Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qVFpuZp-yy5bXBg-UXrxOUQfcRg.cer
File: qVFpuZp-yy5bXBg-UXrxOUQfcRg.cer (raw, json)
Hash identifier: +rnTOwNJiDGw99mpcF4cyhuun5X26gS3tChLbieC7GI=
Subject key identifier: A9:51:69:B9:9A:7E:CB:2E:5B:5C:18:3E:51:7A:F1:39:44:1F:71:18
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 787B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/qVFpuZp-yy5bXBg-UXrxOUQfcRg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 07 Jun 2021 19:57:56 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 24416
IP: 43.242.192.0/22
IP: 103.38.76.0/22
IP: 113.209.0.0/16
IP: 117.122.128.0/17
IP: 125.208.0.0/19
IP: 211.99.128.0/19
IP: 211.154.0.0/19
IP: 219.232.96.0/19
IP: 219.236.0.0/15
IP: 2401:8380::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30843 (0x787b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Jun 7 19:57:56 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A95169B99A7ECB2E5B5C183E517AF139441F7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:16:d7:9e:2d:6c:44:43:48:a0:30:06:21:
06:cb:75:72:19:0e:64:a2:38:53:f5:7c:23:d6:cd:
2b:ff:12:de:72:a3:21:bd:7a:99:3b:41:49:24:cf:
c6:c4:fe:78:bc:d2:c1:6c:06:68:ef:58:f0:67:99:
bf:be:dc:48:73:62:67:f6:39:a2:79:54:ac:20:0f:
bb:50:7c:66:4f:47:ed:1f:b3:a6:2d:43:fd:2e:b6:
21:d3:17:da:03:62:f9:2a:46:dc:0f:d2:26:a3:ab:
6d:89:23:09:f4:33:a9:1d:42:6a:f2:50:65:bd:51:
ed:e8:a7:85:f8:63:a2:84:76:2e:36:b2:72:2e:db:
e5:31:59:eb:82:c8:dc:88:30:cb:a6:5b:c9:9d:b9:
e0:e0:24:e6:e1:bd:48:bb:f3:80:58:db:8b:59:af:
ef:66:d4:be:d4:10:19:48:39:0a:bc:e2:40:e2:da:
49:ab:3b:09:33:e3:11:b5:1f:d1:01:6d:1b:f0:94:
95:65:62:88:3d:6a:f8:9e:e4:4e:8f:85:5e:77:13:
02:83:e0:f6:40:a6:26:ea:70:bb:70:40:d7:7e:0a:
83:fa:c1:cf:d3:ed:36:c6:a7:27:8e:72:c0:26:ba:
3f:46:e1:19:0c:c0:ec:e3:7d:d7:eb:0d:b0:2a:1a:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:69:B9:9A:7E:CB:2E:5B:5C:18:3E:51:7A:F1:39:44:1F:71:18
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/189/qVFpuZp-yy5bXBg-UXrxOUQfcRg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24416
sbgp-ipAddrBlock: critical
IPv4:
43.242.192.0/22
103.38.76.0/22
113.209.0.0/16
117.122.128.0/17
125.208.0.0/19
211.99.128.0/19
211.154.0.0/19
219.232.96.0/19
219.236.0.0/15
IPv6:
2401:8380::/32
Signature Algorithm: sha256WithRSAEncryption
b1:b7:2e:97:80:40:55:38:b7:57:c6:b6:9d:ec:9e:d1:45:1a:
58:92:24:7c:2d:a5:4a:49:2c:39:78:91:5e:29:7b:c5:51:25:
43:fc:a5:0c:c2:75:2f:16:16:e6:bf:e5:b7:1a:60:ba:b3:fa:
26:a5:7d:82:68:86:8b:cc:16:be:f0:64:c2:26:f8:94:57:56:
68:11:9f:69:86:18:f7:68:a7:90:16:db:fb:26:98:80:f1:1f:
44:90:79:33:b8:fe:3b:b1:77:e5:ed:b7:df:be:30:da:cc:9c:
9f:8d:e6:70:98:03:55:ce:12:31:aa:ba:e3:fa:a0:32:4c:7b:
9c:49:46:bb:a6:fa:94:d4:54:07:3f:ba:de:50:a6:db:d8:10:
f7:e7:f7:39:ab:be:29:23:da:46:0f:c2:74:f5:24:7a:79:e9:
23:58:fa:fb:e1:93:69:c4:de:b1:26:8b:db:6d:99:0e:d1:7b:
35:4c:63:ee:8b:80:bc:c8:ae:c5:36:fe:c7:bc:fe:0b:02:3b:
fc:21:42:a1:75:b2:03:29:9c:56:da:e6:1f:6a:6f:10:d7:b9:
96:c1:0f:09:fa:2a:16:9f:c1:69:8e:86:50:42:97:58:ba:d4:
c3:1e:a2:6d:e9:a8:13:cc:b7:c5:bd:86:32:fd:7c:75:c8:0b:
48:21:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org