Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/irwIZMoL7FmxIOryHsqqdSube1I.cer
File: irwIZMoL7FmxIOryHsqqdSube1I.cer (raw, json)
Hash identifier: J/sK5pz+YqjWTbuqrkDXoqA8G9mEr1hsFkMhTnnQUIk=
Subject key identifier: 8A:BC:08:64:CA:0B:EC:59:B1:20:EA:F2:1E:CA:AA:75:2B:9B:7B:52
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 77EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:06:43 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2403:9b00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30702 (0x77ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:06:43 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8ABC0864CA0BEC59B120EAF21ECAAA752B9B7B52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:f3:81:76:7e:8d:2d:af:1d:ed:4a:ee:1c:
70:dd:8a:da:fa:f6:05:50:0f:34:0d:82:f3:63:e8:
35:24:38:8b:26:b4:eb:24:2d:5d:40:ad:9d:bc:a5:
1f:2f:7c:53:80:54:6c:02:8b:15:17:6e:dc:e2:7b:
69:f1:c3:4a:8c:45:2a:64:6c:71:1b:59:bd:d3:a1:
56:a0:16:45:91:63:96:84:28:95:a4:73:be:51:35:
17:16:b3:e8:78:c7:c7:c9:03:38:99:9f:fb:f5:7f:
ee:55:02:cc:22:e3:25:4d:18:61:28:c6:4d:e0:e0:
a3:2a:72:d2:c8:34:3b:67:7b:b2:e8:92:61:e8:67:
bb:ed:c0:5c:b0:56:56:e3:55:88:da:35:68:c9:be:
01:12:19:c6:af:41:98:05:37:4a:0a:b0:a5:90:7f:
9c:43:4a:8e:3c:9d:5a:6a:20:51:5e:f1:2e:9a:90:
eb:be:66:2a:84:01:17:1a:30:d5:5d:73:3e:36:72:
46:f4:fa:3c:16:cd:77:04:c8:9f:fe:20:39:85:0e:
ee:82:3d:df:d7:d0:d0:18:be:ef:c2:4e:ab:82:5b:
09:23:f7:75:bf:8f:ef:0f:d5:c4:6a:f1:8b:f4:c4:
b1:b2:06:0c:15:40:c1:0c:e5:d4:43:1c:66:99:59:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:08:64:CA:0B:EC:59:B1:20:EA:F2:1E:CA:AA:75:2B:9B:7B:52
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/irwIZMoL7FmxIOryHsqqdSube1I.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
44:56:97:98:39:43:90:d8:31:0e:d3:c8:2b:fb:46:71:31:93:
d5:f5:41:6a:1a:8f:4b:23:45:cd:f4:a7:a1:ff:31:39:c8:bd:
00:04:85:06:ac:b9:13:d0:e5:ae:de:29:88:a4:e0:3d:6f:38:
9a:0c:54:d0:e1:b4:ef:b6:a5:2d:2a:7f:5e:76:a5:5c:f0:27:
c8:46:ea:01:fd:f6:43:53:b2:74:ef:ad:70:af:8a:43:cd:eb:
b9:55:7e:e5:43:7d:20:e9:88:06:b9:9b:2b:cf:e9:83:c4:2d:
d1:39:8f:f7:de:45:f5:39:2e:99:3b:af:8c:b2:a1:cb:59:f0:
07:45:41:33:8f:20:3a:ef:2e:fe:44:cc:3f:bc:b8:ac:b0:8a:
14:d0:5b:8e:96:61:88:9e:6b:14:00:7f:d0:e5:f4:57:a3:f4:
40:3b:82:cb:4c:02:1d:62:0b:84:7e:fb:d6:64:93:b7:f6:34:
70:d6:bb:01:6b:29:da:aa:8a:19:27:32:22:85:61:9b:47:14:
33:c0:7a:ec:eb:db:31:34:32:85:b9:c0:c0:38:25:2c:e4:a0:
16:46:cd:2c:54:f4:99:91:70:c9:b5:4f:dc:34:8e:90:3b:7b:
94:76:d4:c0:85:79:5c:35:4a:f5:5d:c6:5a:6b:51:7c:6e:cd:
91:a5:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org