Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8eC5k2j1Wqwt2KorjF0tMEg09Qk.cer
File: 8eC5k2j1Wqwt2KorjF0tMEg09Qk.cer (raw, json)
Hash identifier: UcEM0VnzGEW0q9x9kJsCH9EEqDROMTfwfgQ1P6USotE=
Subject key identifier: F1:E0:B9:93:68:F5:5A:AC:2D:D8:AA:2B:8C:5D:2D:30:48:34:F5:09
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/8eC5k2j1Wqwt2KorjF0tMEg09Qk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:35 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 38365
AS: 45076
AS: 45085
AS: 55967
AS: 63728 -- 63729
AS: 131138 -- 131141
IP: 103.6.76.0/22
IP: 106.12.0.0/15
IP: 114.110.64.0/18
IP: 114.111.0.0/19
IP: 119.75.208.0/20
IP: 120.48.0.0/15
IP: 122.248.48.0/20
IP: 150.242.120.0/22
IP: 180.76.0.0/16
IP: 182.61.0.0/16
IP: 202.181.112.0/20
IP: 2400:da00::/32
IP: 240c:4000::/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30696 (0x77e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:06:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F1E0B99368F55AAC2DD8AA2B8C5D2D304834F509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:d0:91:5c:00:60:92:cd:78:5c:6d:db:7f:
c2:e1:9a:38:38:18:21:d6:21:43:28:4b:a0:40:ee:
84:92:43:4f:72:3d:cd:84:1f:f6:cb:e4:a4:4c:e5:
7a:e5:63:5a:9e:0a:d3:e7:f8:1f:39:5d:df:6b:6e:
b4:ec:4f:37:bd:0b:4d:0f:96:ae:1c:e3:d3:35:a4:
5b:9f:59:71:85:59:d4:8b:09:31:dd:78:71:cd:e6:
62:a3:53:d7:25:78:82:fd:d9:19:06:e3:e2:ec:e7:
d1:28:0c:d3:2d:ab:10:1d:59:36:eb:1c:f1:95:04:
99:00:85:ae:a1:9a:2a:c3:12:e6:dd:8b:39:9a:83:
05:53:15:4f:4f:ef:4b:a7:99:d8:03:1e:1d:dc:3b:
fc:d6:c5:4b:8e:3e:61:b3:aa:66:87:88:27:17:79:
5a:2c:94:a2:43:b0:c6:df:84:4d:6f:59:3d:b3:19:
85:87:06:15:83:e2:bd:0b:b8:0c:a4:f4:6d:34:a1:
ea:4a:2f:ad:25:24:5b:ef:67:4d:03:83:58:b3:1f:
f9:ec:25:c8:d6:bf:a5:8c:b2:aa:2d:b0:4c:fb:8e:
be:fe:37:ba:a8:89:1d:dc:13:45:d9:70:e2:da:38:
58:c2:25:f3:d5:34:19:bd:00:d1:9f:c9:ee:56:24:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:B9:93:68:F5:5A:AC:2D:D8:AA:2B:8C:5D:2D:30:48:34:F5:09
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/8eC5k2j1Wqwt2KorjF0tMEg09Qk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38365
45076
45085
55967
63728-63729
131138-131141
sbgp-ipAddrBlock: critical
IPv4:
103.6.76.0/22
106.12.0.0/15
114.110.64.0/18
114.111.0.0/19
119.75.208.0/20
120.48.0.0/15
122.248.48.0/20
150.242.120.0/22
180.76.0.0/16
182.61.0.0/16
202.181.112.0/20
IPv6:
2400:da00::/32
240c:4000::/22
