Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/MhLECXbovqr84IRHL8u8MS-Szow.cer
File: MhLECXbovqr84IRHL8u8MS-Szow.cer (raw, json)
Hash identifier: yN3H4Wab+HFYz9oIeGGtnXQacDupY7tzslJBT4LSESA=
Subject key identifier: 32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C5A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 20 Feb 2025 10:24:42 +0000
Certificate not after: Fri 20 Feb 2026 09:10:43 +0000
Subordinate resources: IP: 163.61.202.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50594 (0xc5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Feb 20 10:24:42 2025 GMT
Not After : Feb 20 09:10:43 2026 GMT
Subject: CN=3212C40976E8BEAAFCE084472FCBBC312F92CE8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:d9:ce:f7:4b:e4:fc:2e:28:54:9d:41:71:
ff:4f:da:bf:5a:6a:b3:28:4b:13:6e:82:4f:73:ee:
0b:58:1c:e8:9d:c8:97:d4:d5:58:41:f5:cf:5b:ac:
aa:5f:f4:12:ef:1c:41:40:62:66:19:1b:35:2b:a1:
72:72:be:6a:bc:b0:48:83:16:82:31:4d:63:aa:45:
b1:4e:3d:b2:19:ac:89:11:2e:5e:60:96:6d:d7:8d:
70:fc:05:fa:ad:fa:1f:19:e3:3f:0c:18:cb:73:fe:
8a:2e:5d:ea:a8:7e:94:f9:9e:71:84:a1:e5:c4:e0:
44:19:82:3e:f9:f4:2f:3a:f8:ec:72:94:c1:0d:25:
84:90:15:fc:db:0a:c7:cc:93:6c:06:a4:00:9c:7a:
d4:78:fc:c2:d1:93:07:8e:13:50:3a:7b:ee:1a:f9:
6a:ef:dc:1b:eb:7d:dc:ff:c7:47:58:8b:d8:bb:12:
9c:58:93:54:09:5c:fc:82:6a:87:40:73:fe:3b:fe:
5d:6c:c3:9f:ac:a4:7b:f1:92:30:be:99:07:df:1c:
4c:2f:74:a9:2d:35:6a:e6:44:15:c3:b4:ee:4a:d0:
04:40:d2:00:d4:ac:23:15:43:ed:a0:85:d2:b8:d0:
6b:72:76:d6:b8:9d:95:0f:ad:00:78:8f:19:7a:89:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:C4:09:76:E8:BE:AA:FC:E0:84:47:2F:CB:BC:31:2F:92:CE:8C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3353/MhLECXbovqr84IRHL8u8MS-Szow.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.202.0/23
Signature Algorithm: sha256WithRSAEncryption
73:29:cd:1d:75:10:84:1f:59:0e:5f:71:ad:ed:60:72:f4:49:
50:41:54:56:be:c7:0e:91:9c:06:2c:61:aa:e9:cb:29:dd:e7:
e8:cd:f8:ab:0d:b2:ac:f9:fb:d9:b5:9b:3f:b2:fd:bb:20:60:
2b:20:5b:84:b5:b4:17:27:fc:47:16:a3:92:37:96:2e:61:7c:
fa:c3:62:93:11:56:8a:3f:2b:a1:7a:8c:32:d0:f4:83:e6:76:
1e:d8:a6:c7:0a:3b:7d:17:97:61:d8:47:cb:86:c2:72:e3:f0:
70:ac:fb:6b:2e:6d:cb:b1:aa:5d:f6:21:ac:4d:b9:73:b2:07:
4e:86:1c:98:ec:46:b9:5e:46:af:04:26:1f:8d:18:6b:31:ed:
5d:52:28:34:24:1c:73:cf:84:f2:2b:c4:df:15:20:3f:df:ee:
d3:71:6e:b7:db:50:9f:2f:1a:fb:f7:f3:de:d7:f9:29:4d:52:
d9:52:ca:6b:46:c4:ef:4d:42:71:7b:2a:74:51:c6:7f:57:9a:
d4:d6:d6:11:79:81:cf:55:e2:a9:9d:3c:7d:63:6e:14:c0:0b:
5d:49:21:55:b4:9a:d1:f2:8f:ae:95:2b:c5:05:a1:ad:23:96:
ae:49:04:3a:c7:d4:fc:37:e3:ff:83:2a:0a:eb:0b:13:8b:0c:
0e:0d:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:03 2025 by rpki-client