Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SxRuQmJZSpipSv_geHQem3CHXew.cer
File: SxRuQmJZSpipSv_geHQem3CHXew.cer (raw, json)
Hash identifier: UMfTFm9vtTwGt2+t6Tn7HT/6CGtBk8zsxYgHToQQ8qs=
Subject key identifier: 4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 786D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 05 Jun 2021 19:59:40 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 9814
IP: 125.96.0.0 -- 125.98.255.255
IP: 180.202.0.0/15
IP: 210.72.224.0 -- 210.72.247.255
IP: 211.99.0.0/19
IP: 211.160.0.0/16
IP: 2402:3c00::/32
IP: 2408:6000::/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30829 (0x786d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 5 19:59:40 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4B146E4262594A98A94AFFE078741E9B70875DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:e6:80:1d:b2:28:cd:af:65:c7:8d:1e:56:
b1:98:7d:44:43:7e:da:43:72:d8:9b:ed:76:29:19:
9c:2c:6a:25:2d:91:ed:1a:d0:9e:be:65:b7:ad:d9:
e1:d1:41:ed:aa:9a:5c:df:f3:cb:f5:17:01:69:52:
1f:25:05:e8:f9:14:ec:b5:36:a8:19:f7:1b:28:2f:
04:30:0d:32:04:4d:de:b8:01:4d:0d:55:0a:f6:8a:
47:30:f3:88:a3:ac:02:10:c9:66:e3:90:db:f6:01:
44:24:78:a3:4c:9f:2c:48:8a:59:f1:fc:43:30:6d:
cb:94:1e:22:31:5e:44:b9:17:ef:3e:6d:eb:89:a0:
0a:3a:fc:ad:f3:41:4e:d4:bf:ff:de:cf:3f:14:c1:
38:bd:a9:87:21:64:1f:6e:25:c8:cb:8c:78:53:4a:
ec:4f:42:ac:b5:8a:09:4f:22:99:b9:80:ec:d5:c5:
f6:24:be:4c:19:79:6f:a5:ee:9e:d1:16:df:6f:6d:
d8:e6:73:43:e2:d0:46:84:a8:04:f3:90:49:78:59:
07:bd:a3:de:33:41:51:ce:34:e4:46:dd:8d:51:85:
b7:4f:76:3e:d2:2f:71:86:9c:86:a9:c2:fa:2c:34:
b8:d7:5c:c9:71:d2:27:f7:a4:f4:25:9e:bd:be:46:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:6E:42:62:59:4A:98:A9:4A:FF:E0:78:74:1E:9B:70:87:5D:EC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/SxRuQmJZSpipSv_geHQem3CHXew.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9814
sbgp-ipAddrBlock: critical
IPv4:
125.96.0.0-125.98.255.255
180.202.0.0/15
210.72.224.0-210.72.247.255
211.99.0.0/19
211.160.0.0/16
IPv6:
2402:3c00::/32
2408:6000::/24
Signature Algorithm: sha256WithRSAEncryption
1a:72:79:3c:0d:58:e4:02:be:12:db:98:0d:63:34:53:88:35:
84:cc:3b:77:ae:85:f8:8e:3f:f0:c6:53:98:89:89:14:8a:1f:
52:55:55:d2:0c:2b:22:26:15:2d:55:3c:7b:b0:d1:19:f7:ec:
13:ed:2a:27:f4:88:9f:cc:12:7a:13:9a:4c:ad:34:4c:cc:e6:
93:78:a3:a0:a3:51:f7:d8:95:5c:e6:97:f6:f2:35:68:d6:c5:
f8:95:b7:68:7c:eb:1e:d4:87:42:9e:d9:69:5c:ff:2a:6b:36:
d9:89:f3:8e:da:c9:95:08:40:aa:b3:08:3a:e2:4e:17:23:fa:
d7:33:ff:98:f9:58:34:87:1e:50:5b:5d:52:ab:b8:8d:9c:42:
1d:3b:c7:50:67:7f:f8:a7:8b:19:38:e6:e6:72:95:86:ff:f7:
ff:f4:9a:c7:7b:3e:da:63:6d:1d:11:d3:12:cc:bc:0f:2b:76:
84:ea:32:5d:8e:59:87:7b:eb:6c:43:5c:58:a7:d2:42:58:f9:
b6:8c:94:21:d1:10:85:de:d3:4e:01:5a:5a:fc:55:8d:e9:bb:
7c:92:61:d1:ef:0e:80:b7:af:11:22:09:a1:fd:9f:b8:72:75:
0b:a6:05:0b:8e:38:6d:f3:e7:35:b0:88:c7:4a:a2:74:3e:93:
72:07:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org