Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer
File: b9AjRMs0VRt1rQS0HGQaJAmBRa0.cer (raw, json)
Hash identifier: yOYfei9Yy+IIoTAsUikAUp+Tu1WXlFcZhnJ8Jk1nlDs=
Subject key identifier: 6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BAE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:49:30 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151287
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47847 (0xbae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:49:30 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6FD02344CB34551B75AD04B41C641A24098145AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:20:d2:36:99:bd:09:00:ed:4e:b2:0c:95:
f0:2d:c8:37:87:53:42:bf:a8:4e:3d:d8:14:31:c0:
49:77:45:0f:37:64:7c:6e:6d:25:ce:6a:38:44:d1:
84:a8:bc:63:6e:50:a7:c6:f2:d4:4e:81:c9:b8:ed:
26:8b:46:7c:bc:1c:2e:56:a5:c4:54:2a:9d:0b:c7:
35:5f:60:ff:f8:bc:6f:2a:6e:4e:a0:a8:9f:8d:bc:
5f:52:5e:ec:c6:5f:a1:ba:62:ca:ee:7d:fa:80:4c:
c5:36:14:20:1c:a4:13:d6:51:10:1f:d3:56:11:7e:
0b:7e:c7:4b:2e:d9:c3:60:02:1a:a5:da:8d:5b:b5:
3f:92:29:68:75:6a:c1:46:9c:19:b5:2a:e3:f4:35:
5a:1d:3d:b9:30:7e:3c:d0:41:fd:86:56:47:23:d6:
07:24:0a:d4:a7:16:71:9b:cd:2d:d4:b1:c3:b3:85:
59:8a:58:e7:52:0f:6b:b8:19:a3:bb:3c:0e:b5:39:
0d:a4:e0:1e:14:8e:b2:4f:9d:a9:3d:26:fc:6e:47:
4b:3b:df:7e:05:b1:47:3c:09:ca:8d:d6:15:cf:91:
20:af:6c:b5:fc:18:39:02:37:7d:31:02:73:68:64:
73:01:49:bb:5c:5a:e4:9d:88:d8:86:42:9c:e4:3f:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:23:44:CB:34:55:1B:75:AD:04:B4:1C:64:1A:24:09:81:45:AD
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3277/b9AjRMs0VRt1rQS0HGQaJAmBRa0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151287
Signature Algorithm: sha256WithRSAEncryption
87:ad:33:eb:a6:ae:73:b0:5a:be:26:d4:ca:22:94:e6:a8:92:
a0:cd:65:66:06:9d:32:c5:6e:86:7e:87:4a:7d:cf:35:46:23:
ac:82:0f:f2:9c:ac:88:4c:99:d1:43:8b:da:a3:c7:f4:99:15:
63:3a:4d:3f:cc:c5:d7:fa:18:fe:99:74:1f:8a:bd:40:b5:88:
98:1a:0c:39:bb:ec:77:19:9e:ff:8a:66:85:fb:3e:a1:ea:20:
50:e8:89:7e:4f:97:bf:a8:d9:43:4e:bd:cc:8f:38:b8:c2:3b:
51:04:06:3d:f9:d6:a4:86:0f:d3:f9:b8:de:ed:79:26:ac:a5:
3a:3c:9b:30:76:13:7e:f3:22:7d:36:3a:4a:e6:ea:fb:f2:f2:
a1:59:e1:b1:81:2b:37:d8:43:1a:40:06:f7:ad:a5:6a:76:80:
d6:b5:77:b5:b1:b1:e5:d6:4f:95:1d:2d:5e:96:83:d0:e7:26:
7e:e6:2f:5e:15:19:cf:e8:14:18:3b:f2:90:28:c3:5c:50:02:
26:97:ea:8c:6a:8e:6d:48:5f:53:1f:f8:35:8e:3f:d6:a5:b9:
9c:07:c4:9f:62:73:7e:63:ed:9f:56:1e:6b:ec:ae:a7:3c:79:
72:a7:33:ce:57:a2:88:bb:bf:ba:32:fe:81:95:13:c8:4f:70:
70:a1:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:44 2025 by rpki-client