Signature Algorithm: sha256WithRSAEncryption
0e:52:bd:58:84:5b:4a:c3:3f:73:88:dc:22:f0:1b:a4:6f:3a:
59:be:c9:2b:71:fb:44:25:68:d1:c2:c0:31:9b:4c:61:76:93:
f0:84:be:94:35:eb:38:8e:d6:d2:d8:1f:11:83:d9:45:52:2b:
b0:52:b7:56:87:37:6b:74:ff:cf:90:0b:c4:a9:23:fd:28:38:
61:fb:00:a9:97:22:7c:a9:d0:b9:a3:a4:3a:dd:da:a4:af:04:
92:ff:fe:0f:16:0b:ab:16:73:bb:94:54:28:0f:39:28:fd:94:
2a:30:d1:03:20:6e:f0:51:38:18:6a:56:35:3b:9f:56:9b:1b:
5c:5e:96:fb:bd:7b:ca:79:67:50:cb:3b:5b:76:7f:59:41:9c:
12:c2:de:fb:dc:0e:9b:e8:6b:7e:72:37:70:b2:be:43:62:4a:
b9:23:68:3f:5c:78:65:55:83:f4:36:cb:b4:7c:09:64:5d:5b:
ef:5e:47:15:6d:81:79:0a:64:73:7d:19:af:4a:47:66:7a:f2:
56:86:2c:da:53:cd:c4:29:67:ef:6b:ba:0e:76:dc:dd:f0:fa:
1b:76:c9:15:c7:94:eb:6b:fb:b3:38:e8:22:ae:c4:34:23:01:
0f:2d:4d:2c:78:eb:78:51:90:7d:4f:f4:b6:9c:db:58:34:f5:
6e:3e:0f:ee
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgICd+gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDYzNVoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRjFFMEI5OTM2OEY1NUFBQzJERDhBQTJCOEM1RDJEMzA0ODM0RjUw
OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKd90JFcAGCSzXhcbdt/
wuGaODgYIdYhQyhLoEDuhJJDT3I9zYQf9svkpEzleuVjWp4K0+f4Hzld32tutOxP
N70LTQ+Wrhzj0zWkW59ZcYVZ1IsJMd14cc3mYqNT1yV4gv3ZGQbj4uzn0SgM0y2r
EB1ZNusc8ZUEmQCFrqGaKsMS5t2LOZqDBVMVT0/vS6eZ2AMeHdw7/NbFS44+YbOq
ZoeIJxd5WiyUokOwxt+ETW9ZPbMZhYcGFYPivQu4DKT0bTSh6kovrSUkW+9nTQOD
WLMf+ewlyNa/pYyyqi2wTPuOvv43uqiJHdwTRdlw4to4WMIl89U0Gb0A0Z/J7lYk
9VcCAwEAAaOCAuMwggLfMB0GA1UdDgQWBBTx4LmTaPVarC3YqiuMXS0wSDT1CTAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzMxMy84ZUM1azJqMVdxd3QyS29yakYwdE1FZzA5UWsubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMEEG
CCsGAQUFBwEIAQH/BDIwMKAuMCwCAwCV3QIDALAUAgMAsB0CAwDanzAKAgMA+PAC
AwD48TAKAgMCAEICAwIARTBsBggrBgEFBQcBBwEB/wRdMFswRAQCAAEwPgMEAmcG
TAMDAWoMAwQGcm5AAwQFcm8AAwQEd0vQAwMBeDADBAR6+DADBAKW8ngDAwC0TAMD
ALY9AwQEyrVwMBMEAgACMA0DBQAkANoAAwQCJAxAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOUr1YhFtKwz9ziNwi8BukbzpZvskrcftEJWjRwsAxm0xhdpPwhL6UNes4jtbS
2B8Rg9lFUiuwUrdWhzdrdP/PkAvEqSP9KDhh+wCplyJ8qdC5o6Q63dqkrwSS//4P
FgurFnO7lFQoDzko/ZQqMNEDIG7wUTgYalY1O59WmxtcXpb7vXvKeWdQyztbdn9Z
QZwSwt773A6b6Gt+cjdwsr5DYkq5I2g/XHhlVYP0Nsu0fAlkXVvvXkcVbYF5CmRz
fRmvSkdmevJWhizaU83EKWfva7oOdtzd8PobdskVx5Tra/uzOOgirsQ0IwEPLU0s
eOt4UZB9T/S2nNtYNPVuPg/u
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org