Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Pp4Ov57uJbxpYjWzld9iBGrEZk8.cer
File: Pp4Ov57uJbxpYjWzld9iBGrEZk8.cer (raw, json)
Hash identifier: Zmqn/kUhp69qgHzStNNwu6O/nN16HUq5VWgf2/cHGZU=
Subject key identifier: 3E:9E:0E:BF:9E:EE:25:BC:69:62:35:B3:95:DF:62:04:6A:C4:66:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 781A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/Pp4Ov57uJbxpYjWzld9iBGrEZk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:46 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 9394
AS: 24138
AS: 24425
AS: 38370
AS: 63711 -- 63716
IP: 36.192.0.0/11
IP: 43.247.240.0/22
IP: 61.232.0.0 -- 61.237.255.255
IP: 101.144.0.0/12
IP: 103.3.128.0/22
IP: 110.96.0.0/11
IP: 110.192.0.0/11
IP: 114.208.0.0/14
IP: 115.104.0.0/14
IP: 115.123.0.0/16
IP: 115.180.0.0/16
IP: 116.217.0.0/16
IP: 116.219.0.0/16
IP: 118.146.0.0/15
IP: 118.204.0.0/16
IP: 118.245.0.0/16
IP: 120.90.0.0/15
IP: 121.70.0.0/16
IP: 122.64.0.0/11
IP: 123.64.0.0/11
IP: 124.201.0.0/16
IP: 211.98.0.0/16
IP: 221.172.0.0/14
IP: 222.32.0.0/11
IP: 2001:e08::/32
IP: 240a:8000::/21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30746 (0x781a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:46 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=3E9E0EBF9EEE25BC696235B395DF62046AC4664F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:85:eb:39:50:cb:a9:cf:e1:10:f8:1f:da:
2e:62:d1:99:d2:f1:0d:b3:68:9e:7c:4e:ed:e6:91:
f2:87:c5:1b:74:e0:72:66:37:ed:fe:db:45:cc:dc:
00:0c:39:3e:bf:7f:a3:51:db:31:43:8f:0c:6f:c0:
7a:7f:b1:1e:55:f0:6a:f3:48:f4:15:1e:75:81:12:
5e:64:e4:3c:92:2f:4b:b0:91:64:4c:9f:9d:39:88:
7e:f1:c1:5f:ed:e0:26:64:c1:28:50:78:70:08:69:
a5:4f:68:f0:c6:4a:f9:f3:e2:f1:bc:b2:5d:99:6d:
ac:6b:35:91:30:d8:89:f8:7c:93:1f:7f:2f:4a:57:
05:4f:d0:d1:f6:34:1e:bd:2e:01:43:7f:dc:d5:28:
83:b8:c2:c3:5e:a5:22:ed:5c:ba:a9:1e:48:70:b7:
9d:b8:e1:91:19:b1:7c:22:db:2f:b8:71:20:e9:4f:
de:78:6c:9c:d4:09:b2:21:12:a3:17:f2:28:ce:d9:
d4:e1:01:d8:d9:e8:17:e2:66:03:32:f8:37:4f:19:
18:b0:92:4b:be:5e:a6:73:cb:c5:5f:d8:53:d1:4b:
2e:79:3c:6e:0a:f8:f6:1b:e9:91:ab:a5:a2:fd:14:
ab:9c:22:2b:de:14:a1:b9:a3:04:4d:e0:69:e1:5d:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:0E:BF:9E:EE:25:BC:69:62:35:B3:95:DF:62:04:6A:C4:66:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/Pp4Ov57uJbxpYjWzld9iBGrEZk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9394
24138
24425
38370
63711-63716
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0/11
43.247.240.0/22
61.232.0.0-61.237.255.255
101.144.0.0/12
103.3.128.0/22
110.96.0.0/11
110.192.0.0/11
114.208.0.0/14
115.104.0.0/14
115.123.0.0/16
115.180.0.0/16
116.217.0.0/16
116.219.0.0/16
118.146.0.0/15
118.204.0.0/16
118.245.0.0/16
120.90.0.0/15
121.70.0.0/16
122.64.0.0/11
123.64.0.0/11
124.201.0.0/16
211.98.0.0/16
221.172.0.0/14
222.32.0.0/11
IPv6:
2001:e08::/32
240a:8000::/21
Signature Algorithm: sha256WithRSAEncryption
35:46:a4:9d:03:f2:68:15:f6:8c:68:eb:ee:a4:2d:d4:20:d3:
be:22:d5:bb:03:26:91:06:01:93:f4:3c:d2:64:8e:68:ad:b4:
26:16:5b:1f:20:07:95:52:33:69:9e:5b:85:4a:0a:90:5a:94:
16:e8:d2:fe:f6:96:ea:67:ab:49:3a:7c:7e:81:ac:3f:7f:09:
e3:13:b6:92:6d:e0:f4:10:b5:e1:c6:eb:2e:98:9c:5b:fd:a0:
08:3e:e1:d4:e1:6d:d2:98:b1:e1:bc:c2:29:4f:cc:d0:d7:ef:
7d:60:6c:de:7c:26:7f:00:c3:99:8f:dc:57:58:05:2e:bd:b8:
7d:d1:c7:72:17:b1:5a:5c:03:72:f9:ff:3a:c2:de:cf:70:61:
75:0d:2b:9e:9f:0c:d6:b0:36:5d:56:38:10:72:a4:b2:ec:48:
20:30:73:a2:bb:6c:47:12:83:76:cb:37:d2:1e:9b:75:13:30:
e6:6a:06:59:df:c6:16:ba:15:3e:37:3a:73:31:39:1a:bf:19:
d3:e4:fe:c4:2c:7a:9a:40:3e:32:b7:49:34:08:cd:f7:f0:0b:
23:72:55:c8:91:8b:40:89:85:05:f4:f4:6e:45:94:e3:c4:3f:
7c:03:13:9b:07:ab:8d:11:07:67:e9:2b:8c:92:94:12:78:24:
0c:13:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org