Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
File: 6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer (raw, json)
Hash identifier: X4gvTUisQeOZXJd6Lb1xKfk1vQ1uDtSdtyhGIcgo+Pc=
Subject key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:54:28 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 42.201.32.0/19
IP: 103.81.200.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48171 (0xbc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:54:28 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:bb:5c:bc:ff:4f:d6:3c:8f:28:02:2a:42:
8e:73:e4:07:a4:f6:c9:66:30:85:20:11:2c:21:74:
21:91:17:e1:00:94:00:4f:68:12:0e:dc:db:0f:8c:
73:36:21:1d:93:fb:34:73:04:8e:fe:e9:33:48:24:
7a:5e:66:56:79:2a:d7:68:91:4b:7a:11:b8:66:28:
05:46:e0:f6:87:bc:ce:94:75:e5:2a:42:01:ab:78:
e0:9e:ab:d2:cb:6b:7c:60:46:ea:69:f6:47:52:74:
2c:04:97:2a:09:51:75:27:7b:f1:98:40:df:63:90:
7c:a9:b9:09:08:a3:22:9e:09:5a:be:23:1e:9e:f6:
71:6b:a1:c1:76:a1:09:d7:c4:3a:93:c8:3f:97:74:
c0:df:4e:2f:26:fd:53:60:8a:41:8f:b1:27:4c:c5:
1b:52:8b:b6:6b:ca:e7:4c:9e:6c:cf:1a:4e:3a:f1:
f3:70:77:20:dc:3e:7b:c1:1d:9c:a3:9c:16:93:a4:
3a:85:1a:f8:fd:72:11:36:d6:e8:ed:15:87:53:7d:
48:f0:7d:b6:52:20:3e:d9:ca:47:03:d2:15:b0:6a:
1d:12:e8:6e:10:7d:9d:d1:6e:e7:9c:7d:d2:39:1c:
83:bc:95:17:42:e9:44:72:24:32:1b:33:65:cf:d3:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.32.0/19
103.81.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e5:4b:b2:ea:d1:1b:8f:a6:6d:50:8a:18:92:d9:d8:7e:e5:
ba:e9:3b:e2:56:fd:81:94:a9:ed:8a:f4:d9:4d:f4:6d:11:06:
d3:8c:2a:f6:ab:8c:f6:d3:2d:9c:b8:55:e4:5f:05:69:a3:32:
8e:da:a2:f6:59:46:5d:5f:cb:60:bc:6d:82:46:20:c0:7d:97:
a7:b3:c2:df:db:3f:fe:94:29:22:af:14:a0:28:79:0d:9c:0a:
bb:6a:85:55:30:5f:f9:28:2c:b2:33:1a:a4:3c:b4:35:4b:48:
ff:64:f1:b1:77:50:34:ad:58:44:06:5e:42:b4:55:a9:e6:56:
4b:6c:56:08:12:d4:1f:0b:ab:b0:27:c3:77:b3:e8:06:71:a2:
84:4b:f1:c2:64:67:a6:65:be:31:62:2f:eb:49:12:d2:d0:2a:
c5:88:77:12:99:76:3e:da:ec:41:4f:5e:d6:d2:a2:51:8a:8e:
25:cb:95:0a:9c:52:1d:e6:e2:ec:27:b8:5c:e1:23:17:d3:c5:
28:ce:b9:61:6e:5a:3c:75:f3:75:6c:8d:78:cf:7c:91:f0:3a:
91:5b:27:04:c6:7f:a2:a0:8c:28:12:54:ee:92:e8:27:f3:f0:
90:f2:e0:dd:87:30:4d:a1:fc:0d:c6:09:5e:bf:73:59:99:23:
2c:f9:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:47 2025 by rpki-client