Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JKE7dSyiLWMkgdhuY953eAuDMfw.cer
File: JKE7dSyiLWMkgdhuY953eAuDMfw.cer (raw, json)
Hash identifier: Iifooc59dQjAoY2ZMy20FxangJAvq0S47JU0QrdkP50=
Subject key identifier: 24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:55:36 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 160.30.198.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14309 (0x37e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:55:36 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=24A13B752CA22D632481D86E63DE77780B8331FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:9b:4d:71:61:d7:64:1e:42:11:f1:6c:27:
b0:98:d9:d0:43:2d:61:d2:20:8f:31:78:ea:ec:ac:
3e:3f:27:a5:7b:c6:3c:3a:43:bb:14:48:07:d6:9b:
44:76:27:c2:be:4d:ed:ca:46:2b:52:6c:09:cc:49:
04:68:9b:a3:1c:d1:c2:bb:94:f5:b3:90:6f:15:a4:
0f:a5:ad:ed:34:c3:24:48:4d:7f:6f:0a:d4:fc:2f:
c7:b7:27:1b:95:4e:43:37:aa:2d:14:08:ad:4d:24:
9b:67:0c:7b:ec:17:56:90:e2:76:58:4e:c8:4b:7c:
7a:d2:a2:98:ad:3b:2e:8f:75:d5:c6:81:d3:e9:fc:
3a:10:fd:8b:fa:62:10:1d:08:89:9f:86:60:36:d3:
d7:f5:f4:3a:f7:44:77:b6:af:1b:cb:6e:99:60:73:
31:44:db:59:30:c8:f0:ef:da:b3:17:7f:f2:d3:c8:
11:34:9b:83:a7:41:6c:34:5c:18:49:20:54:b9:1c:
1e:21:b3:10:b4:4b:a8:5d:c3:4d:eb:71:30:ce:82:
fd:c4:72:bc:5d:e0:96:b8:ef:d5:05:65:2d:75:78:
74:99:d9:9e:44:e8:e3:31:38:d5:fb:1f:4f:fe:87:
c6:b3:62:d0:cd:23:20:06:f8:03:72:14:ba:d0:a8:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:3B:75:2C:A2:2D:63:24:81:D8:6E:63:DE:77:78:0B:83:31:FC
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/JKE7dSyiLWMkgdhuY953eAuDMfw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.198.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:09:2c:99:48:7e:c8:ac:f1:ce:73:c3:15:7b:df:f3:d8:8a:
c9:7a:30:4d:be:c9:53:d8:ac:44:95:ef:7e:6b:f6:a9:98:43:
f5:61:a1:b1:47:69:03:9e:52:4c:10:85:01:ae:bc:22:6a:b9:
9b:09:f2:3b:0d:d6:21:24:af:2e:21:5f:02:6d:2e:f0:76:08:
8f:d1:ae:82:b4:b9:32:68:1e:96:65:3c:35:aa:1a:9e:27:78:
ca:be:c1:37:99:b6:29:51:34:54:d2:2d:84:bf:8b:a9:76:39:
ef:3d:b6:b7:eb:e7:f4:a1:71:eb:c8:5b:82:f2:6a:a8:2f:43:
57:83:e2:aa:28:6d:68:8b:41:dc:3a:10:58:c5:95:56:b8:52:
47:6f:4a:a8:9e:13:42:2f:0f:bf:b9:31:64:bf:fa:a2:30:97:
9c:c7:bb:21:a6:93:f4:75:19:f6:0c:25:1c:e8:4b:66:22:2f:
db:ff:35:00:58:02:bb:b7:45:b3:71:77:70:6b:3a:f8:d3:ed:
5a:61:51:22:58:e9:6b:4b:22:f9:9f:85:22:17:77:b3:80:c5:
37:48:f7:e8:2a:60:10:f5:fe:98:66:83:ea:c1:58:5e:f5:38:
ab:0c:9f:cd:4a:ff:f1:7b:67:ec:86:2b:2d:04:58:e5:e6:f4:
42:65:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:46 2025 by rpki-client