Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/57-wC4BEeBqV6l72MeBDsLOl7Cg.cer
File: 57-wC4BEeBqV6l72MeBDsLOl7Cg.cer (raw, json)
Hash identifier: Htg9WmCNPZFxc4HnSA6APisWA6sCshN0f859T2nGY+w=
Subject key identifier: E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3BE0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:27:45 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 157.66.88.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15328 (0x3be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:27:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E7BFB00B8044781A95EA5EF631E043B0B3A5EC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:ae:af:b3:69:7b:f6:79:8e:1f:62:4e:53:
79:74:26:e9:7a:29:13:95:4b:a6:5e:31:ae:5a:e9:
95:3a:53:0e:44:60:82:5d:50:bd:c5:d3:f7:ef:ad:
46:49:32:9b:0e:97:b9:50:95:74:d1:68:f1:fd:40:
d3:28:f5:a4:b5:b1:26:ff:2f:dc:da:a3:11:ae:e0:
23:51:07:af:0f:e9:9a:68:df:b1:3b:a6:40:9c:23:
66:f7:49:50:d8:ea:6d:d8:e9:96:52:6e:85:b3:12:
12:4a:ab:9a:09:ff:af:4b:a2:ed:56:6b:44:f1:07:
9d:f9:31:88:ed:f8:37:91:f6:7d:69:14:ed:ac:56:
c8:ce:55:f2:8c:a9:59:82:87:e9:a4:3b:61:c1:31:
5a:e5:a7:38:58:c4:cd:52:bf:db:7b:ad:d9:7a:ea:
b1:5c:4f:b1:15:28:76:36:d3:f7:e7:94:cf:fa:b9:
de:60:1c:ff:1b:2c:1a:1c:6c:20:3f:92:c5:7a:0a:
d4:0d:36:77:cd:90:49:6a:7f:2e:96:bb:94:2f:05:
51:39:21:a2:1e:13:f3:e6:f7:e7:0f:25:fe:cc:16:
07:4a:20:2a:7a:9b:0b:00:d3:62:f2:ec:01:a5:9f:
29:91:5b:21:c1:34:eb:4e:f5:68:bf:43:7c:cb:45:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:B0:0B:80:44:78:1A:95:EA:5E:F6:31:E0:43:B0:B3:A5:EC:28
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3276/57-wC4BEeBqV6l72MeBDsLOl7Cg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.88.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ed:25:ac:5d:47:89:8f:27:bd:a4:a3:3c:4d:bd:2f:62:fa:
28:36:d2:71:16:9b:f8:36:f5:2d:de:c0:52:b0:ad:c0:87:ed:
07:97:97:ae:cc:1c:ea:e6:39:00:e3:17:ac:0f:1e:fb:8f:c8:
87:55:29:e7:18:ba:77:22:96:5f:5e:42:8e:a2:fc:91:f2:35:
e4:c0:bd:b2:99:3e:0a:bd:01:81:56:34:94:e4:4c:9f:5b:6a:
5a:9f:ba:47:bb:0b:5d:38:4a:1c:ae:08:39:61:93:a3:3c:b3:
e6:46:25:6a:c9:b7:0e:63:75:cf:15:f5:a9:cc:c3:a3:d4:58:
39:4e:5e:76:3a:33:b9:79:5a:30:f5:e4:11:d5:22:95:38:94:
a1:9d:98:20:6f:a3:aa:79:41:4c:a8:42:68:63:71:75:52:8e:
f9:8a:fb:b9:16:c1:36:60:24:9d:e8:a1:9d:87:92:2c:35:9e:
75:68:d1:04:df:04:65:bf:a0:94:fd:6e:64:09:62:90:32:a5:
cf:09:fa:8f:6b:d2:c8:06:be:1f:59:0e:01:72:5d:ef:e6:3f:
42:dd:54:ed:d5:8d:ec:a0:2c:93:b5:a8:d5:b3:52:d2:ad:24:
34:11:03:df:2f:da:b4:cf:f0:cc:ee:74:46:a4:2c:bd:68:7d:
87:28:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:45 2025 by rpki-client