Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_3vXV5aUeRb8mGN4I8FpSRXD1aw.cer
File: _3vXV5aUeRb8mGN4I8FpSRXD1aw.cer (raw, json)
Hash identifier: tkDkaJaLrpDbc8hENSzGVVeSLYaEI3boCn+qEyx8amY=
Subject key identifier: FF:7B:D7:57:96:94:79:16:FC:98:63:78:23:C1:69:49:15:C3:D5:AC
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 777C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/_3vXV5aUeRb8mGN4I8FpSRXD1aw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:04:32 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: IP: 43.224.200.0/22
IP: 43.229.40.0/22
IP: 43.254.184.0/22
IP: 45.114.196.0/22
IP: 45.123.136.0/22
IP: 103.43.220.0/22
IP: 103.54.160.0/22
IP: 103.199.164.0/22
IP: 103.200.68.0/22
IP: 137.59.88.0/22
IP: 210.7.60.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30588 (0x777c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:04:32 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=FF7BD75796947916FC98637823C1694915C3D5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:9c:97:12:fc:e4:e3:9e:75:7e:2d:9d:86:
90:fd:47:18:6f:d2:d8:89:f3:7d:da:26:78:a1:ce:
04:a4:42:31:e4:c9:df:91:05:56:3b:f6:36:40:e8:
f2:81:ee:93:11:f1:07:03:11:49:3a:73:11:f2:19:
07:de:50:9c:d0:09:e9:6c:e4:88:f7:a7:40:ee:3c:
fa:df:10:32:9f:f7:c3:ff:69:a6:87:fb:db:ac:ca:
fb:fd:95:ee:f2:cc:83:c9:e9:cf:0d:02:25:96:f6:
5c:19:3d:4e:ac:a7:2d:dd:83:a7:5c:c6:4b:ac:c5:
40:db:53:8f:7d:f6:a8:9f:33:21:40:3f:25:02:32:
21:00:96:27:98:16:47:01:75:2e:8e:bb:0e:e0:67:
25:09:b3:5d:35:d2:4d:ec:f9:b8:66:14:5a:7e:53:
c3:76:59:7b:15:4c:e3:e9:69:1d:6d:c9:91:94:20:
68:72:4b:21:bc:a0:d8:ab:ec:ca:e2:8b:ef:74:99:
c6:a3:2c:ac:b5:01:9b:76:18:f9:84:3e:24:30:67:
f3:b3:14:45:e3:e6:00:75:93:5a:a4:31:2d:00:c2:
6e:65:f6:ee:47:32:94:f9:38:17:6e:35:f3:90:7c:
af:a7:87:cc:21:2b:ca:86:85:49:41:8b:ea:c0:0e:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:D7:57:96:94:79:16:FC:98:63:78:23:C1:69:49:15:C3:D5:AC
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/_3vXV5aUeRb8mGN4I8FpSRXD1aw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.200.0/22
43.229.40.0/22
43.254.184.0/22
45.114.196.0/22
45.123.136.0/22
103.43.220.0/22
103.54.160.0/22
103.199.164.0/22
103.200.68.0/22
137.59.88.0/22
210.7.60.0/22
Signature Algorithm: sha256WithRSAEncryption
20:a7:30:e6:18:a8:42:ee:9a:6b:99:60:48:74:d5:72:40:a5:
89:7d:0e:ec:d8:8d:ed:20:76:4f:07:96:4e:01:d9:59:1f:f0:
cb:d2:cb:47:48:40:14:63:72:b7:83:d7:96:a9:65:e7:b8:ed:
06:4b:99:fd:d5:38:82:f9:80:5d:cd:b6:85:f5:4d:88:c8:f6:
15:a0:28:97:15:95:f0:24:53:0c:20:42:a7:84:37:6c:de:bb:
45:0b:c8:48:36:62:50:ad:ac:4d:9d:61:56:a0:86:84:41:c8:
0d:4e:b5:7c:5b:3f:84:19:4b:1f:da:4b:55:4b:27:72:c5:18:
23:42:97:a1:1e:27:cb:73:12:56:36:a6:7f:32:d1:ad:1d:5b:
56:66:a3:92:8b:7e:ef:f8:ca:1a:2a:1a:1b:e4:b0:25:6a:4c:
d1:43:94:a0:6c:9d:71:e7:5c:7d:a9:e6:4d:b6:b3:3d:01:c8:
cd:57:00:18:fb:59:57:2d:f4:56:c5:2d:bb:2a:6f:f6:59:34:
4e:5a:6a:43:f5:46:77:2c:32:82:74:7e:ca:42:0c:6f:09:2f:
ea:7e:a0:9a:47:00:aa:09:26:31:a1:18:1c:97:7e:66:20:57:
eb:67:ce:c9:e7:cc:72:10:e8:ba:e2:9d:c6:1c:4d:d3:9f:21:
0e:5c:e2:c3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICd3wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDQzMloXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoRkY3QkQ3NTc5Njk0NzkxNkZDOTg2Mzc4MjNDMTY5NDkxNUMzRDVB
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKA4nJcS/OTjnnV+LZ2G
kP1HGG/S2InzfdomeKHOBKRCMeTJ35EFVjv2NkDo8oHukxHxBwMRSTpzEfIZB95Q
nNAJ6WzkiPenQO48+t8QMp/3w/9ppof726zK+/2V7vLMg8npzw0CJZb2XBk9Tqyn
Ld2Dp1zGS6zFQNtTj332qJ8zIUA/JQIyIQCWJ5gWRwF1Lo67DuBnJQmzXTXSTez5
uGYUWn5Tw3ZZexVM4+lpHW3JkZQgaHJLIbyg2KvsyuKL73SZxqMsrLUBm3YY+YQ+
JDBn87MURePmAHWTWqQxLQDCbmX27kcylPk4F24185B8r6eHzCEryoaFSUGL6sAO
6H8CAwEAAaOCApEwggKNMB0GA1UdDgQWBBT/e9dXlpR5FvyYY3gjwWlJFcPVrDAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF
BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA4
OS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8xMDg5L18zdlhWNWFVZVJiOG1HTjRJOEZwU1JYRDFhdy5tZnQwMQYI
KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww
WwYIKwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAIr4MgDBAIr5SgDBAIr/rgDBAIt
csQDBAIte4gDBAJnK9wDBAJnNqADBAJnx6QDBAJnyEQDBAKJO1gDBALSBzwwDQYJ
KoZIhvcNAQELBQADggEBACCnMOYYqELummuZYEh01XJApYl9DuzYje0gdk8Hlk4B
2Vkf8MvSy0dIQBRjcreD15apZee47QZLmf3VOIL5gF3NtoX1TYjI9hWgKJcVlfAk
UwwgQqeEN2zeu0ULyEg2YlCtrE2dYVaghoRByA1OtXxbP4QZSx/aS1VLJ3LFGCNC
l6EeJ8tzElY2pn8y0a0dW1Zmo5KLfu/4yhoqGhvksCVqTNFDlKBsnXHnXH2p5k22
sz0ByM1XABj7WVct9FbFLbsqb/ZZNE5aakP1RncsMoJ0fspCDG8JL+p+oJpHAKoJ
JjGhGByXfmYgV+tnzsnnzHIQ6LrincYcTdOfIQ5c4sM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org