Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer
File: vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer (raw, json)
Hash identifier: SVPqHxaVEZ1OVuH/wrWVVX1euF99FBeAbEDUPzPdZ7A=
Subject key identifier: BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: 7808
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/vuAG4i4pZInVRgq4s_6Zi5dHWl0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 27 May 2021 05:07:19 +0000
Certificate not after: Fri 27 May 2022 04:59:52 +0000
Subordinate resources: AS: 56282
AS: 58997 -- 58998
AS: 63569
IP: 14.102.180.0/22
IP: 45.252.120.0/22
IP: 45.252.128.0/22
IP: 45.252.140.0/22
IP: 45.252.148.0/22
IP: 45.252.164.0 -- 45.252.179.255
IP: 45.254.160.0/22
IP: 45.254.168.0/21
IP: 45.255.168.0/22
IP: 45.255.192.0/20
IP: 45.255.212.0/22
IP: 103.17.40.0/22
IP: 103.26.0.0/22
IP: 103.64.240.0 -- 103.65.7.255
IP: 103.65.76.0 -- 103.65.95.255
IP: 103.65.100.0 -- 103.65.115.255
IP: 103.221.144.0 -- 103.221.155.255
IP: 103.221.160.0 -- 103.221.179.255
IP: 103.222.152.0 -- 103.222.163.255
IP: 103.227.76.0 -- 103.227.83.255
IP: 103.231.64.0/21
IP: 103.235.220.0 -- 103.235.255.255
IP: 103.237.0.0/20
IP: 103.243.252.0/22
IP: 103.249.252.0/22
IP: 114.66.64.0/20
IP: 114.67.0.0/18
IP: 150.129.192.0/22
IP: 163.47.4.0/22
IP: 163.53.40.0/22
IP: 163.53.88.0 -- 163.53.139.255
IP: 202.20.126.0/24
IP: 202.27.12.0/24
IP: 202.27.14.0/24
IP: 202.36.226.0/24
IP: 202.44.97.0/24
IP: 202.52.33.0 -- 202.52.34.255
IP: 202.52.47.0/24
IP: 202.52.143.0/24
IP: 202.53.140.0/24
IP: 202.53.143.0/24
IP: 202.59.1.0/24
IP: 202.59.240.0/24
IP: 202.61.123.0/24
IP: 202.61.127.0/24
IP: 202.63.80.0/24
IP: 202.63.253.0/24
IP: 202.74.36.0/24
IP: 202.74.42.0/24
IP: 202.74.52.0/24
IP: 202.84.22.0/24
IP: 202.89.119.0/24
IP: 202.90.37.0/24
IP: 202.90.193.0/24
IP: 202.90.205.0/24
IP: 202.94.74.0/24
IP: 202.94.81.0/24
IP: 202.125.109.0/24
IP: 202.129.208.0/24
IP: 202.130.39.0/24
IP: 202.146.186.0/24
IP: 202.151.33.0/24
IP: 203.185.189.0/24
IP: 203.191.5.0/24
IP: 203.191.133.0/24
IP: 203.201.182.0/24
IP: 211.155.80.0/20
IP: 2406:4d00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30728 (0x7808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 27 05:07:19 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:aa:65:ab:0b:a1:f1:c7:36:2c:0d:9d:98:
c9:79:d5:55:82:9c:df:c6:d5:96:8d:11:20:c8:70:
73:25:ce:08:be:b0:54:5b:9e:8b:e6:26:36:2b:f0:
95:a6:52:60:d6:18:f8:72:61:ed:dd:1c:f1:24:0c:
59:b4:d3:a5:35:42:e3:73:21:00:74:52:50:a8:0f:
1f:fd:96:b2:d1:fa:02:fc:37:28:57:5a:c7:e0:fc:
f7:4e:0b:77:8d:ec:da:e4:f4:85:63:66:d4:e7:b0:
38:22:d6:a5:8d:47:18:3e:66:65:40:1f:0e:0e:ff:
36:e8:5c:38:70:59:67:99:3b:9b:b2:ae:37:f4:a4:
