Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/d8dGei7gNDZsV_rH8mea6-bWobo.cer
File: d8dGei7gNDZsV_rH8mea6-bWobo.cer (raw, json)
Hash identifier: r2OH7r0RiWeIEQxUyuHDLnuYylHxQD7F2V6rhpYGCF8=
Subject key identifier: 77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BABF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:48:56 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:afa0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47807 (0xbabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:48:56 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=77C7467A2EE034366C57FAC7F2679AEBE6D6A1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:62:77:39:a1:52:26:f8:6a:33:d0:de:d8:
fb:4f:01:b4:e6:9c:ad:2c:cb:8c:bb:9e:05:07:4b:
1a:85:83:bb:d1:1f:a8:0c:5a:51:48:fe:0f:d6:ed:
6b:18:d1:e2:6a:95:40:39:73:8a:a9:6d:fd:ab:d3:
54:15:88:c6:2b:35:6d:af:5e:7e:43:eb:61:a2:52:
12:be:ba:7e:66:34:af:2c:da:c7:b0:ac:d4:85:e0:
88:bb:a9:f5:b4:81:48:3e:d3:e7:3d:a6:4b:c2:8f:
06:8c:49:e9:66:46:2c:33:5f:44:30:95:7a:3c:b8:
1e:62:02:cf:0e:87:c6:d1:6d:c9:64:1e:af:28:15:
eb:f3:73:9c:87:fc:25:8e:e2:93:79:3c:e3:47:c8:
5b:98:94:1e:48:d5:c8:77:1c:c4:e5:f4:dd:e5:0c:
24:c1:64:27:f9:82:a0:d3:ec:57:43:8d:cb:b0:d6:
53:13:77:0f:b6:15:f2:b3:90:b2:37:55:02:75:0b:
66:69:3b:a2:a7:7f:ce:2f:89:11:14:67:27:07:20:
0a:d9:24:2a:49:ed:d1:c7:e9:e0:52:66:7a:ba:8a:
11:c1:7b:cf:b0:be:19:fb:39:29:07:bc:54:c9:ed:
54:df:ae:45:70:33:bf:43:de:d8:26:5f:51:16:ad:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:46:7A:2E:E0:34:36:6C:57:FA:C7:F2:67:9A:EB:E6:D6:A1:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/d8dGei7gNDZsV_rH8mea6-bWobo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:afa0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:3e:76:1f:87:85:5c:c3:31:c3:64:1e:d0:02:af:ea:84:51:
df:0c:58:27:b5:ea:a3:44:eb:3c:c0:e6:d1:62:1c:52:08:9a:
c8:a3:8f:b0:0f:b9:d0:27:ed:3a:f4:e7:4c:c2:b6:63:64:d0:
65:7c:cd:82:e9:1e:c8:f3:08:e6:72:ca:b3:d3:59:18:63:de:
af:02:58:cb:55:9d:4a:ff:ad:e7:e7:4d:a7:bc:d4:e5:46:83:
a6:7d:a0:6f:0f:41:58:15:52:42:84:6d:ed:ad:1f:38:b6:e9:
8b:a8:95:c2:cd:68:77:2c:e8:af:e2:29:69:34:53:98:bb:e5:
c0:42:b7:98:13:7e:5b:0d:79:f1:62:fc:cc:75:3f:58:3d:1e:
c3:e5:73:9b:e4:83:f0:c6:e3:25:28:f1:06:0d:39:ee:20:a4:
80:2f:3b:92:03:e5:e4:b8:f1:af:5e:3c:0b:e0:96:e4:7e:65:
4f:b1:4d:ce:2c:48:dc:b7:31:9f:e1:76:79:77:73:b0:69:e5:
7c:9a:a5:c9:c5:85:64:be:0c:0d:44:5c:fa:0a:39:d1:2b:dc:
4b:87:da:dd:f6:7c:b1:eb:1e:1e:46:0a:d0:2c:5c:e9:9e:48:
74:f7:97:53:0f:f1:26:e3:d4:3f:a4:68:62:f3:df:d4:dc:48:
7c:a2:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:42 2025 by rpki-client