Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.cer
File: JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.cer (raw, json)
Hash identifier: SsLJ2AteOMxdTx1gWIFAylZAwTLnnGXZHqc/wJe/uOg=
Subject key identifier: 24:8D:AD:67:90:21:30:59:24:F1:0F:83:E5:9E:1A:3C:5A:1E:38:84
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 774A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:03:11 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 24147
IP: 103.235.80.0/22
IP: 113.208.96.0 -- 113.208.255.255
IP: 113.212.0.0/18
IP: 150.242.92.0/22
IP: 203.86.32.0/19
IP: 211.102.240.0/20
IP: 219.235.192.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30538 (0x774a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:03:11 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=248DAD679021305924F10F83E59E1A3C5A1E3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:22:c5:b2:13:cd:36:56:10:5c:bf:c5:14:
ad:fc:6f:81:c4:f8:ee:b6:7b:cd:10:9e:cc:ec:73:
ea:af:f4:6e:9d:f2:34:a7:df:e2:cd:84:68:6c:fd:
b1:9b:24:c2:40:6f:44:f9:51:ba:63:ed:1c:80:d7:
1a:f9:a7:d8:3b:0a:a1:50:70:9d:f5:3c:e9:b6:a1:
0a:9b:e5:18:25:3e:65:4d:c5:30:ec:fb:64:8e:04:
bf:64:f1:ed:eb:63:5c:af:18:70:48:4f:bb:eb:62:
23:a7:9d:2f:bf:0d:0e:bb:df:bb:5d:38:df:e9:64:
c0:ad:de:4b:69:d5:75:f0:01:f7:80:05:10:f2:1c:
a7:5d:43:2c:8a:ec:90:0b:52:6d:69:16:0f:f7:b5:
ea:69:4d:f9:d3:93:b6:dc:b9:0b:67:5f:af:35:34:
01:57:2d:81:34:4c:ae:70:d4:70:3d:6b:7f:04:3a:
03:8b:39:f0:04:99:5d:02:f5:22:4e:33:84:3e:c5:
2b:79:dd:07:5a:33:59:4b:43:23:9d:42:35:73:5f:
79:78:13:98:12:af:ef:8d:86:20:fd:82:b5:dd:7d:
bc:3e:8c:27:12:56:26:f3:c6:31:c1:eb:33:93:3e:
41:5c:fd:29:84:2b:25:88:52:64:5f:c5:fb:a8:08:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8D:AD:67:90:21:30:59:24:F1:0F:83:E5:9E:1A:3C:5A:1E:38:84
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/JI2tZ5AhMFkk8Q-D5Z4aPFoeOIQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24147
sbgp-ipAddrBlock: critical
IPv4:
103.235.80.0/22
113.208.96.0-113.208.255.255
113.212.0.0/18
150.242.92.0/22
203.86.32.0/19
211.102.240.0/20
219.235.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:a3:c2:44:aa:11:94:14:39:39:a3:ed:0f:f1:7b:4a:88:5c:
87:e4:e0:68:a0:e5:35:50:14:71:42:d8:29:9f:10:2b:5c:b0:
eb:10:f5:16:ed:30:0b:c6:a9:5b:a3:0f:6b:d0:39:4c:c9:8f:
2d:30:0e:86:60:bb:65:6f:b7:03:8c:a6:fe:59:37:db:c6:90:
19:1d:d3:7a:bd:74:e2:63:76:2f:5d:99:b1:5c:b4:d7:74:d4:
fd:dc:44:60:dc:27:28:33:17:31:20:06:57:58:61:78:52:a3:
8a:2c:82:a0:38:49:0c:57:4e:ab:ec:af:6b:ca:9e:84:66:1f:
26:70:b5:26:4a:5d:db:1b:ae:24:9c:80:81:97:ca:61:29:b6:
5a:c1:ac:a5:eb:d4:e1:f4:44:60:e3:ce:d1:6c:b7:03:cc:ce:
38:00:dc:ab:40:70:d3:2c:67:b7:20:9b:3b:17:51:ee:77:7a:
bd:6c:d7:80:1a:30:ba:e4:fe:18:d5:0b:e1:cf:01:00:2b:b5:
9b:89:6d:06:95:d3:dd:61:f6:00:db:e8:a7:12:42:b3:fa:08:
91:bc:bf:19:5b:69:d2:44:15:9a:dd:26:09:6d:49:9e:0b:bd:
38:b5:5f:7e:91:54:d5:20:e4:74:15:07:43:30:15:97:fd:92:
06:46:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org