Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/l72y2FdLqCMxGwQqUWYnceCMsec.cer
File: l72y2FdLqCMxGwQqUWYnceCMsec.cer (raw, json)
Hash identifier: Pw4bquOt2Gsvnv9JApDvEF4Mnt5COWG4WvS5zpI2fS8=
Subject key identifier: 97:BD:B2:D8:57:4B:A8:23:31:1B:04:2A:51:66:27:71:E0:8C:B1:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7E97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 16 Feb 2022 08:48:42 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 24403 -- 24404
AS: 37967
AS: 38339
AS: 38353
AS: 45099 -- 45100
IP: 42.51.0.0/16
IP: 49.4.128.0 -- 49.5.255.255
IP: 58.99.128.0/17
IP: 61.4.80.0/22
IP: 101.36.128.0/17
IP: 103.70.8.0/22
IP: 106.2.160.0 -- 106.3.15.255
IP: 106.3.32.0 -- 106.3.95.255
IP: 106.3.160.0/20
IP: 106.3.208.0 -- 106.3.255.255
IP: 110.173.0.0/19
IP: 110.232.32.0/19
IP: 114.64.0.0 -- 114.66.63.255
IP: 114.66.82.0 -- 114.66.127.255
IP: 114.110.0.0/20
IP: 114.112.4.0 -- 114.112.13.255
IP: 114.112.16.0 -- 114.112.95.255
IP: 114.112.108.0 -- 114.112.135.255
IP: 114.112.152.0 -- 114.112.199.255
IP: 114.112.224.0 -- 114.113.195.255
IP: 114.113.204.0 -- 114.113.223.255
IP: 114.113.240.0/20
IP: 115.100.0.0/14
IP: 116.69.0.0/17
IP: 116.70.0.0/18
IP: 116.90.80.0/20
IP: 116.196.0.0 -- 116.196.13.255
IP: 116.196.16.0 -- 116.196.63.255
IP: 116.255.128.0/17
IP: 119.40.0.0/18
IP: 119.57.0.0/16
IP: 119.63.32.0/19
IP: 121.52.208.0/20
IP: 121.58.144.0/20
IP: 121.79.128.0/18
IP: 121.101.208.0/20
IP: 121.201.0.0/17
IP: 122.14.192.0/18
IP: 122.49.0.0/18
IP: 122.102.0.0/20
IP: 122.112.0.0/19
IP: 122.112.64.0/18
IP: 122.115.16.0/20
IP: 122.115.64.0 -- 122.115.223.255
IP: 122.115.240.0/20
IP: 122.198.64.0/22
IP: 122.200.96.0/19
IP: 123.58.96.0/19
IP: 123.108.208.0/20
IP: 124.248.32.0/19
IP: 125.61.128.0/17
IP: 175.26.0.0/16
IP: 180.185.0.0 -- 180.186.255.255
IP: 182.50.0.0/22
IP: 202.69.4.0/23
IP: 202.142.16.0/20
IP: 203.80.144.0/20
IP: 203.135.160.0/20
IP: 203.171.224.0/20
IP: 203.191.16.0/20
IP: 210.2.16.0/21
IP: 210.14.128.0/19
IP: 210.56.192.0/19
IP: 210.74.0.0/19
IP: 211.100.96.0/19
IP: 211.102.192.0/20
IP: 218.241.0.0/19
IP: 218.241.64.0/19
IP: 218.245.0.0 -- 218.245.47.255
IP: 219.232.224.0/19
IP: 223.252.128.0/18
IP: 223.252.224.0/19
IP: 2401:e00::/32
IP: 2401:ba00::/32
IP: 2401:be00::/32
IP: 2401:c200::/32
IP: 2401:c600::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32407 (0x7e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 16 08:48:42 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=97BDB2D8574BA823311B042A51662771E08CB1E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f5:f2:27:9e:ec:83:9b:8d:25:6c:8d:8e:51:
0c:f1:36:7b:92:37:aa:49:d0:20:42:52:e2:2d:bd:
3e:fa:d7:d1:e4:be:a0:09:45:d2:1e:c4:71:6c:d7:
40:fc:d6:db:fb:12:0f:31:55:93:73:cb:bd:5d:bd:
2f:47:73:89:f0:77:0e:59:c5:ec:cf:ea:77:0f:b2:
5c:7d:22:93:6d:da:7c:ae:54:38:7d:30:62:e4:ee:
26:56:b0:76:f0:aa:7a:92:4d:ac:9f:e6:6c:5a:eb:
f9:27:9a:1b:1f:5d:5a:1f:af:33:c8:6e:88:78:6f:
8a:9c:99:8b:f0:67:f7:4b:6f:bc:b7:1c:d9:f7:c5:
