Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2bxshZ7Ua195YHPkPbMvGsrdf9w.cer
File: 2bxshZ7Ua195YHPkPbMvGsrdf9w.cer (raw, json)
Hash identifier: WypmybHfCwjYJgsqCk2t7yqg7qkSsuk2g8rivC0uaQU=
Subject key identifier: D9:BC:6C:85:9E:D4:6B:5F:79:60:73:E4:3D:B3:2F:1A:CA:DD:7F:DC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 781C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:50 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 24134
AS: 38346
AS: 55998 -- 55999
IP: 103.235.200.0/22
IP: 116.213.64.0 -- 116.213.255.255
IP: 117.121.0.0 -- 117.121.191.255
IP: 119.80.32.0/20
IP: 122.102.64.0/20
IP: 163.53.36.0/22
IP: 202.43.144.0/20
IP: 202.152.176.0/20
IP: 210.73.192.0/21
IP: 211.157.0.0/19
IP: 2403:e300::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30748 (0x781c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:50 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D9BC6C859ED46B5F796073E43DB32F1ACADD7FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:9d:e7:8d:dd:7e:87:14:da:9d:ce:b9:4c:
59:97:9d:c2:aa:66:98:de:d7:59:a5:63:8a:b6:11:
09:42:cb:a7:84:bd:a6:9a:22:2c:c0:bb:c3:c9:bb:
94:eb:e1:3d:5c:53:81:53:61:e4:ea:95:47:fd:80:
ea:7a:2e:68:64:fb:e2:8e:a2:e5:80:94:35:63:3b:
0c:ad:b0:14:83:18:ff:c2:4d:9c:f1:cf:db:d8:b7:
99:5a:37:18:69:2f:07:64:5a:9c:12:16:7b:ec:db:
c4:49:8f:62:30:2e:25:53:ed:9f:91:0d:cf:97:ae:
b6:d4:6c:31:72:72:bf:0e:f0:e2:73:f6:23:18:89:
ef:80:16:9a:b5:5e:2e:15:ec:32:df:60:88:1c:c4:
eb:8a:79:1a:5a:2c:f5:66:0b:c7:2e:86:46:04:ec:
34:6a:7d:1f:e4:fb:40:c0:a8:23:7d:c4:4b:c8:64:
5b:59:e1:6d:8a:86:5d:ed:80:0c:27:98:2c:94:f9:
db:8b:fd:9b:6f:7a:9a:7f:13:37:1d:98:46:b8:af:
9a:67:29:0f:21:ea:77:ea:ab:40:a5:89:e0:bd:09:
22:12:3a:ec:44:03:47:94:55:21:9f:52:e5:fc:01:
41:9d:92:97:7e:59:72:cb:73:9e:b0:23:b5:69:84:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:6C:85:9E:D4:6B:5F:79:60:73:E4:3D:B3:2F:1A:CA:DD:7F:DC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/2bxshZ7Ua195YHPkPbMvGsrdf9w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24134
38346
55998-55999
sbgp-ipAddrBlock: critical
IPv4:
103.235.200.0/22
116.213.64.0-116.213.255.255
117.121.0.0-117.121.191.255
119.80.32.0/20
122.102.64.0/20
163.53.36.0/22
202.43.144.0/20
202.152.176.0/20
210.73.192.0/21
211.157.0.0/19
IPv6:
2403:e300::/32
Signature Algorithm: sha256WithRSAEncryption
86:a5:2f:18:51:3f:88:3d:26:f9:e0:75:71:ef:7e:f8:dc:2e:
