Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/VjBf8HDLOTCObGfBHw-2pS_W2zQ.cer
File: VjBf8HDLOTCObGfBHw-2pS_W2zQ.cer (raw, json)
Hash identifier: 9m7DJ33kwOjFxrNw8q6QDTcD9b1pPYebHKrLMq8xOrc=
Subject key identifier: 56:30:5F:F0:70:CB:39:30:8E:6C:67:C1:1F:0F:B6:A5:2F:D6:DB:34
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3971
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 05 Dec 2024 02:38:56 +0000
Certificate not after: Fri 05 Dec 2025 02:28:39 +0000
Subordinate resources: IP: 160.250.170.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14705 (0x3971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Dec 5 02:38:56 2024 GMT
Not After : Dec 5 02:28:39 2025 GMT
Subject: CN=56305FF070CB39308E6C67C11F0FB6A52FD6DB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:b5:fa:68:ac:ab:1d:fd:a4:2b:6b:0d:21:
9d:a3:29:25:ce:af:95:12:52:a0:46:96:68:24:ce:
52:7c:d7:e0:8e:67:76:b7:3c:29:24:93:d6:50:3b:
76:e3:9a:67:d7:79:ef:7c:8f:8f:af:75:eb:f6:18:
6c:ab:6a:da:18:b4:c3:aa:3a:d5:56:a3:07:32:a2:
bd:d0:56:d7:25:b0:9d:e4:d4:4d:e4:ae:bd:c8:c7:
b5:14:94:43:62:08:f3:92:60:f7:3e:98:5e:cc:d0:
e1:d9:af:7b:31:31:dc:b6:95:7d:d9:d4:d6:a4:97:
91:ff:54:8b:b8:5d:79:15:7f:96:4a:5c:a0:af:b8:
42:25:f9:3f:40:c6:91:8d:69:a0:82:f1:b4:b6:0f:
64:0b:71:a7:af:32:e6:35:ba:9c:c8:0c:3b:55:b1:
b6:76:f1:8a:f5:cb:89:67:8d:9f:89:7b:4e:5d:8a:
e3:4f:33:78:96:05:56:ca:e7:7e:7d:4a:c6:3a:ee:
33:be:a7:9e:9a:d4:52:cf:6d:04:df:ce:03:2c:33:
75:74:ed:3b:3c:49:e8:db:13:d5:47:87:ef:90:51:
93:25:95:d6:86:e7:14:ff:9c:0d:ef:8d:a5:41:fc:
d8:e8:a1:94:dc:6c:01:6f:17:4f:5b:b8:ed:b2:81:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:5F:F0:70:CB:39:30:8E:6C:67:C1:1F:0F:B6:A5:2F:D6:DB:34
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/VjBf8HDLOTCObGfBHw-2pS_W2zQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.170.0/23
Signature Algorithm: sha256WithRSAEncryption
55:e2:a8:36:d5:48:8c:fe:75:10:06:ed:43:ea:47:bc:6c:d7:
1a:6a:fd:de:a7:6b:9e:a2:b9:0b:2c:3f:5d:d1:15:60:d7:b2:
d0:ac:ef:5e:ed:58:37:61:55:b8:17:49:d3:a5:3f:78:71:91:
b7:9e:e4:ab:ed:b9:05:44:e4:43:bc:ad:71:4d:60:c4:3b:90:
7b:9e:3f:cf:02:e2:d5:f2:a4:9e:6d:88:e3:0a:b2:e1:d6:24:
b1:2f:87:00:cf:d3:fd:d4:a2:7e:6a:c2:5a:9e:cd:ca:04:39:
9f:20:6a:e6:87:55:51:23:3b:b9:d4:d5:da:db:dc:4f:50:12:
3e:59:c3:e9:f9:6f:a2:42:e0:81:f7:de:04:26:e8:ad:61:7c:
db:85:31:f0:d1:9a:3a:9d:5b:ce:74:97:e6:2b:b9:ed:89:f7:
6e:e4:ef:f7:3d:ab:41:ac:6c:c8:6c:53:0b:fa:2c:2e:b4:1b:
d3:b7:dc:cb:3e:87:8b:be:51:58:b0:66:50:99:1f:c9:e3:ab:
5d:fb:df:5a:56:c0:cf:e3:06:3a:8d:50:3d:84:77:f5:7c:91:
0b:59:f5:d4:03:ea:cd:6a:c7:59:f2:08:bc:fe:f4:29:73:23:
b8:6b:2e:23:9c:fb:86:2c:06:5c:99:b5:84:e5:cd:4e:13:9d:
fa:a5:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:06 2025 by rpki-client