Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/czH8F6S_DxAkeuZ1SXsWGoOQiPE.cer
File: czH8F6S_DxAkeuZ1SXsWGoOQiPE.cer (raw, json)
Hash identifier: RvCIJZPSi/p6v/4pe69UNuxVLo5RczX/q1OtpOftFUQ=
Subject key identifier: 73:31:FC:17:A4:BF:0F:10:24:7A:E6:75:49:7B:16:1A:83:90:88:F1
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 795B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 05 Jul 2021 01:26:15 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58844
IP: 103.64.24.0 -- 103.64.127.255
IP: 103.64.140.0 -- 103.64.147.255
IP: 103.64.152.0/22
IP: 103.64.208.0/22
IP: 103.67.100.0 -- 103.67.151.255
IP: 103.67.212.0/22
IP: 103.222.112.0 -- 103.222.143.255
IP: 103.222.216.0 -- 103.222.235.255
IP: 103.222.240.0/22
IP: 103.223.16.0 -- 103.223.103.255
IP: 103.223.124.0/22
IP: 103.251.128.0/22
IP: 121.46.0.0/18
IP: 121.46.128.0/18
IP: 2406:5880::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31067 (0x795b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jul 5 01:26:15 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7331FC17A4BF0F10247AE675497B161A839088F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:3c:b0:5e:6c:bf:c3:75:0b:e7:df:03:b8:
d9:8d:1d:d2:1e:9c:32:46:11:3e:1d:59:18:38:9b:
b9:a2:05:c7:ee:ac:01:64:8f:a3:e6:7a:df:fb:d7:
7a:cd:82:ac:54:59:6d:09:34:82:7a:96:1f:33:40:
f9:5e:85:f9:5a:cc:f4:ca:31:ab:a7:a0:69:ca:7f:
40:2b:6a:6b:08:35:31:50:01:66:c7:2d:ad:76:5a:
66:60:9b:de:86:91:77:42:ed:4f:fe:3d:8b:dd:5a:
c6:04:ea:19:0e:61:14:57:4e:2b:a5:65:52:83:90:
3f:0b:b6:23:17:da:1b:2d:08:25:5b:5b:7f:67:6a:
66:4e:70:0f:36:00:12:f8:7a:b8:85:e9:5c:ec:c4:
87:1e:1f:b3:07:69:b9:84:8a:e5:2d:ec:e9:be:25:
46:4e:02:78:86:7a:71:16:e8:4a:fc:6b:0a:20:c9:
d0:0f:26:93:ad:a4:b5:07:ae:d8:9c:6a:65:dc:ee:
27:4c:aa:b7:45:21:2d:7d:bf:d3:2b:59:a7:8e:f3:
a8:c6:0f:ba:f6:0e:7c:14:6d:3f:0d:22:dd:78:e7:
cf:e6:52:58:1f:97:c3:e1:6f:b4:94:ea:21:ea:5d:
dc:c7:a1:ab:cc:41:88:7e:de:53:1c:7b:26:10:aa:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:FC:17:A4:BF:0F:10:24:7A:E6:75:49:7B:16:1A:83:90:88:F1
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/630/czH8F6S_DxAkeuZ1SXsWGoOQiPE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58844
sbgp-ipAddrBlock: critical
IPv4:
103.64.24.0-103.64.127.255
103.64.140.0-103.64.147.255
103.64.152.0/22
103.64.208.0/22
103.67.100.0-103.67.151.255
103.67.212.0/22
103.222.112.0-103.222.143.255
103.222.216.0-103.222.235.255
103.222.240.0/22
103.223.16.0-103.223.103.255
103.223.124.0/22
103.251.128.0/22
121.46.0.0/18
121.46.128.0/18
IPv6:
2406:5880::/32
Signature Algorithm: sha256WithRSAEncryption
1e:7f:9c:d8:fb:6a:bd:b4:74:b2:ce:22:53:1e:f1:60:08:17:
a0:fe:81:c8:f6:1b:50:71:45:7f:d8:9e:63:59:9a:ff:8f:fd:
54:fe:8f:99:e8:11:3c:8d:9a:fd:23:a8:85:1c:66:eb:5d:69:
f0:c5:84:ff:f6:f4:bd:71:ec:af:86:4a:18:8a:f2:a6:b5:38:
d7:34:fd:f1:2c:9e:39:a5:d2:18:00:8f:c3:a3:bd:a4:79:58:
b1:b8:d0:2b:2b:20:d8:d3:de:3a:22:8f:0c:e1:70:1d:21:82:
50:24:72:86:7d:f2:ec:bb:b3:1a:b5:14:7d:39:93:24:dc:96:
6c:f3:97:e9:82:d2:1f:2a:0c:40:ff:7c:a1:3b:67:e4:de:ec:
0c:94:76:b8:92:0e:68:9a:6b:0b:c7:53:1c:d4:cc:df:92:9d:
79:f6:0d:2e:4d:39:94:56:09:95:46:f9:80:73:d9:c0:46:c8:
53:f6:f3:86:55:96:61:36:70:c2:9f:a6:b4:7f:04:23:68:a3:
ca:06:a2:5d:fa:e4:8b:81:03:3a:7d:29:83:d6:d4:75:6e:3d:
d9:d8:80:ad:16:40:2b:71:cf:08:bc:0b:ec:a6:21:3f:5f:70:
18:fe:c1:18:2d:06:55:e6:60:6a:9f:3e:02:37:a9:01:2a:69:
ad:45:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org