e2:7c:b7:0a:9e:4c:05:fb:7c:ed:3c:42:96:d6:36:f3:a1:74:
d8:9e:22:18:e7:e6:19:d1:16:dd:54:d5:b3:72:20:89:36:b1:
0c:fa:21:39:12:d5:88:ff:4e:a1:ee:4d:08:8b:ca:1f:db:fb:
2f:df:f4:76:86:4b:54:d5:f1:1d:c0:cf:9e:d0:86:17:9d:a2:
55:90:cb:1d:9e:60:80:99:50:fb:6b:8d:d8:05:d2:c3:64:6f:
9e:3b:59:8e:a8:02:64:ad:4f:e3:c1:78:d0:e1:68:bf:c3:7e:
26:36:c2:d5:26:56:76:50:dc:4d:4a:2a:5e:11:ff:37:8e:0b:
aa:3a:2a:e1:00:95:64:64:f5:cc:36:8e:d9:fc:49:5c:80:98:
72:21:ea:c8:f6:95:6e:a6:28:f2:5d:85:23:25:63:a1:85:6e:
3c:8e:e1:94:4b:4c:1d:41:1f:55:64:6a:08:f4:97:98:49:5c:
64:92:cb:57:26:c1:11:7c:1f:00:83:b5:d0:d1:2f:28:b9:56:
aa:4c:1a:7e:2e:26:f5:de:4d:51:e4:2f:6b:a2:43:e1:c2:77:
73:7e:f1:ee:df:61:1a:b1:c4:d8:a8:6c:62:ee:c9:14:40:c3:
9e:3c:95:72
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgICeBwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDc1MFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRDlCQzZDODU5RUQ0NkI1Rjc5NjA3M0U0M0RCMzJGMUFDQUREN0ZE
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO7ZneeN3X6HFNqdzrlM
WZedwqpmmN7XWaVjirYRCULLp4S9ppoiLMC7w8m7lOvhPVxTgVNh5OqVR/2A6nou
aGT74o6i5YCUNWM7DK2wFIMY/8JNnPHP29i3mVo3GGkvB2RanBIWe+zbxEmPYjAu
JVPtn5ENz5euttRsMXJyvw7w4nP2IxiJ74AWmrVeLhXsMt9giBzE64p5Glos9WYL
xy6GRgTsNGp9H+T7QMCoI33ES8hkW1nhbYqGXe2ADCeYLJT524v9m296mn8TNx2Y
RrivmmcpDyHqd+qrQKWJ4L0JIhI67EQDR5RVIZ9S5fwBQZ2Sl35ZcstznrAjtWmE
fK8CAwEAAaOCAtAwggLMMB0GA1UdDgQWBBTZvGyFntRrX3lgc+Q9sy8ayt1/3DAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUF
BzAFhityc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv
MFYGCCsGAQUFBzAKhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzcvMmJ4c2haN1VhMTk1WUhQa1BiTXZHc3JkZjl3Lm1mdDAxBggrBgEF
BQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAqBggr
BgEFBQcBCAEB/wQbMBmgFzAVAgJeRgIDAJXKMAoCAwDavgIDANq/MHIGCCsGAQUF
BwEHAQH/BGMwYTBQBAIAATBKAwQCZ+vIMAsDBAZ01UADAwF01DALAwMAdXkDBAZ1
eYADBAR3UCADBAR6ZkADBAKjNSQDBATKK5ADBATKmLADBAPSScADBAXTnQAwDQQC
AAIwBwMFACQD4wAwDQYJKoZIhvcNAQELBQADggEBAIalLxhRP4g9JvngdXHvfvjc
LuJ8twqeTAX7fO08QpbWNvOhdNieIhjn5hnRFt1U1bNyIIk2sQz6ITkS1Yj/TqHu
TQiLyh/b+y/f9HaGS1TV8R3Az57QhhedolWQyx2eYICZUPtrjdgF0sNkb547WY6o
AmStT+PBeNDhaL/DfiY2wtUmVnZQ3E1KKl4R/zeOC6o6KuEAlWRk9cw2jtn8SVyA
mHIh6sj2lW6mKPJdhSMlY6GFbjyO4ZRLTB1BH1Vkagj0l5hJXGSSy1cmwRF8HwCD
tdDRLyi5VqpMGn4uJvXeTVHkL2uiQ+HCd3N+8e7fYRqxxNiobGLuyRRAw548lXI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org