c1:a0:3c:b8:a3:71:01:16:6d:5f:a1:92:91:e4:cc:
41:36:5d:b4:f7:96:73:e0:14:b5:21:8b:e4:89:c4:
0a:c7:8f:74:17:dc:71:ec:47:bb:2b:5f:d1:df:c6:
22:34:e0:56:6f:ac:32:1f:28:f7:4d:c2:76:a3:bc:
cf:54:07:92:73:ba:51:71:88:17:1f:14:ee:ef:2b:
c7:38:a3:98:08:5f:1e:ef:ac:44:3d:89:8c:8d:24:
9e:24:b2:79:e8:72:4b:62:f7:b4:e5:03:36:62:3f:
57:54:cb:76:e1:6a:4a:b9:91:3f:9e:62:2f:7d:c7:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/vuAG4i4pZInVRgq4s_6Zi5dHWl0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56282
58997-58998
63569
sbgp-ipAddrBlock: critical
IPv4:
14.102.180.0/22
45.252.120.0/22
45.252.128.0/22
45.252.140.0/22
45.252.148.0/22
45.252.164.0-45.252.179.255
45.254.160.0/22
45.254.168.0/21
45.255.168.0/22
45.255.192.0/20
45.255.212.0/22
103.17.40.0/22
103.26.0.0/22
103.64.240.0-103.65.7.255
103.65.76.0-103.65.95.255
103.65.100.0-103.65.115.255
103.221.144.0-103.221.155.255
103.221.160.0-103.221.179.255
103.222.152.0-103.222.163.255
103.227.76.0-103.227.83.255
103.231.64.0/21
103.235.220.0-103.235.255.255
103.237.0.0/20
103.243.252.0/22
103.249.252.0/22
114.66.64.0/20
114.67.0.0/18
150.129.192.0/22
163.47.4.0/22
163.53.40.0/22
163.53.88.0-163.53.139.255
202.20.126.0/24
202.27.12.0/24
202.27.14.0/24
202.36.226.0/24
202.44.97.0/24
202.52.33.0-202.52.34.255
202.52.47.0/24
202.52.143.0/24
202.53.140.0/24
202.53.143.0/24
202.59.1.0/24
202.59.240.0/24
202.61.123.0/24
202.61.127.0/24
202.63.80.0/24
202.63.253.0/24
202.74.36.0/24
202.74.42.0/24
202.74.52.0/24
202.84.22.0/24
202.89.119.0/24
202.90.37.0/24
202.90.193.0/24
202.90.205.0/24
202.94.74.0/24
202.94.81.0/24
202.125.109.0/24
202.129.208.0/24
202.130.39.0/24
202.146.186.0/24
202.151.33.0/24
203.185.189.0/24
203.191.5.0/24
203.191.133.0/24
203.201.182.0/24
211.155.80.0/20
IPv6:
2406:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
15:8b:0d:88:28:03:81:c6:eb:e2:fa:08:24:f3:ae:33:3b:a4:
bf:7c:3b:a7:ac:24:ca:b5:63:3d:36:69:23:9a:e9:32:5e:74:
6f:35:8e:21:54:a2:22:e0:9e:33:99:fa:bc:54:a4:47:c3:42:
fa:75:93:35:2d:a6:04:b6:81:52:2f:cf:7a:66:c3:f1:a8:2e:
60:aa:bd:d1:f2:c1:0b:1b:f1:d3:72:87:95:d3:1f:cb:13:86:
c5:19:2b:5b:f3:a7:d9:18:4b:00:a3:a0:36:94:bf:a1:5e:8d:
f8:c7:ed:19:a3:ea:39:d4:13:9a:48:df:16:92:ab:d0:e0:e6:
20:f9:54:0e:89:9d:43:f6:20:61:f6:28:44:6c:ac:5c:dc:bc:
d2:c1:9f:fa:fe:d8:a4:52:f9:f2:ed:d6:5c:24:9f:dd:81:ae:
f3:c5:49:82:37:d6:a0:62:80:89:0e:be:d3:c7:f6:ca:94:69:
fd:a0:df:87:47:f3:9d:98:8e:b1:a3:d9:85:4d:9a:83:ca:7d:
45:84:f9:ee:60:67:70:dc:09:75:c9:3b:c1:f5:b6:b2:a5:40:
1f:eb:1f:36:73:0d:31:81:63:30:4b:54:46:9e:74:4d:05:24:
75:c4:c8:90:f8:79:1a:04:67:66:38:56:cd:42:a2:3b:11:55:
7a:82:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-ams.rpki-client.org