Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ePCVlNWH8gOfpH5lY8xd1aoA1mg.cer
File: ePCVlNWH8gOfpH5lY8xd1aoA1mg.cer (raw, json)
Hash identifier: kRXnSjpfvO8eIujy2qNGYbrMGd9ZF6opCdgT0dxY+yY=
Subject key identifier: 78:F0:95:94:D5:87:F2:03:9F:A4:7E:65:63:CC:5D:D5:AA:00:D6:68
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ePCVlNWH8gOfpH5lY8xd1aoA1mg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:41 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30744 (0x7818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:41 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=78F09594D587F2039FA47E6563CC5DD5AA00D668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:dd:e4:80:28:df:14:45:08:33:34:c1:0a:
58:2c:78:01:0c:9c:af:94:eb:df:3d:21:00:3d:8f:
06:b5:5b:c6:c4:b6:5c:63:9b:55:80:96:b7:f6:91:
74:1d:69:15:4c:26:67:0e:2f:65:b3:cc:de:b0:26:
a9:cc:d1:3c:38:18:65:74:9c:eb:2a:0b:17:c9:a7:
d8:e6:1b:25:e5:55:3d:38:71:6e:9c:47:2a:dc:d2:
f2:2b:d4:7e:cb:75:6e:e9:25:32:e5:2d:b5:41:b6:
6d:fa:47:11:bc:e0:5b:e4:b8:5e:c5:2b:22:39:ce:
8b:62:c4:9a:ec:41:0b:23:4b:a5:a7:08:36:3e:d0:
a9:16:54:0f:53:f0:13:10:d1:31:26:55:a2:90:a8:
e1:73:bf:bb:d2:cb:88:19:d9:35:0f:b2:a3:eb:22:
58:15:2f:4b:2c:d8:04:0d:43:a5:1a:6c:04:13:31:
54:13:49:4f:bd:05:99:a3:f4:f0:25:59:86:96:f1:
49:5b:1d:1a:3b:ad:db:9e:50:62:10:55:c6:d0:1e:
ff:12:c5:85:63:90:46:f2:59:4f:b9:c6:84:83:10:
c5:bd:0c:50:f2:1a:fa:6b:79:20:88:fd:6b:08:34:
0e:34:c2:05:a6:7c:23:41:a2:bd:ef:c7:a0:cf:08:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:95:94:D5:87:F2:03:9F:A4:7E:65:63:CC:5D:D5:AA:00:D6:68
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ePCVlNWH8gOfpH5lY8xd1aoA1mg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
94:78:e4:c5:be:79:dd:71:be:77:2c:12:42:b4:eb:b9:ff:cb:
04:bf:f2:c1:b6:c4:aa:97:0a:03:11:f3:8d:d6:59:95:e8:17:
fe:88:de:ae:d4:7b:6a:8f:ff:81:3d:4e:a6:09:9b:ba:a9:5f:
c1:e3:a8:63:fa:d9:0e:6a:94:e9:95:ba:73:59:ff:f8:68:e0:
45:16:2a:8d:96:c2:14:cf:cd:a0:95:7a:c6:7f:f1:99:24:f8:
f3:f6:51:13:96:05:23:12:54:2f:20:3e:b7:20:15:8f:fb:b1:
26:03:cc:8e:16:78:6d:8d:dd:c1:dc:c9:1c:16:19:22:41:a6:
af:4a:a1:5d:1e:ba:a8:86:ea:46:a5:f5:65:e6:4e:9b:42:5f:
ba:d6:fe:e9:8a:f1:cf:81:3a:9f:2f:03:73:5b:42:3d:93:70:
c1:9c:60:4e:75:23:f2:4d:0e:22:6e:7a:75:ee:37:12:03:98:
b8:17:c6:15:6c:c0:07:9a:c6:3f:98:fd:10:1c:33:32:55:35:
6c:f4:74:ce:6a:e0:cc:f7:b6:d3:d6:20:94:8e:09:41:c7:43:
57:4f:52:11:4c:27:c9:2e:d1:23:6b:03:fb:f5:a4:b9:8b:33:
82:84:4b:37:39:1d:1e:fe:ad:0d:cd:6a:8a:56:40:ab:9b:b1:
dc:41:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org