Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Ldu8dES9_nBiVsH20C7jIRD144c.cer
File: Ldu8dES9_nBiVsH20C7jIRD144c.cer (raw, json)
Hash identifier: 9Otd+DV3R9hR7UMZ/wDcu0JANlqmywwgNRyZfgqs6ns=
Subject key identifier: 2D:DB:BC:74:44:BD:FE:70:62:56:C1:F6:D0:2E:E3:21:10:F5:E3:87
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/Ldu8dES9_nBiVsH20C7jIRD144c.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:11 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 59037
AS: 137803
IP: 43.225.180.0/22
IP: 43.227.152.0 -- 43.227.183.255
IP: 43.227.192.0/19
IP: 43.228.0.0/19
IP: 43.228.40.0 -- 43.228.71.255
IP: 43.230.72.0/22
IP: 103.46.12.0 -- 103.46.139.255
IP: 103.49.108.0/22
IP: 2403:1f80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30626 (0x77a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:11 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2DDBBC7444BDFE706256C1F6D02EE32110F5E387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:66:3f:2c:2d:3f:50:ab:96:15:b6:1a:46:
61:ca:aa:35:7b:3e:0e:c4:be:fb:0e:b3:78:6c:c9:
29:39:2e:96:cf:f0:f4:3e:6f:cb:64:d6:09:1f:76:
75:c8:9b:b0:eb:14:c9:cd:0b:74:d9:a0:05:48:32:
80:81:17:c4:b2:f0:d4:d1:07:86:ee:90:2c:8e:55:
d8:4e:fb:b1:e9:e6:0a:a7:66:ac:9b:67:fc:58:de:
d4:33:75:75:f5:b0:c4:e7:8f:19:c2:90:56:63:76:
a2:51:7c:e0:09:26:9c:fd:10:63:38:de:02:6e:4d:
0e:d4:bd:41:ff:88:d6:cb:78:de:33:81:fd:38:26:
bc:6d:0d:2b:98:4b:26:c8:fd:4c:2e:3e:5f:7d:29:
6e:6f:01:b9:45:70:2f:7e:2f:5c:bd:fa:56:c1:2c:
db:eb:8a:ab:8d:ae:30:19:06:f5:ea:b6:98:7a:46:
c4:d4:ac:b5:28:1f:1d:1f:a5:7b:ad:cd:11:be:5f:
12:c3:35:c0:bc:2a:00:7d:66:9d:ea:c1:c4:9d:c0:
a9:ca:ea:28:5d:23:a8:6a:b5:a1:3a:df:c2:0a:b2:
5c:13:fc:1e:20:a0:55:c3:f1:69:43:9c:0f:50:12:
35:99:a8:a4:67:ce:d1:6c:06:87:ac:e4:0f:b1:3e:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:BC:74:44:BD:FE:70:62:56:C1:F6:D0:2E:E3:21:10:F5:E3:87
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/Ldu8dES9_nBiVsH20C7jIRD144c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59037
137803
sbgp-ipAddrBlock: critical
IPv4:
43.225.180.0/22
43.227.152.0-43.227.183.255
43.227.192.0/19
43.228.0.0/19
43.228.40.0-43.228.71.255
43.230.72.0/22
103.46.12.0-103.46.139.255
103.49.108.0/22
IPv6:
2403:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
a9:a9:57:e7:9f:eb:6a:6e:d7:81:a8:db:f4:eb:54:cd:b3:ff:
f4:75:bd:0b:6f:79:0a:a2:d7:fa:5b:18:8e:e7:5a:69:1f:6c:
5e:92:b9:0f:74:36:fc:92:d5:7e:eb:25:bd:46:9b:c1:05:ac:
fc:d8:03:81:fb:f1:bc:06:73:dc:64:c7:44:8b:64:ee:02:78:
7f:52:a3:84:84:ca:ba:fc:6f:8f:3b:bf:79:36:d7:a7:e5:09:
7b:0f:cc:33:d9:84:49:5d:3d:d7:89:90:49:67:25:6d:f8:1a:
78:58:c3:11:82:c5:ea:06:a1:c2:24:9d:d7:90:e9:58:0f:2c:
1b:e3:3b:57:05:50:52:18:01:53:e1:2c:84:8b:f5:97:ac:6a:
d8:f3:99:e2:f2:c5:95:8b:10:25:d8:41:85:1a:4d:18:bc:c0:
13:ca:a7:10:ba:55:68:e7:b9:01:a1:c8:b7:dc:bf:c5:ae:33:
91:06:e2:a3:b8:55:85:bf:c2:83:63:75:d6:e9:ad:b4:ea:85:
95:19:aa:ce:e2:15:e4:f3:52:74:5c:7e:10:2d:33:34:e4:58:
0e:a9:49:9a:bd:46:84:c5:db:e8:3b:db:4e:a7:c4:23:8e:a1:
e2:77:fe:f8:31:b5:2a:08:9b:84:5a:53:f4:c2:28:23:55:cf:
40:6c:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org