Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
File: UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer (raw, json)
Hash identifier: wZ7tN3pRJGoJmLgD0Vdh2Sl/sZ4k6dugFZpU8zyFOpM=
Subject key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7934
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Jul 2021 20:04:47 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 24426
IP: 36.0.64.0/18
IP: 43.236.0.0/16
IP: 43.239.0.0 -- 43.239.51.255
IP: 43.246.0.0 -- 43.246.99.255
IP: 101.78.32.0/19
IP: 103.35.0.0 -- 103.35.51.255
IP: 103.236.0.0 -- 103.236.99.255
IP: 110.44.144.0/20
IP: 119.10.0.0/17
IP: 123.100.0.0/19
IP: 202.10.64.0/20
IP: 2400:9a00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31028 (0x7934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 1 20:04:47 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:c2:a8:93:78:e1:b4:7b:d6:97:05:be:54:
26:0f:77:b0:c8:17:a4:c8:df:99:82:2c:2b:04:44:
49:21:ee:07:47:21:2a:ea:b5:66:0b:0d:62:35:29:
d2:f6:89:5c:f7:09:1e:cb:70:a2:bd:75:b9:37:5e:
ba:83:bb:96:52:4f:68:30:79:af:4f:01:d6:d7:cb:
0f:cc:c9:da:ac:be:4f:a8:ad:2f:31:66:86:be:4e:
cf:c1:72:bb:1a:ef:2f:ed:ec:fd:d1:c2:51:d3:58:
bf:98:3a:15:6b:44:a1:4f:e5:41:5b:8f:6a:00:79:
db:57:46:3b:27:c6:d1:07:74:28:69:cd:b4:77:ea:
16:b2:2f:12:c4:0f:e3:ca:e2:33:e0:b6:b4:8e:2b:
5a:5e:7a:eb:b7:8e:09:8b:70:d6:2e:9b:f8:e0:33:
a0:c6:d7:fa:c6:b9:0f:f7:85:08:ce:42:2c:fa:f8:
e9:d2:ae:15:ce:93:80:26:26:12:2d:bf:f4:8a:1c:
08:9f:88:5e:67:51:cb:ca:46:6e:16:21:a8:59:60:
9d:46:6b:61:1a:07:f5:2f:01:a3:b4:26:32:8d:e2:
3f:df:cc:5d:74:11:c1:7c:05:24:a7:82:4e:17:6e:
3b:8b:20:fb:5e:84:f0:c4:dc:11:55:2f:df:c6:bd:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24426
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
43.236.0.0/16
43.239.0.0-43.239.51.255
43.246.0.0-43.246.99.255
101.78.32.0/19
103.35.0.0-103.35.51.255
103.236.0.0-103.236.99.255
110.44.144.0/20
119.10.0.0/17
123.100.0.0/19
202.10.64.0/20
IPv6:
2400:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:5e:75:f9:91:d0:b3:d8:74:cf:12:0d:85:aa:a4:7e:b9:78:
00:c4:69:53:be:a6:9d:80:20:ea:7c:8c:68:83:9a:06:d8:65:
a8:96:18:58:48:fc:73:bb:46:a2:7a:a5:75:2a:93:94:c8:9d:
cc:5e:e9:78:7b:cc:5d:e0:e1:29:93:d4:98:05:f4:7e:f7:fc:
3c:e0:59:65:cf:9c:13:b8:a6:de:91:46:e6:73:09:59:7f:f3:
7f:5d:9a:52:cb:d1:56:4c:a8:1e:90:3c:6d:d0:3e:6f:a7:8e:
e6:96:6c:b5:85:ce:e8:7b:97:56:1a:17:0d:fe:b6:5a:21:3b:
04:6b:6c:b2:73:b5:ce:ac:dc:fa:1f:37:e8:db:43:4a:8e:b7:
d1:0d:7c:47:09:ef:72:ee:8a:3b:69:d6:93:02:a7:b3:36:70:
98:ca:3b:33:a1:ee:e7:07:fb:3c:43:f2:cb:55:51:f1:8e:1d:
03:b0:ca:8f:11:30:f0:87:a2:68:e8:96:f3:b6:9d:05:e2:42:
0d:3a:5d:df:eb:ae:ec:6e:af:f7:f8:12:dd:a3:54:28:e9:94:
0f:5f:59:79:38:88:79:20:0d:dc:87:a3:9c:85:b5:ca:95:52:
2b:3a:d9:d2:21:32:28:e5:ff:b8:5d:de:d7:8e:f3:34:00:d3:
e6:e3:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org