Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iAoZ4XKwqssza4AxFcV5AQ1LnHg.cer
File: iAoZ4XKwqssza4AxFcV5AQ1LnHg.cer (raw, json)
Hash identifier: MsYVuyYIcYcIkuL8CqgMN2pSGZ7ruEJqI/kue4KbaD0=
Subject key identifier: 88:0A:19:E1:72:B0:AA:CB:33:6B:80:31:15:C5:79:01:0D:4B:9C:78
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 780A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/iAoZ4XKwqssza4AxFcV5AQ1LnHg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:23 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58842
IP: 43.240.136.0/22
IP: 43.241.76.0/22
IP: 43.242.84.0/22
IP: 103.25.20.0/22
IP: 103.25.36.0/22
IP: 103.240.16.0/22
IP: 103.240.244.0/22
IP: 113.11.192.0/19
IP: 2404:9b80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30730 (0x780a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:23 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=880A19E172B0AACB336B803115C579010D4B9C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:70:59:de:cc:ec:b4:ef:41:37:09:4c:08:
89:8a:35:78:d3:1b:48:cf:a0:db:51:d8:c0:40:c0:
04:92:db:2b:8a:3f:89:08:7e:f5:c1:d7:82:4e:14:
38:f9:3b:e9:32:dd:6b:c6:8b:1d:99:3b:c9:6a:0c:
92:f8:b3:29:54:84:6a:3b:d7:25:d3:d8:28:cf:d2:
98:a1:f5:ec:bf:45:35:d9:a2:0b:fb:78:7b:4d:65:
1f:bb:a6:21:74:ce:ab:7d:00:26:27:6e:0a:e0:b1:
fe:b1:41:c2:2f:a9:30:18:c0:d7:48:ff:4b:6c:85:
32:2b:e7:91:c1:b3:b2:02:0a:6f:f2:f1:8b:f5:61:
8e:cd:df:dc:77:af:6d:ea:50:74:8e:92:d4:00:6a:
0d:55:b7:96:e8:4a:e9:75:6d:44:72:4b:e0:c7:ea:
a5:e6:de:76:78:a5:ac:fd:27:be:bd:82:65:f9:68:
2e:12:be:cc:3e:80:09:e6:1c:10:c2:62:92:47:3f:
68:de:69:8a:9f:81:1e:95:96:a3:29:db:d1:20:58:
35:89:77:25:86:39:83:1b:7d:eb:1b:3d:3d:72:50:
13:e2:0b:09:99:28:46:ce:ec:83:e8:ba:a0:64:46:
47:8c:d4:1d:82:f8:04:e6:6a:05:d4:d2:53:82:de:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:19:E1:72:B0:AA:CB:33:6B:80:31:15:C5:79:01:0D:4B:9C:78
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/589/iAoZ4XKwqssza4AxFcV5AQ1LnHg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58842
sbgp-ipAddrBlock: critical
IPv4:
43.240.136.0/22
43.241.76.0/22
43.242.84.0/22
103.25.20.0/22
103.25.36.0/22
103.240.16.0/22
103.240.244.0/22
113.11.192.0/19
IPv6:
2404:9b80::/32
Signature Algorithm: sha256WithRSAEncryption
3c:2f:3b:75:7b:b3:5a:6e:ee:61:9f:0e:46:8f:96:39:1e:80:
61:e4:0e:d8:2c:88:77:df:59:98:9b:a3:0c:ef:90:78:8b:45:
4f:10:32:aa:0d:b5:e5:4d:75:7d:ce:cb:db:41:8f:d6:0d:18:
e0:d0:d2:1c:6c:7d:91:b4:96:b0:02:4e:93:d5:20:b4:08:b5:
d7:18:56:1d:08:a9:ea:83:c2:3d:25:be:88:8b:ba:40:db:38:
d3:d7:7f:c4:37:2b:14:30:ed:cf:a2:99:91:8a:3a:54:23:5f:
46:61:dc:1a:a6:f7:be:26:32:16:d6:57:1b:f3:75:7c:47:30:
2c:cc:cf:64:89:13:e9:b8:9d:cd:e9:c5:c0:ce:a8:7f:27:15:
0e:1d:f0:47:69:82:54:f4:bc:2b:b9:b0:f3:17:fd:c9:bf:a2:
6b:d8:c7:09:63:0a:57:96:c3:f3:32:1e:bc:69:f3:0a:21:f8:
2b:5a:27:99:4a:77:00:bd:87:02:b6:b5:6e:46:3a:38:a5:36:
e1:ad:23:44:2d:a7:66:00:4f:94:8a:b1:50:5e:f6:1b:f4:6c:
6b:3b:8b:a0:2b:94:99:9c:2a:2b:66:c7:f0:17:3b:23:42:ba:
68:32:a6:02:a1:14:ae:3d:c3:0b:17:a7:52:cb:01:97:44:b7:
aa:19:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org