Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.cer
File: oIsmJFcNBBYTPRGdDgQ-kYV8zTI.cer (raw, json)
Hash identifier: 8pybt1cseKJI4WLt5nZPcM5j/WLrbnTNkJsNR+fugGI=
Subject key identifier: A0:8B:26:24:57:0D:04:16:13:3D:11:9D:0E:04:3E:91:85:7C:CD:32
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:02:12 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 58830
IP: 43.254.224.0/22
IP: 103.231.16.0/21
IP: 103.232.4.0/22
IP: 103.242.168.0/22
IP: 203.19.147.0/24
IP: 203.20.44.0/24
IP: 203.56.231.0/24
IP: 203.80.129.0/24
IP: 203.86.250.0/24
IP: 203.89.133.0/24
IP: 203.89.144.0/24
IP: 203.92.6.0/24
IP: 203.100.58.0/24
IP: 203.123.58.0/24
IP: 203.161.183.0/24
IP: 203.171.208.0/24
IP: 2400:5c80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30484 (0x7714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:02:12 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A08B2624570D0416133D119D0E043E91857CCD32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:2a:94:39:1d:5a:be:cf:14:7c:86:0a:49:
78:ae:3e:6c:1f:f5:e0:4f:94:1a:7a:46:e6:de:24:
c8:ba:8a:99:e5:45:e9:e2:48:fe:64:f8:30:25:a6:
2a:31:a0:c1:96:46:f4:e6:f5:33:0a:1a:54:0b:90:
24:1f:69:b8:16:c2:2f:c9:6c:a7:86:17:7e:b8:f1:
c0:9d:ac:ad:8a:a5:3a:60:f2:e9:4d:58:ce:a9:66:
67:31:ba:94:0b:5f:b1:e1:ab:4f:e4:55:7a:a2:84:
c8:e2:5e:00:a0:39:d7:6a:66:8e:c0:2c:37:f3:47:
25:dc:7c:b6:d8:d3:f8:57:8e:02:4f:dd:59:d1:71:
87:9b:82:dc:98:16:2d:ec:c6:43:26:58:96:cc:4d:
b2:9a:eb:c3:ae:43:25:c5:1a:b7:26:19:56:00:75:
fc:1a:b5:c0:31:c8:de:4f:9c:7e:1d:a1:9b:5a:9f:
6e:9f:94:e9:0e:a9:73:2e:c0:f2:93:ed:8f:ee:3e:
3c:9d:14:46:3c:ab:ef:47:53:a4:f3:d6:01:a3:1a:
59:b2:33:6e:46:43:46:43:50:d2:e1:5a:f8:d6:73:
6f:35:90:61:3e:34:2e:f6:af:26:e6:49:22:ed:34:
4d:95:92:ba:d0:43:e2:9a:e8:93:0d:8e:46:23:e0:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:26:24:57:0D:04:16:13:3D:11:9D:0E:04:3E:91:85:7C:CD:32
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/oIsmJFcNBBYTPRGdDgQ-kYV8zTI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58830
sbgp-ipAddrBlock: critical
IPv4:
43.254.224.0/22
103.231.16.0/21
103.232.4.0/22
103.242.168.0/22
203.19.147.0/24
203.20.44.0/24
203.56.231.0/24
203.80.129.0/24
203.86.250.0/24
203.89.133.0/24
203.89.144.0/24
203.92.6.0/24
203.100.58.0/24
203.123.58.0/24
203.161.183.0/24
203.171.208.0/24
IPv6:
2400:5c80::/32
Signature Algorithm: sha256WithRSAEncryption
a2:d9:fe:0f:60:0c:03:f3:57:84:ed:17:f6:3a:6a:30:60:61:
bb:0e:f1:44:bb:22:d6:58:70:32:b7:c3:a6:e0:76:9a:8b:b9:
66:1b:85:0d:c0:a7:0e:d7:7b:36:9b:a8:2a:7b:eb:22:b5:df:
8f:e9:63:96:64:4f:e5:16:13:9a:34:88:8f:b0:bf:62:55:a0:
53:07:86:ae:41:fd:a0:22:39:e2:b9:79:2b:08:6a:b8:e0:f2:
