Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer
File: UVW-Z5YR5iRXXXk4BwB2ozPFua4.cer (raw, json)
Hash identifier: lHB7mjFx/4flBsG3UZg9jI8XHjRZAwcUA5+HKO/NCTs=
Subject key identifier: 51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3841
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 11 Oct 2024 07:58:23 +0000
Certificate not after: Sat 11 Oct 2025 07:33:20 +0000
Subordinate resources: IP: 160.187.254.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14401 (0x3841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Oct 11 07:58:23 2024 GMT
Not After : Oct 11 07:33:20 2025 GMT
Subject: CN=5155BE679611E624575D7938070076A333C5B9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:6c:33:d0:60:d1:f2:32:0b:a7:c6:9d:89:
62:3a:18:06:80:96:30:e2:33:ea:ad:e1:28:a1:30:
b4:30:a5:f9:47:65:a4:6c:25:c9:a4:e8:33:a5:4c:
e9:23:da:52:b2:40:92:85:13:c3:a3:56:18:ed:eb:
17:6e:64:b1:d9:05:9e:3e:d0:7c:b1:3c:6a:05:58:
35:55:41:5c:0e:dd:e7:ac:40:96:04:36:7c:bb:14:
aa:e7:22:da:e2:f6:c8:7d:70:db:2f:df:1e:3c:e8:
ee:65:49:38:c0:90:8e:2c:4d:20:ff:b0:06:30:db:
61:fd:6d:38:94:be:4a:f4:e5:88:5c:85:24:5a:89:
ea:ab:aa:fd:d9:05:1d:18:18:e6:47:62:e7:e7:00:
53:30:2b:5d:6c:c2:f0:98:c9:60:22:27:7f:2e:a1:
44:69:c8:94:4f:7a:81:d7:e2:39:24:3f:ab:37:c1:
15:58:2e:cc:eb:1d:83:e7:1f:1c:e5:f3:0c:a6:31:
d3:80:a3:23:6b:26:13:aa:48:d7:d7:0d:a1:b6:cf:
ef:ce:50:90:7e:54:5b:47:18:e5:16:e0:ee:9d:2d:
fa:62:e5:81:1d:e9:41:83:75:66:8a:8b:99:23:53:
26:60:ed:6f:f3:4f:bf:27:18:bf:05:b9:ac:4b:3e:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:BE:67:96:11:E6:24:57:5D:79:38:07:00:76:A3:33:C5:B9:AE
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3321/UVW-Z5YR5iRXXXk4BwB2ozPFua4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:96:25:0b:4a:4a:db:3d:07:41:e0:f2:da:cc:4f:b2:aa:01:
2d:19:26:ef:6c:6d:7c:50:74:d9:1d:30:2c:3f:30:7f:ee:bf:
08:17:05:1e:60:ad:a4:bd:c9:37:43:ca:4f:79:ab:67:40:d0:
46:e0:04:ca:34:c0:ee:b9:da:40:02:36:6a:63:a1:71:06:6b:
8e:57:b7:2a:a9:05:35:a4:ff:49:0c:49:9a:0c:5e:81:b1:78:
a1:33:95:65:97:d4:97:71:c5:47:46:32:69:8d:dd:8b:16:54:
7d:87:5c:7e:4c:0b:b4:54:2c:c3:ce:09:36:ee:a8:a0:4b:d1:
a4:49:2a:11:99:49:11:4e:8b:5b:c9:0e:d1:37:d4:4f:a7:f4:
d7:a1:0a:1b:66:2b:45:e8:08:89:ca:8a:d9:ec:8e:15:aa:f1:
41:92:b5:37:63:ce:0e:d6:4f:c5:a2:93:be:a4:22:f0:79:e0:
d1:e6:72:77:69:6a:a3:6c:fb:a3:62:10:60:21:34:be:65:00:
18:07:2a:e3:6c:0e:0e:2e:06:fe:ec:9d:e1:11:80:bc:a1:a3:
1a:0e:31:6b:23:05:c8:6e:30:0b:9b:0b:e4:fa:ae:a6:b0:25:
2c:c7:3d:03:29:db:2e:60:cb:be:94:38:ef:6f:7c:19:4f:5d:
a0:f6:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:09 2025 by rpki-client