Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1dMbAyNQokehCjrK_NcalSb7ArA.cer
File: 1dMbAyNQokehCjrK_NcalSb7ArA.cer (raw, json)
Hash identifier: 5zMWltcCrZOQOGIl3TGNihirb2Ha8UchnZ4FBLBWmV8=
Subject key identifier: D5:D3:1B:03:23:50:A2:47:A1:0A:3A:CA:FC:D7:1A:95:26:FB:02:B0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7955
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 05 Jul 2021 01:26:13 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 9395
IP: 42.196.0.0/14
IP: 43.247.208.0/22
IP: 49.220.0.0/14
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 115.173.0.0/17
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0 -- 124.15.191.255
IP: 124.254.0.0/18
IP: 175.188.0.0/14
IP: 180.88.0.0/14
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.114.0.0 -- 220.115.31.255
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.208.0.0/14
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31061 (0x7955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 5 01:26:13 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D5D31B032350A247A10A3ACAFCD71A9526FB02B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:44:15:70:c9:32:dc:73:b3:7b:81:70:69:
a9:58:98:f3:86:9f:05:15:a6:85:8f:5e:d5:ec:1c:
98:d2:bd:35:32:12:a8:0a:67:83:08:b8:3f:63:86:
75:d8:b2:d8:fc:bf:82:e7:3d:9d:25:a9:14:bd:49:
0c:ba:58:d3:94:41:ad:e1:d3:01:a6:bc:56:fe:5f:
af:3c:60:b6:6c:80:46:e0:0b:8e:62:73:53:c9:b6:
d9:65:35:c5:0e:f4:f5:d9:0b:30:6c:9a:de:7c:76:
86:a5:bf:71:0a:d9:df:4d:78:74:9f:7a:f9:87:f6:
bc:19:ee:a1:25:e8:e0:07:c9:4c:8e:ee:9c:94:77:
3e:52:a8:9c:fc:07:e7:bf:b0:8d:9a:ed:dd:8d:4c:
0d:4e:0c:4d:5d:4b:f2:c3:16:97:bb:6f:98:2a:90:
bc:4f:87:fe:8a:8a:b4:1f:96:a2:f1:68:91:4f:21:
b2:eb:b8:f5:d0:1c:c6:b1:a8:cc:b6:9c:3f:e1:a2:
7e:9a:fe:c7:82:b5:24:ac:b3:84:46:e1:47:8e:97:
3c:a3:06:82:b6:ac:ae:1b:c9:a3:0f:f1:07:67:d7:
55:48:9d:cb:c8:12:42:7f:a6:95:be:e2:0c:06:5d:
7d:ec:24:31:cd:60:b2:a6:6b:47:03:cf:db:8e:c0:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:1B:03:23:50:A2:47:A1:0A:3A:CA:FC:D7:1A:95:26:FB:02:B0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/1dMbAyNQokehCjrK_NcalSb7ArA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9395
sbgp-ipAddrBlock: critical
IPv4:
42.196.0.0/14
43.247.208.0/22
49.220.0.0/14
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
115.173.0.0/17
124.14.64.0-124.14.191.255
124.14.224.0-124.15.191.255
124.254.0.0/18
175.188.0.0/14
180.88.0.0/14
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.114.0.0-220.115.31.255
220.115.64.0-220.115.247.255
223.208.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a6:70:2e:b8:08:fc:d8:ee:1a:32:4c:e8:9b:82:c3:d5:2e:cc:
16:2b:59:f7:f7:74:24:90:15:63:83:63:89:b4:1f:6c:d6:07:
d7:0f:6c:98:ba:73:c1:ca:dc:2c:dd:7a:77:51:2e:4d:67:3c:
8c:36:a8:2e:17:50:ee:ea:fa:62:dd:fa:66:ee:48:96:a7:19:
38:96:f9:30:95:55:cf:b1:7e:13:24:c0:35:27:a0:6f:26:ea:
a3:d8:07:21:ff:b9:99:a4:22:b2:c7:a2:00:35:94:ba:d0:81:
5a:a6:d9:c3:98:b4:49:24:51:86:cb:54:ac:e7:f8:f4:1e:ac:
ef:b8:1d:57:7b:8d:95:cc:13:13:f9:57:26:17:2f:a4:49:e0:
34:35:b2:36:e5:58:33:f2:eb:4a:e7:b8:f4:bf:d5:c5:3b:33:
50:7d:26:e1:5b:83:9e:cd:19:c4:0c:84:b6:b5:45:b8:ac:9a:
ac:61:89:0c:44:64:02:7d:cd:dc:75:27:bf:c3:4b:0d:35:8c:
aa:08:02:16:29:2c:ac:6d:6b:98:2e:23:47:73:b9:aa:06:39:
0f:79:ec:aa:d9:8b:16:01:d7:56:f1:30:44:30:2f:c0:84:73:
f2:81:2f:8b:0f:38:66:83:2a:8b:b1:79:2e:87:fc:2e:e0:ac:
45:49:77:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org