqGSIb3DQEBCwUA
A4IBAQAGejV8EmOytUzwsG+FdKGrYiqva+hVwN7YzvIU4pTc6A2MsVr1phmNHghq
GVnMwH3II+wyvHVfBNbR/2HpMvFtHqKpQGLO+Z+qDTQDsza5+KBGGkob4BuU506m
I8xshHHVX7NbM9jmgiQ4DWck8TyiSyn+dF7fct35UepIkhnf7LdSQ4zXPLNXTPjs
Ivqyu1Du70VlHbD/spXk0cfmx8AF3Z0K0c/nu6vk4h6xfLLP6Cy3/XhIx7OUJL/3
QL3ckWcNFRdPC/MbLvFotWbxMxxxyeP38BpcVkp733YSzbHVJygaZJvO0/q2R8pt
pgK5pGrL9KLeXOvJgTVknALjCblH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org