Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Y9dYTpffdDNHYIb2BX6l5k16bZA.cer
File: Y9dYTpffdDNHYIb2BX6l5k16bZA.cer (raw, json)
Hash identifier: oYCxYkH9GYgKCXu74JSSDCSqdqH4Ubda8fmXVFmugME=
Subject key identifier: 63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7E9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 16 Feb 2022 08:55:50 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.16.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0 -- 211.155.115.255
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32411 (0x7e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 16 08:55:50 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=63D7584E97DF7433476086F6057EA5E64D7A6D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:26:27:40:91:33:8f:6a:80:9d:8c:73:fa:
0b:d4:56:94:6f:be:b8:3e:21:88:e0:e0:33:51:98:
aa:32:8a:13:c5:6f:dd:fc:c9:4e:05:4c:b7:09:9d:
e7:81:1e:e3:ab:fe:91:88:14:30:b2:9f:d8:a0:f5:
1c:a8:1e:cb:e8:15:8d:0c:85:32:96:a4:1c:55:c4:
7d:53:d7:4a:28:a9:95:90:e5:73:41:00:72:58:4c:
87:0c:1f:f1:21:40:4b:ea:51:1f:92:11:37:34:47:
f2:42:a7:a5:d2:45:1b:56:cf:c6:1a:c3:ef:d3:1c:
ca:59:c2:b3:53:21:14:0a:4e:04:aa:ae:91:82:02:
5c:57:0b:84:e0:f0:09:30:1e:2a:0b:d1:7a:42:08:
88:0c:fe:bb:04:f5:75:b6:10:d5:21:5c:4c:d6:7e:
35:55:51:9d:f2:82:75:21:7f:7a:5b:d8:7d:62:dd:
33:2f:09:02:97:19:34:10:a9:5f:2c:23:61:da:68:
34:48:88:94:80:3d:df:91:67:b7:41:cc:29:69:03:
e9:9c:1b:45:45:da:2e:d2:85:13:61:da:4b:78:1f:
bb:ad:1f:8a:0f:69:3a:63:82:2f:23:3a:1b:bd:8a:
c7:42:bb:7c:54:57:01:84:32:6b:83:df:9a:c3:68:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.16.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0-211.155.115.255
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
a4:cf:4d:23:df:e7:2e:23:e4:31:3b:70:5d:a5:dc:78:75:91:
96:d7:77:c5:d5:3f:40:51:74:15:9f:f8:f7:d6:f4:2b:19:6c:
17:0d:ae:e8:71:4e:5e:57:52:ee:10:13:0e:ce:2f:96:0a:e9:
17:32:00:72:19:55:a4:c3:63:83:68:a1:2f:39:73:fd:4b:3d:
56:07:2e:23:44:89:bc:f9:cf:ea:06:9b:dd:2d:aa:a0:f8:16:
43:98:d6:66:57:96:a3:17:c9:6e:a2:63:ad:f7:b6:ce:8a:9b:
af:5e:0e:d4:44:84:45:12:23:8f:c1:7f:97:63:0f:f1:e0:be:
0e:bd:20:04:65:fe:43:38:fd:7a:b9:bc:48:9f:4f:28:f0:ec:
bb:ee:21:8c:e6:2f:23:92:60:4e:d6:8d:56:95:b6:e7:7c:5e:
a3:b3:cf:60:ba:32:18:3d:5f:0b:68:59:2c:77:5c:0e:53:e8:
ba:81:54:81:d3:0c:c4:73:32:58:49:bc:f8:8f:4f:48:08:f4:
d8:70:5d:f0:fb:b1:81:d4:f3:be:3a:b4:1b:59:e0:c6:11:85:
93:c7:85:f9:a2:bc:c8:ff:c1:1f:42:f0:17:cd:3d:ef:68:21:
8f:60:5f:88:d7:97:0c:fc:d5:ee:19:8f:40:41:27:64:63:8c:
71:fb:5c:3e
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgICfpswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIyMDIxNjA4NTU1MFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoNjNENzU4NEU5N0RGNzQzMzQ3NjA4NkY2MDU3RUE1RTY0RDdBNkQ5
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKPaJidAkTOPaoCdjHP6
C9RWlG++uD4hiODgM1GYqjKKE8Vv3fzJTgVMtwmd54Ee46v+kYgUMLKf2KD1HKge
y+gVjQyFMpakHFXEfVPXSiiplZDlc0EAclhMhwwf8SFAS+pRH5IRNzRH8kKnpdJF
G1bPxhrD79McylnCs1MhFApOBKqukYICXFcLhODwCTAeKgvRekIIiAz+uwT1dbYQ
1SFcTNZ+NVVRnfKCdSF/elvYfWLdMy8JApcZNBCpXywjYdpoNEiIlIA935Fnt0HM
KWkD6ZwbRUXaLtKFE2HaS3gfu60fig9pOmOCLyM6G72Kx0K7fFRXAYQya4PfmsNo
aBkCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRj11hOl990M0dghvYFfqXmTXptkDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIx
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzYyMS9ZOWRZVHBmZmRETkhZSWIyQlg2bDVrMTZiWkEubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDl5jCBnAYIKwYBBQUHAQcBAf8EgYwwgYkw
XAQCAAEwVgMEAhsAhAMEAivySAMEAi13PAMEAi1+eAMEAmcbBAMEAmc7cAMEAmdA
nAMEAmdA1AMEA2dJiAMEAmdREAMEAmfs/AMEApbyYDAMAwQF05tgAwQC05twMCkE
AgACMCMDBQAkAGDAAwUAJABzwAMFACQAdMADBQAkAtmAAwUAJAd9ADANBgkqhkiG
9w0BAQsFAAOCAQEApM9NI9/nLiPkMTtwXaXceHWRltd3xdU/QFF0FZ/499b0Kxls
Fw2u6HFOXldS7hATDs4vlgrpFzIAchlVpMNjg2ihLzlz/Us9VgcuI0SJvPnP6gab
3S2qoPgWQ5jWZleWoxfJbqJjrfe2zoqbr14O1ESERRIjj8F/l2MP8eC+Dr0gBGX+
Qzj9erm8SJ9PKPDsu+4hjOYvI5JgTtaNVpW253xeo7PPYLoyGD1fC2hZLHdcDlPo
uoFUgdMMxHMyWEm8+I9PSAj02HBd8PuxgdTzvjq0G1ngxhGFk8eF+aK8yP/BH0Lw
F80972ghj2BfiNeXDPzV7hmPQEEnZGOMcftcPg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org