Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/rkIq9AObP3w8EzzO5D6f68jeqUA.cer
File: rkIq9AObP3w8EzzO5D6f68jeqUA.cer (raw, json)
Hash identifier: 88tbw9RXNZCRy6kos89nz5E1+FvOxXpA7z8AvqDXuNo=
Subject key identifier: AE:42:2A:F4:03:9B:3F:7C:3C:13:3C:CE:E4:3E:9F:EB:C8:DE:A9:40
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7C6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sun 14 Nov 2021 20:16:42 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 9308
AS: 9802
AS: 17428
AS: 18244
AS: 24133
AS: 24140
AS: 24418
AS: 59020
IP: 42.158.0.0/16
IP: 58.82.0.0/17
IP: 58.83.0.0/17
IP: 59.151.0.0/17
IP: 59.191.0.0/17
IP: 101.134.0.0/15
IP: 103.247.168.0/22
IP: 118.30.0.0/16
IP: 118.195.0.0/17
IP: 120.132.128.0 -- 120.135.255.255
IP: 123.61.0.0/16
IP: 124.250.0.0/15
IP: 182.174.0.0 -- 182.175.243.255
IP: 203.196.0.0/21
IP: 210.77.128.0/19
IP: 211.99.160.0 -- 211.99.223.255
IP: 211.148.17.0 -- 211.148.25.255
IP: 211.148.27.0 -- 211.148.31.255
IP: 211.151.0.0 -- 211.152.31.255
IP: 211.152.64.0/18
IP: 2403:a200::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31852 (0x7c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Nov 14 20:16:42 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=AE422AF4039B3F7C3C133CCEE43E9FEBC8DEA940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:8d:6b:9e:69:45:21:c8:2c:53:39:f4:ec:
bc:ee:1b:1d:8b:f1:13:a6:33:e2:52:75:67:31:3e:
99:7c:9c:69:66:a7:fa:02:fd:84:86:db:f7:24:c7:
9a:69:ef:d4:ec:10:8f:0f:14:d3:d4:50:b2:71:0a:
bc:db:4d:40:50:91:ef:1c:3b:c4:d0:7d:67:be:8b:
43:fc:31:8b:d4:f3:51:38:23:ee:1f:82:93:a4:39:
dc:22:a8:5a:e7:bd:76:21:6c:07:0e:84:d5:07:bc:
c4:6f:09:9e:c9:0f:69:06:7e:2c:6c:30:49:71:91:
3f:da:b8:f4:8d:94:f4:ec:ea:95:ff:dd:fb:14:e1:
1d:6b:d9:a8:87:a1:c6:8c:62:bb:a6:71:09:c9:72:
f0:de:26:bb:41:16:86:f5:06:fc:83:57:8b:b9:55:
0b:a2:b6:34:0e:c5:cc:f0:eb:9c:57:12:c0:89:d5:
c4:47:d5:61:2d:55:20:d0:d8:26:f2:4d:dc:46:17:
bb:4c:f4:2e:77:b2:01:a1:19:65:62:10:91:98:da:
07:2b:84:d5:6f:4e:13:c9:42:83:38:7b:85:cc:0a:
aa:ff:a2:22:da:5a:aa:09:bb:fd:f8:24:6a:30:0b:
6f:00:11:6e:bd:6b:83:4b:cc:9c:24:08:1c:68:b5:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:2A:F4:03:9B:3F:7C:3C:13:3C:CE:E4:3E:9F:EB:C8:DE:A9:40
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/73/rkIq9AObP3w8EzzO5D6f68jeqUA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9308
9802
17428
18244
24133
24140
24418
59020
sbgp-ipAddrBlock: critical
IPv4:
42.158.0.0/16
58.82.0.0/17
58.83.0.0/17
59.151.0.0/17
59.191.0.0/17
101.134.0.0/15
103.247.168.0/22
118.30.0.0/16
118.195.0.0/17
120.132.128.0-120.135.255.255
123.61.0.0/16
124.250.0.0/15
182.174.0.0-182.175.243.255
203.196.0.0/21
210.77.128.0/19
211.99.160.0-211.99.223.255
211.148.17.0-211.148.25.255
211.148.27.0-211.148.31.255
211.151.0.0-211.152.31.255
211.152.64.0/18
IPv6:
2403:a200::/32
Signature Algorithm: sha256WithRSAEncryption
3f:42:23:81:9a:74:0d:f8:64:1e:b6:25:14:2b:7a:b0:72:de:
13:a8:0a:7b:ad:d1:6f:e0:ac:f1:96:2a:04:ef:d2:d8:cc:cb:
da:60:ba:be:ea:97:99:32:e4:b1:92:74:60:00:fd:03:6e:aa:
27:66:84:24:8e:3b:52:d6:0d:31:32:91:e4:e1:e6:98:28:51:
df:ad:72:a8:2b:93:09:d0:84:ef:b4:2b:a0:31:07:45:1b:ec:
93:79:52:6a:e0:25:f3:0c:01:f2:53:a7:6a:72:ca:80:4d:76:
f7:6c:7e:5a:41:78:9f:af:9f:8f:c2:6d:3d:72:74:bc:04:82:
33:06:7e:75:48:c9:05:23:69:aa:ae:f8:5a:e8:2d:7c:b3:eb:
b4:10:9c:6c:0d:5f:47:06:ef:85:94:ab:78:28:f4:f0:7c:0b:
4d:a6:df:05:90:5a:1b:65:81:8e:12:bc:ce:cc:43:ad:7b:3c:
16:26:09:46:b7:ec:1e:ff:f1:43:a4:e1:0a:09:6a:98:54:08:
2c:35:fa:a4:30:79:2e:6e:ce:bf:cb:2b:85:98:e7:ed:6e:a9:
80:1d:8f:52:78:a4:42:cd:4b:e8:3f:9e:fe:e3:7f:10:ef:2d:
dd:99:53:ce:5f:4e:2e:61:c0:fc:ce:0f:f4:cf:46:3e:73:94:
62:ec:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org