Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4gVcAoq4tapUsWMav0wjwUIFSro.cer
File: 4gVcAoq4tapUsWMav0wjwUIFSro.cer (raw, json)
Hash identifier: s+ABKw5kcfQJosmJUzOBW7+ILCCDrRW7hphfBeoEXDU=
Subject key identifier: E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 39C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 20 Dec 2024 00:39:21 +0000
Certificate not after: Sat 20 Dec 2025 00:30:32 +0000
Subordinate resources: IP: 160.250.252.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14785 (0x39c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Dec 20 00:39:21 2024 GMT
Not After : Dec 20 00:30:32 2025 GMT
Subject: CN=E2055C028AB8B5AA54B1631ABF4C23C142054ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:b8:ef:37:8a:39:fa:01:2c:0c:30:dc:fb:
e9:4c:b1:45:44:f6:03:d9:4f:16:5c:05:c5:3c:d0:
b9:1c:f8:8a:05:ed:66:54:69:42:ec:a9:1a:66:71:
7b:84:20:33:01:4f:7c:7c:ac:67:56:ea:43:9f:a8:
e6:bb:90:d2:60:5b:1a:98:d8:fb:4e:8c:9e:22:91:
8c:d9:e2:49:8d:a5:39:19:0b:59:ff:80:6d:62:e6:
ff:74:b8:5b:45:22:79:f0:d9:36:4a:47:7e:a7:13:
c6:6e:ae:82:31:06:29:f6:e5:d3:02:75:b9:5c:c3:
cc:ab:e6:c4:d0:b2:50:2e:ea:b5:db:0b:97:3a:8d:
9b:7e:c1:f4:3d:6b:f7:36:8e:3f:d8:17:81:78:b9:
2e:c9:83:35:f2:9c:58:db:99:1d:51:e8:8d:9d:3c:
0d:e5:6c:8f:0e:ec:e2:15:89:0e:42:57:20:fb:93:
11:1f:4c:3d:f1:05:30:05:36:e0:d7:5c:b6:3f:a9:
42:ad:09:6a:b7:42:01:a0:65:6c:f7:f3:75:26:b3:
e1:d4:79:6d:6d:f5:11:06:0a:ce:d9:d0:66:ee:70:
8e:c0:e0:19:17:77:41:12:6b:73:2c:f1:6d:69:e9:
02:57:31:2c:ad:34:39:b5:a6:94:3b:95:78:1a:97:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:05:5C:02:8A:B8:B5:AA:54:B1:63:1A:BF:4C:23:C1:42:05:4A:BA
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3340/4gVcAoq4tapUsWMav0wjwUIFSro.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.252.0/23
Signature Algorithm: sha256WithRSAEncryption
78:e0:63:45:0e:f3:4c:84:99:0f:9e:ae:ba:46:cd:a5:82:2e:
a1:e2:2a:be:c3:45:e0:d9:92:6b:94:63:94:5e:8e:08:75:59:
99:66:9a:8c:ef:b6:1c:9a:3f:ce:f9:0e:fd:81:57:52:35:ae:
e3:e2:d4:43:87:54:4c:7a:c4:7d:95:41:32:5a:68:b0:b6:d4:
4d:bd:c6:f9:96:88:e4:59:f3:4b:6a:44:9d:14:71:09:a5:54:
ff:2a:23:18:0d:a9:b7:d1:bf:57:b7:a5:dc:f3:66:d3:de:bc:
50:00:6a:60:a6:be:fe:99:08:5f:32:9a:3e:80:aa:ec:fc:12:
8b:d7:8d:dd:cc:21:d4:a9:45:fe:9e:c8:59:66:a6:b9:b4:35:
4f:02:ac:cc:5f:a2:2e:01:86:7c:76:5e:37:2d:e8:12:37:74:
06:7b:15:73:c0:5e:40:13:25:17:04:87:50:e2:ec:1c:61:43:
2e:42:72:43:98:95:f7:0b:8f:88:4e:43:6b:48:49:f7:26:74:
10:a0:66:cc:3a:7f:00:12:a3:1b:be:21:32:e0:52:5c:08:7f:
25:d2:32:46:b1:9b:e2:07:c5:73:b5:4d:5f:d3:a4:ac:11:93:
65:f3:83:a3:12:bc:18:52:33:88:46:e7:10:ba:3a:69:80:f9:
57:da:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:43 2025 by rpki-client