Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/qYKqbnL2_oDmx-x2TPtCGxeJlYg.cer
File: qYKqbnL2_oDmx-x2TPtCGxeJlYg.cer (raw, json)
Hash identifier: I5NEGee9xxfn/8ntUNrtRnt2qCf5cR7zgG6lWLwBVmI=
Subject key identifier: A9:82:AA:6E:72:F6:FE:80:E6:C7:EC:76:4C:FB:42:1B:17:89:95:88
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 779C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/qYKqbnL2_oDmx-x2TPtCGxeJlYg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:05:06 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 37963
AS: 45102 -- 45104
AS: 59028
AS: 59051 -- 59055
IP: 43.230.32.0/22
IP: 43.250.12.0/22
IP: 45.112.208.0/20
IP: 59.82.0.0/16
IP: 103.216.108.0/22
IP: 110.75.192.0/19
IP: 117.49.0.0/16
IP: 119.38.208.0/20
IP: 121.0.16.0/20
IP: 157.119.240.0/22
IP: 203.119.128.0/17
IP: 2401:2e00::/32
IP: 2401:b180::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30620 (0x779c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:05:06 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A982AA6E72F6FE80E6C7EC764CFB421B17899588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:8d:f1:c2:b1:e2:6f:c5:63:23:73:72:ea:
c3:7c:c9:36:26:10:22:16:08:e6:11:a0:24:43:4c:
f9:47:9f:ac:b0:47:33:36:83:48:1c:63:be:f1:33:
13:d8:c1:7f:9a:dd:80:9b:05:16:a4:e8:b9:0f:4d:
e9:b8:ea:18:03:c2:51:8b:08:79:7e:b6:b2:7f:7e:
45:6d:60:2b:ba:c5:2a:29:d0:40:b4:ce:ff:da:19:
69:cb:05:17:ac:8f:1e:f5:fb:f1:03:5d:ec:e2:c0:
46:18:2b:40:de:3c:7b:7a:13:b2:c5:d2:1b:39:1d:
df:46:01:bd:c7:ab:f5:e8:33:81:cd:34:c4:03:4f:
1c:5d:33:61:07:36:14:0f:01:e7:4d:3d:76:33:b2:
fc:28:72:76:8d:12:72:cb:3a:14:c2:af:be:e1:24:
5e:fc:eb:f0:fa:c6:bd:99:11:7e:14:a0:c8:66:af:
fe:5f:d9:bc:9e:76:d0:3f:00:a1:08:ef:d5:e3:5d:
08:1d:7e:bb:96:51:dc:76:79:78:1a:9f:1e:6b:82:
8c:84:68:ee:68:8a:ba:05:93:07:13:3f:df:be:8d:
e8:32:d0:29:b7:3d:61:91:c7:16:3d:29:24:0a:2e:
53:4c:c0:2b:a3:2d:61:e4:49:5d:55:bb:fd:44:60:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:AA:6E:72:F6:FE:80:E6:C7:EC:76:4C:FB:42:1B:17:89:95:88
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/242/qYKqbnL2_oDmx-x2TPtCGxeJlYg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37963
45102-45104
59028
59051-59055
sbgp-ipAddrBlock: critical
IPv4:
43.230.32.0/22
43.250.12.0/22
45.112.208.0/20
59.82.0.0/16
103.216.108.0/22
110.75.192.0/19
117.49.0.0/16
119.38.208.0/20
121.0.16.0/20
157.119.240.0/22
203.119.128.0/17
IPv6:
2401:2e00::/32
2401:b180::/32
Signature Algorithm: sha256WithRSAEncryption
7c:9f:ec:6e:0c:ca:e7:c2:4e:b6:b2:b3:f3:d3:9d:4b:cf:1d:
02:74:ca:dd:47:e0:69:4e:f8:5f:38:ba:46:f1:e1:40:00:45:
d8:a5:59:ba:e0:4a:68:03:db:35:1c:2b:87:d9:7f:18:08:91:
d7:af:23:d4:04:26:bb:0b:44:45:bf:6b:6d:a4:7e:42:07:18:
ba:18:d2:ac:3c:72:78:e8:ef:64:38:7b:82:b7:d5:19:0d:0a:
95:00:d2:9a:ad:5f:d6:b4:6e:bb:c9:27:97:05:6b:3a:b4:dc:
cb:1d:96:d7:f5:3c:6b:0d:da:27:f0:e1:0a:99:44:9d:46:5d:
0d:21:50:f9:2b:49:1d:e9:1d:8f:ad:2f:e2:9a:19:33:c1:f2:
30:77:e5:f3:a1:c6:0e:e6:6d:dc:bb:56:25:99:77:0b:e7:90:
02:83:f2:30:d5:0f:fc:fa:8e:88:37:33:fa:ce:c2:80:bd:1f:
f6:4a:b9:f6:df:92:e6:65:d8:57:9c:b5:d9:88:80:c1:83:2a:
4a:6f:05:19:88:04:1e:19:7c:6f:8d:4c:98:58:ed:a2:0e:e4:
01:ac:ac:de:39:5a:46:36:30:33:c1:d8:54:ec:75:e9:87:b3:
d3:09:8a:0c:99:2e:84:bf:6c:6a:ad:83:21:19:c1:7b:c2:b9:
b8:9b:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org