Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
File: AmBeOP5HEmDd56zml0Pi89Ty8MY.cer (raw, json)
Hash identifier: vtEMlAlVEzflcdWlPgYTsOaX8NTUob5npGBPYfYxj74=
Subject key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7B63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 06 Oct 2021 05:54:05 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 63612
IP: 43.226.32.0 -- 43.226.95.255
IP: 43.226.112.0/22
IP: 43.226.128.0/19
IP: 43.226.168.0 -- 43.226.215.255
IP: 43.226.240.0 -- 43.227.7.255
IP: 43.227.36.0 -- 43.227.51.255
IP: 43.227.56.0 -- 43.227.103.255
IP: 43.248.104.0/22
IP: 43.248.120.0/21
IP: 43.248.144.0/22
IP: 43.248.208.0/22
IP: 43.249.152.0 -- 43.249.167.255
IP: 103.39.160.0/19
IP: 103.39.208.0 -- 103.39.235.255
IP: 103.40.16.0 -- 103.40.47.255
IP: 103.40.240.0/20
IP: 103.44.236.0 -- 103.45.63.255
IP: 103.45.80.0 -- 103.45.159.255
IP: 103.45.172.0 -- 103.45.223.255
IP: 103.45.248.0/22
IP: 103.46.0.0/22
IP: 103.46.152.0 -- 103.46.167.255
IP: 103.46.172.0 -- 103.46.183.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31587 (0x7b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 6 05:54:05 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:df:97:48:33:e9:88:ca:fc:45:ee:4a:99:
d0:96:69:f9:cc:b8:fc:d6:ef:c8:39:26:1b:fc:73:
04:b0:e1:19:06:2a:07:76:3d:8a:b8:ca:a9:26:e8:
c0:7a:d2:2a:7c:a8:80:97:b0:e2:45:48:9f:c9:69:
6f:b4:65:85:77:fe:d6:fe:87:b3:9c:b9:fd:d9:5a:
04:61:2e:3c:80:db:57:05:a6:c8:f3:92:b7:db:71:
48:18:c1:94:32:47:9f:ac:f8:d7:5e:b0:27:4e:a7:
d5:ad:0a:92:bb:6a:99:e7:4d:38:78:2a:4f:ac:20:
02:6f:cc:cc:18:1e:a3:ee:6b:a9:f2:ab:af:cb:3f:
eb:53:fe:28:b3:ae:a5:63:2d:20:61:22:cd:8a:de:
d3:53:5d:5d:3b:d3:8a:d0:53:a7:be:b3:ae:3c:db:
48:bb:38:4f:99:2d:a3:fe:5e:e2:07:86:43:8d:69:
0f:10:60:5c:72:bf:bb:98:b7:10:00:6b:50:53:1b:
1f:1d:e7:80:e8:31:a5:da:2e:0e:dd:7c:d7:b2:27:
7e:c0:c0:6e:39:42:53:38:8a:4c:84:3a:7d:19:fb:
fa:28:d5:d8:50:0c:cf:62:a8:fb:12:02:b8:69:c2:
06:43:22:59:cd:d6:0e:19:5a:31:f8:54:0f:9c:f6:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63612
sbgp-ipAddrBlock: critical
IPv4:
43.226.32.0-43.226.95.255
43.226.112.0/22
43.226.128.0/19
43.226.168.0-43.226.215.255
43.226.240.0-43.227.7.255
43.227.36.0-43.227.51.255
43.227.56.0-43.227.103.255
43.248.104.0/22
43.248.120.0/21
43.248.144.0/22
43.248.208.0/22
43.249.152.0-43.249.167.255
103.39.160.0/19
103.39.208.0-103.39.235.255
103.40.16.0-103.40.47.255
103.40.240.0/20
103.44.236.0-103.45.63.255
103.45.80.0-103.45.159.255
103.45.172.0-103.45.223.255
103.45.248.0/22
103.46.0.0/22
103.46.152.0-103.46.167.255
103.46.172.0-103.46.183.255
Signature Algorithm: sha256WithRSAEncryption
1c:47:c9:5f:f8:de:a3:89:cc:bd:06:0a:57:a1:df:ed:68:aa:
3d:cb:8d:19:0e:b9:18:1a:0a:a0:4b:1a:25:8e:32:2d:d8:01:
f8:a3:97:01:9c:c2:c1:69:19:62:1a:21:00:9a:5f:28:3d:da:
d4:93:87:d5:5f:69:0a:9f:2e:21:85:87:bd:c7:03:90:3a:19:
ae:c8:a1:9d:24:a4:b2:3a:b6:db:d7:09:89:1b:24:08:6f:00:
5d:0b:16:d9:10:93:69:00:27:5c:c7:03:19:2e:d2:76:dd:9a:
82:d9:10:57:01:63:7b:6f:87:05:0e:b0:80:33:8f:80:13:24:
21:10:aa:df:fe:6e:c1:33:f0:a9:85:21:f3:5d:22:80:6b:e5:
7d:4a:ac:6e:87:76:61:82:cf:5a:91:11:f9:00:c4:01:fd:a9:
b6:b1:2e:16:3b:bc:dc:a2:0d:5f:8c:55:71:db:eb:c3:67:47:
9b:45:d4:4e:29:db:be:28:32:84:64:d5:6d:33:72:d4:18:ef:
06:fc:f5:37:59:9c:a8:6a:32:f4:96:f9:1b:e8:cb:bd:5d:29:
4a:7b:5a:82:91:c6:9a:e5:0d:a6:36:6d:34:29:9a:4a:4a:fd:
81:c3:f5:a5:d7:0c:bc:f3:b4:e7:60:14:2c:29:92:20:3d:f5:
a1:83:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org