Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
File: GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer (raw, json)
Hash identifier: F3se0C4ja/2e/2y52ozu5T67exkzCniRc7Yuo1Cskr8=
Subject key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:01:54 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 59083
IP: 43.254.152.0/22
IP: 45.252.8.0 -- 45.252.51.255
IP: 45.252.84.0/22
IP: 45.252.100.0/22
IP: 45.252.132.0 -- 45.252.139.255
IP: 45.252.144.0/22
IP: 59.153.164.0 -- 59.153.195.255
IP: 103.5.192.0/22
IP: 103.6.108.0/22
IP: 103.6.228.0/22
IP: 103.7.140.0/22
IP: 103.8.68.0/22
IP: 103.9.24.0/22
IP: 103.9.108.0/22
IP: 103.10.0.0/22
IP: 103.11.168.0/22
IP: 103.24.116.0/22
IP: 103.198.216.0 -- 103.198.247.255
IP: 103.220.248.0 -- 103.221.51.255
IP: 103.221.92.0/22
IP: 150.242.236.0/22
IP: 202.57.216.0/22
IP: 202.58.112.0/22
IP: 202.89.96.0/22
IP: 202.89.108.0/22
IP: 202.136.248.0/22
IP: 202.140.140.0/22
IP: 202.174.124.0/22
IP: 203.90.12.0/22
IP: 2403:1b80::/32
IP: 2406:1e80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30472 (0x7708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:01:54 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=194ACC313935AF5433C2B9456D742682F961EABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:42:a7:32:76:08:95:e7:d0:a2:5d:8b:ed:
59:19:b6:3a:9c:ea:6a:1a:18:d8:8a:af:bb:4b:c4:
f6:6d:95:46:59:05:a4:38:82:8f:89:ac:01:9f:49:
c1:ca:7e:9e:05:4d:21:90:be:3c:0c:63:9a:0e:00:
e3:97:65:97:e9:7f:bd:51:5c:9e:92:ba:a6:1c:e2:
40:50:1c:93:f7:47:ee:83:9b:79:ab:15:fb:04:b1:
b2:2b:bd:47:90:03:13:99:6c:f8:f0:c7:79:1d:9c:
d3:d8:fb:9e:69:f6:6b:a7:3c:ad:74:d5:fb:4a:e6:
d6:71:1f:36:78:be:de:09:39:15:b6:51:c8:95:65:
2f:9d:29:0e:fe:4a:c9:af:a1:e9:8d:62:ba:d0:c7:
76:ba:8d:62:ad:b6:c2:df:19:49:b0:e4:ff:93:e1:
76:8c:b5:36:58:39:4b:ed:08:a1:82:62:54:79:d6:
61:9b:25:56:95:a2:c9:04:b7:ff:73:5d:40:48:f2:
e6:d5:6c:65:9c:81:18:25:83:04:f9:7f:8a:ab:a3:
b6:45:96:3f:7d:c3:8c:01:96:19:37:2c:21:58:6f:
48:a0:9e:74:fe:a2:7b:62:54:23:5b:96:8d:68:69:
67:61:65:a2:38:d0:a3:69:43:cd:88:03:23:97:93:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59083
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/22
45.252.8.0-45.252.51.255
45.252.84.0/22
45.252.100.0/22
45.252.132.0-45.252.139.255
45.252.144.0/22
59.153.164.0-59.153.195.255
103.5.192.0/22
103.6.108.0/22
103.6.228.0/22
103.7.140.0/22
103.8.68.0/22
103.9.24.0/22
103.9.108.0/22
103.10.0.0/22
103.11.168.0/22
103.24.116.0/22
103.198.216.0-103.198.247.255
103.220.248.0-103.221.51.255
103.221.92.0/22
150.242.236.0/22
202.57.216.0/22
202.58.112.0/22
202.89.96.0/22
202.89.108.0/22
202.136.248.0/22
202.140.140.0/22
202.174.124.0/22
203.90.12.0/22
IPv6:
2403:1b80::/32
2406:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
06:b1:c3:ce:ae:a9:ab:b0:e8:95:94:84:85:f0:29:fc:72:2f:
c3:00:e6:06:9c:dc:d1:5e:1f:7b:72:00:17:58:97:09:cf:fa:
a8:5c:b3:65:7f:f0:81:d1:ac:1b:53:4c:90:cd:95:fc:79:b2:
46:31:1b:58:b4:f3:a5:08:17:41:09:10:86:83:68:51:d6:ee:
92:72:21:e0:0b:d1:c5:0a:b2:dd:61:0e:b1:2a:bb:39:60:c0:
9c:4e:c5:7a:41:0f:72:2c:96:30:14:ca:37:f4:bd:ca:54:74:
8f:9b:96:6a:92:d0:3e:bd:5e:fa:28:4d:60:b5:12:e8:a2:fc:
c9:a3:bd:6d:0f:87:bf:61:7d:41:8f:e8:9f:32:ca:25:66:9c:
93:7d:0d:af:0f:aa:d1:80:a0:45:82:61:79:91:95:5b:18:21:
76:14:76:85:2b:47:a3:00:b6:c0:b5:7a:4a:12:06:c8:5a:16:
56:68:37:41:97:98:f5:3f:ee:da:8f:1c:fe:a2:68:b7:d7:a2:
bb:5e:73:1a:a0:e6:36:3a:6d:a0:e3:7d:fe:c0:cb:2d:2f:8f:
7c:2b:cc:12:96:6c:29:87:ab:aa:30:e6:5a:c1:5e:8f:18:28:
08:77:29:ff:1f:b5:68:9c:d9:eb:4b:5e:34:40:a2:e1:59:3f:
ca:68:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org