de:ab:06:bd:35:37:55:3c:c3:49:b1:61:b6:d2:03:64:c7:70:
24:b1:a5:01:ac:c6:5b:29:d5:25:71:53:86:30:72:bd:ba:4a:
5f:41:8a:1a:c6:bd:c2:cd:90:c7:41:90:a2:8c:3a:79:8c:d8:
09:d4:f7:8e:01:f8:85:4e:c4:01:cf:78:dc:52:e0:ef:bf:da:
d7:a2:85:91:50:0e:6b:d9:d5:8e:c6:a0:2e:c5:95:e0:c2:e3:
66:1f:1a:8c:eb:35:43:b7:59:15:59:0e:9e:0d:44:82:8f:48:
22:47:40:04:53:7d:39:38:2a:f8:7b:c0:27:4c:69:5c:54:5f:
4f:fa:d0:b8:5e:2c:d7:3a:1a:0b:db:4e:d0:01:c4:2b:7c:ae:
62:41:fe:85:2d:4c:c8:76:68:2b:08:06:2a:a5:48:ee:d6:48:
8c:8c:47:d8
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgICdxQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
NjJFM0QwMDAwMTEwLwYDVQQFEygwNDE2MjlCNkE5RUFCN0NCMTMyNEVBMzk3OEYw
Mzc5NkY4ODlCNTQwMB4XDTIxMDUyNzA1MDIxMloXDTIyMDUyNzA0NTk1MlowMzEx
MC8GA1UEAxMoQTA4QjI2MjQ1NzBEMDQxNjEzM0QxMTlEMEUwNDNFOTE4NTdDQ0Qz
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrVKpQ5HVq+zxR8hgpJ
eK4+bB/14E+UGnpG5t4kyLqKmeVF6eJI/mT4MCWmKjGgwZZG9Ob1MwoaVAuQJB9p
uBbCL8lsp4YXfrjxwJ2srYqlOmDy6U1YzqlmZzG6lAtfseGrT+RVeqKEyOJeAKA5
12pmjsAsN/NHJdx8ttjT+FeOAk/dWdFxh5uC3JgWLezGQyZYlsxNsprrw65DJcUa
tyYZVgB1/Bq1wDHI3k+cfh2hm1qfbp+U6Q6pcy7A8pPtj+4+PJ0URjyr70dTpPPW
AaMaWbIzbkZDRkNQ0uFa+NZzbzWQYT40LvavJuZJIu00TZWSutBD4prokw2ORiPg
sLMCAwEAAaOCAtkwggLVMB0GA1UdDgQWBBSgiyYkVw0EFhM9EZ0OBD6RhXzNMjAf
BgNVHSMEGDAWgBQEFim2qeq3yxMk6jl48DeW+Im1QDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j
bi9ycGtpL0E5MTYyRTNEMDAwMC9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEu
Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw
bmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQx
RkYyL0JCWXB0cW5xdDhzVEpPbzVlUEEzbHZpSnRVQS5jZXIwDwYDVR0TAQH/BAUw
AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUF
BzAFhixyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjQ1
LzBXBggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzY0NS9vSXNtSkZjTkJCWVRQUkdkRGdRLWtZVjh6VEkubWZ0MDEGCCsG
AQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDlzjCBiAYIKwYBBQUHAQcBAf8EeTB3MGYE
AgABMGADBAIr/uADBANn5xADBAJn6AQDBAJn8qgDBADLE5MDBADLFCwDBADLOOcD
BADLUIEDBADLVvoDBADLWYUDBADLWZADBADLXAYDBADLZDoDBADLezoDBADLobcD
BADLq9AwDQQCAAIwBwMFACQAXIAwDQYJKoZIhvcNAQELBQADggEBAKLZ/g9gDAPz
V4TtF/Y6ajBgYbsO8US7ItZYcDK3w6bgdpqLuWYbhQ3Apw7XezabqCp76yK134/p
Y5ZkT+UWE5o0iI+wv2JVoFMHhq5B/aAiOeK5eSsIarjg8t6rBr01N1U8w0mxYbbS
A2THcCSxpQGsxlsp1SVxU4Ywcr26Sl9BihrGvcLNkMdBkKKMOnmM2AnU944B+IVO
xAHPeNxS4O+/2teihZFQDmvZ1Y7GoC7FleDC42YfGozrNUO3WRVZDp4NRIKPSCJH
QARTfTk4Kvh7wCdMaVxUX0/60LheLNc6GgvbTtABxCt8rmJB/oUtTMh2aCsIBiql
SO7WSIyMR9g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:25 2023 by rpki-client on console-fra.rpki-client.org