Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
File: fxbsYdIUp0ANAGShh6E9zMHnhUo.cer (raw, json)
Hash identifier: mTUypJJ/GuhGTRaV48hflC7k3o6dHFTMJ3E5e2tXv9I=
Subject key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7AD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 10 Sep 2021 13:35:54 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58859
IP: 43.254.128.0/22
IP: 45.126.100.0/22
IP: 101.49.0.0/16
IP: 103.73.244.0 -- 103.73.251.255
IP: 103.203.100.0/22
IP: 103.236.232.0/22
IP: 103.249.12.0/22
IP: 103.249.192.0/22
IP: 115.31.68.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31442 (0x7ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 10 13:35:54 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:e3:b0:fe:41:f1:16:f2:d0:3e:0d:8f:f5:
f3:93:a0:64:21:7c:76:77:62:b5:e9:fc:40:88:c8:
77:42:fe:c2:b8:74:b5:db:f1:10:a2:82:ed:32:a1:
a1:e9:30:59:b2:6d:a5:35:18:80:dd:69:33:18:fb:
ef:9a:8b:9d:9e:72:5c:ee:9c:53:26:3d:73:a0:53:
0a:33:8d:14:58:0d:6f:99:d3:d0:92:f8:2a:ef:38:
0b:75:42:44:27:66:bc:3c:68:03:d5:0f:ca:e0:02:
60:65:62:fb:86:b0:43:82:71:42:04:7e:56:9d:20:
f3:d3:20:76:ab:31:eb:f1:46:a8:eb:e0:99:38:3b:
7b:9c:5f:e0:b6:a3:17:70:8e:52:50:c1:28:43:d6:
82:a9:8b:09:6b:e4:42:e6:2b:51:58:72:93:33:1c:
c8:0e:8a:bf:b5:c4:2c:fe:9f:4b:79:b2:27:f5:92:
f1:18:f1:cd:7b:90:99:70:97:ea:64:20:93:20:e5:
56:6d:6e:e7:9b:79:5e:a7:8e:dd:f2:f8:16:93:25:
87:d8:27:48:50:67:f7:16:b5:86:b4:19:14:e2:56:
bf:3d:95:d9:4a:41:85:0c:c8:f2:5f:7b:1a:46:0e:
43:49:b7:2d:f1:3b:8a:9d:00:1c:c2:cc:40:ef:fc:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58859
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
45.126.100.0/22
101.49.0.0/16
103.73.244.0-103.73.251.255
103.203.100.0/22
103.236.232.0/22
103.249.12.0/22
103.249.192.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:17:da:30:6e:7a:9b:eb:96:b7:e6:10:b5:f0:3e:72:c8:05:
71:20:eb:d2:fa:59:a5:a8:0a:4b:ed:82:c2:3a:24:92:18:60:
14:f2:1f:4c:7e:ae:e9:f2:b6:c5:5c:59:4e:59:5b:89:39:9a:
c4:f3:e4:73:94:29:0c:0b:56:c4:8c:e1:4a:a3:b3:ab:ba:47:
87:e3:c5:64:34:0c:3b:20:44:a6:cc:00:dc:ac:f4:75:9c:88:
54:5b:e0:06:3d:41:d5:85:45:0e:a0:b2:74:96:a4:15:40:c4:
02:b5:f5:b0:9d:ef:48:a3:47:6d:3f:99:b3:9a:8b:d3:ae:f6:
e8:29:25:b9:ad:e7:55:e7:b8:2b:6c:b6:5b:7f:dd:f1:c9:b2:
63:69:9a:83:16:0f:e0:0b:27:40:89:10:9d:d5:29:85:5a:d2:
24:a7:93:9c:50:42:1b:04:e1:70:0b:f2:7d:cd:2f:84:2e:35:
e6:d6:7e:7b:29:aa:50:c6:f8:2d:10:4e:d7:cf:2f:eb:59:03:
66:31:53:60:e4:f8:5a:51:4e:5e:22:37:23:62:19:58:c3:02:
87:3d:6d:2b:75:14:d0:9a:5b:1f:40:49:7a:7c:2c:2a:ab:6a:
05:97:33:3e:0f:26:ed:72:9e:86:64:c8:f9:19:7d:5d:4e:6b:
08:e4:8b:4a
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICetIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDkxMDEzMzU1NFoXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoN0YxNkVDNjFEMjE0QTc0MDBEMDA2NEExODdBMTNEQ0NDMUU3ODU0
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhC47D+QfEW8tA+DY/1
85OgZCF8dnditen8QIjId0L+wrh0tdvxEKKC7TKhoekwWbJtpTUYgN1pMxj775qL
nZ5yXO6cUyY9c6BTCjONFFgNb5nT0JL4Ku84C3VCRCdmvDxoA9UPyuACYGVi+4aw
Q4JxQgR+Vp0g89Mgdqsx6/FGqOvgmTg7e5xf4LajF3COUlDBKEPWgqmLCWvkQuYr
UVhykzMcyA6Kv7XELP6fS3myJ/WS8RjxzXuQmXCX6mQgkyDlVm1u55t5XqeO3fL4
FpMlh9gnSFBn9xa1hrQZFOJWvz2V2UpBhQzI8l97GkYOQ0m3LfE7ip0AHMLMQO/8
BVUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBR/Fuxh0hSnQA0AZKGHoT3MweeFSjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzYxMy9meGJzWWRJVXAwQU5BR1NoaDZFOXpNSG5oVW8ubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDl6zBWBggrBgEFBQcBBwEB/wRHMEUwQwQC
AAEwPQMEAiv+gAMEAi1+ZAMDAGUxMAwDBAJnSfQDBAJnSfgDBAJny2QDBAJn7OgD
BAJn+QwDBAJn+cADBAJzH0QwDQYJKoZIhvcNAQELBQADggEBAE0X2jBuepvrlrfm
ELXwPnLIBXEg69L6WaWoCkvtgsI6JJIYYBTyH0x+runytsVcWU5ZW4k5msTz5HOU
KQwLVsSM4Uqjs6u6R4fjxWQ0DDsgRKbMANys9HWciFRb4AY9QdWFRQ6gsnSWpBVA
xAK19bCd70ijR20/mbOai9Ou9ugpJbmt51XnuCtstlt/3fHJsmNpmoMWD+ALJ0CJ
EJ3VKYVa0iSnk5xQQhsE4XAL8n3NL4QuNebWfnspqlDG+C0QTtfPL+tZA2YxU2Dk
+FpRTl4iNyNiGVjDAoc9bSt1FNCaWx9ASXp8LCqragWXMz4PJu1ynoZkyPkZfV1O
awjki0o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org