Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/KJHRbBFPOs_eoosPXIzhRucxndI.cer
File: KJHRbBFPOs_eoosPXIzhRucxndI.cer (raw, json)
Hash identifier: JkJPoFDNjyUvhYymptuiwTIn2dMOnODSX+F7xLuv+Ug=
Subject key identifier: 28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3848
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Sat 12 Oct 2024 07:43:28 +0000
Certificate not after: Sun 12 Oct 2025 07:27:43 +0000
Subordinate resources: IP: 160.191.0.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14408 (0x3848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Oct 12 07:43:28 2024 GMT
Not After : Oct 12 07:27:43 2025 GMT
Subject: CN=2891D16C114F3ACFDEA28B0F5C8CE146E7319DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:af:7a:03:54:4f:83:88:26:54:15:a4:c8:
71:10:ed:53:e1:f8:79:50:d0:77:90:ae:ec:01:a8:
e5:a0:0c:b1:44:ea:f2:b8:d0:91:11:51:ad:b3:86:
dd:22:47:77:9c:68:97:7a:63:23:05:6a:7f:a8:9e:
70:7b:f2:ed:91:30:02:cd:e5:5c:07:88:51:8b:43:
25:f8:c9:21:05:23:a9:6b:2c:b1:32:6b:0b:8b:6f:
ab:a5:de:d2:9b:78:7e:21:86:39:c6:7b:15:0d:81:
ac:da:e3:95:48:21:12:c5:74:aa:d5:8c:3d:e1:37:
fa:bc:e8:6b:24:b9:d1:9e:da:e1:3d:0c:f5:37:e8:
75:97:ae:a5:f4:30:42:79:ff:c8:4d:86:6f:45:f9:
e2:1b:19:a0:bb:50:75:32:d2:e3:d8:d1:90:e8:c1:
6b:d4:b9:e8:75:6e:50:62:07:1e:c0:3a:59:c1:49:
34:15:f8:9f:18:6f:b2:41:1b:f0:db:c1:02:57:0c:
ff:96:d8:66:17:11:94:24:80:6c:15:f0:05:f7:9c:
f7:f3:f2:ed:86:2b:50:a7:04:31:b6:d6:41:da:6d:
27:13:e9:e1:2d:c5:91:11:46:42:03:2c:21:7a:25:
66:a2:47:37:25:15:4f:c4:99:4f:ad:a4:25:e1:bb:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:D1:6C:11:4F:3A:CF:DE:A2:8B:0F:5C:8C:E1:46:E7:31:9D:D2
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/KJHRbBFPOs_eoosPXIzhRucxndI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.0.0/23
Signature Algorithm: sha256WithRSAEncryption
92:d5:ce:f6:48:6b:25:95:4f:d9:53:0c:cb:9d:c8:c9:39:16:
7b:55:75:7a:c5:e6:39:05:27:66:56:04:83:a8:94:c3:95:71:
5f:94:cf:79:91:6e:cf:d1:29:87:8f:62:1f:44:b8:bb:ce:2d:
e9:f0:ee:e0:0c:0b:c2:03:6d:34:5f:c1:64:b6:68:50:ea:cd:
d8:d3:17:5d:60:cd:f2:73:38:31:32:15:a4:33:b8:5f:16:7d:
75:ed:19:52:dd:bd:c0:9b:cf:10:eb:29:4f:aa:2a:da:52:38:
9f:a2:79:1b:89:c3:7b:7e:dd:a1:24:8a:75:dd:39:f8:8d:ca:
5c:e9:e3:7b:48:12:72:4e:04:88:73:4a:72:46:83:93:89:74:
f4:33:df:e9:d6:4a:cd:7e:0a:49:c7:f2:06:ac:6c:9e:ed:95:
da:d8:f2:29:f2:10:2a:7e:10:48:9e:72:54:ed:d7:82:bf:5b:
69:45:a1:b2:22:32:e0:16:c6:04:9d:bb:17:fa:b7:b8:52:5d:
aa:2f:1a:76:53:61:47:7b:0a:0a:ef:7e:77:23:cc:f2:23:8c:
20:1b:9f:96:8a:8f:39:fe:92:ab:c9:0a:1d:d9:0e:ad:19:90:
7a:0b:78:b6:18:40:43:2e:76:91:c1:4f:f8:17:4a:f9:8f:3d:
3c:78:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:38 2025 by rpki-client