69:42:7d:db:73:89:1d:00:fa:66:a0:54:31:8d:97:
d6:03:f2:43:4c:8a:48:15:ec:5e:d7:6d:db:f3:f6:
f9:29:01:ef:1b:4e:f2:12:04:23:58:b3:97:d3:93:
8d:c5:98:7f:55:bf:6e:11:aa:a6:9c:67:29:6a:9a:
ac:64:91:34:f4:da:52:be:98:4b:0a:c9:15:52:a9:
41:61:6f:26:9c:53:6f:6e:92:78:6c:77:8c:1e:a1:
fb:94:64:7d:ce:0f:fd:a6:8b:87:b3:ea:d2:d8:ed:
7d:47:33:7e:77:59:a8:78:71:d9:c6:fd:98:a8:80:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BD:B2:D8:57:4B:A8:23:31:1B:04:2A:51:66:27:71:E0:8C:B1:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/l72y2FdLqCMxGwQqUWYnceCMsec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24403-24404
37967
38339
38353
45099-45100
sbgp-ipAddrBlock: critical
IPv4:
42.51.0.0/16
49.4.128.0-49.5.255.255
58.99.128.0/17
61.4.80.0/22
101.36.128.0/17
103.70.8.0/22
106.2.160.0-106.3.15.255
106.3.32.0-106.3.95.255
106.3.160.0/20
106.3.208.0-106.3.255.255
110.173.0.0/19
110.232.32.0/19
114.64.0.0-114.66.63.255
114.66.82.0-114.66.127.255
114.110.0.0/20
114.112.4.0-114.112.13.255
114.112.16.0-114.112.95.255
114.112.108.0-114.112.135.255
114.112.152.0-114.112.199.255
114.112.224.0-114.113.195.255
114.113.204.0-114.113.223.255
114.113.240.0/20
115.100.0.0/14
116.69.0.0/17
116.70.0.0/18
116.90.80.0/20
116.196.0.0-116.196.13.255
116.196.16.0-116.196.63.255
116.255.128.0/17
119.40.0.0/18
119.57.0.0/16
119.63.32.0/19
121.52.208.0/20
121.58.144.0/20
121.79.128.0/18
121.101.208.0/20
121.201.0.0/17
122.14.192.0/18
122.49.0.0/18
122.102.0.0/20
122.112.0.0/19
122.112.64.0/18
122.115.16.0/20
122.115.64.0-122.115.223.255
122.115.240.0/20
122.198.64.0/22
122.200.96.0/19
123.58.96.0/19
123.108.208.0/20
124.248.32.0/19
125.61.128.0/17
175.26.0.0/16
180.185.0.0-180.186.255.255
182.50.0.0/22
202.69.4.0/23
202.142.16.0/20
203.80.144.0/20
203.135.160.0/20
203.171.224.0/20
203.191.16.0/20
210.2.16.0/21
210.14.128.0/19
210.56.192.0/19
210.74.0.0/19
211.100.96.0/19
211.102.192.0/20
218.241.0.0/19
218.241.64.0/19
218.245.0.0-218.245.47.255
219.232.224.0/19
223.252.128.0/18
223.252.224.0/19
IPv6:
2401:e00::/32
2401:ba00::/32
2401:be00::/32
2401:c200::/32
2401:c600::/32
Signature Algorithm: sha256WithRSAEncryption
1a:c4:21:cb:7a:e2:c8:85:27:c9:8e:bf:b3:02:ad:6d:f8:43:
1d:e1:c3:01:f9:2e:fc:32:3a:7b:0f:a8:08:5e:2e:1e:49:d5:
26:a2:b7:ea:f3:1d:e2:48:5d:59:54:b2:c8:b4:d0:38:20:03:
2d:a3:f7:27:d8:11:2a:0b:a3:44:1e:c8:53:e0:e4:59:da:6d:
a5:65:75:bd:2a:29:97:6f:41:44:60:c2:7e:67:5b:5e:89:92:
5e:b2:fd:91:f7:cf:01:d1:b5:24:70:3c:45:eb:b9:e4:c8:d4:
a5:09:55:dd:b3:b1:bb:4b:bf:b7:bc:01:78:d7:ee:9e:68:51:
95:3a:2c:c7:8d:02:67:eb:f6:f0:97:46:25:39:32:26:b8:15:
75:30:57:d4:26:fc:8c:d6:ab:09:19:8b:01:fd:af:9c:48:a2:
03:18:ca:b8:6f:88:95:d0:8f:34:db:64:f3:60:69:b7:26:72:
64:0c:e9:42:5e:76:5f:3a:c3:6d:f0:2e:b5:c5:c8:34:4e:b9:
57:3e:90:1c:5e:ae:88:d8:8a:f2:9b:6a:5e:34:99:b4:79:7b:
f8:15:9f:6f:6d:b6:47:68:9e:fd:a1:49:48:6b:c1:92:33:b5:
c4:6c:58:08:a3:df:93:29:a7:cc:c5:05:97:ff:0d:0b:45:ce:
37:ff:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org