Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer
File: dLHNkLnEHIANH1u3AQiWQC4auU4.cer (raw, json)
Hash identifier: FQjeSTXvLOxmIWajbPzm++ZNEnUGrAYUUBOMIiUPU4U=
Subject key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3966
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 03 Dec 2024 08:35:05 +0000
Certificate not after: Wed 03 Dec 2025 07:29:30 +0000
Subordinate resources: IP: 160.250.160.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14694 (0x3966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Dec 3 08:35:05 2024 GMT
Not After : Dec 3 07:29:30 2025 GMT
Subject: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:32:2e:35:d4:25:d1:07:b6:e7:80:58:0f:
4b:e0:25:6e:c6:41:76:6a:71:f0:cb:6c:b0:3a:b3:
16:a2:0a:19:f8:c1:fc:2c:8a:f1:e4:66:6d:00:91:
f6:b1:bf:41:5a:d4:83:18:86:9b:4e:d6:6e:7f:ed:
6a:fe:03:4c:a7:f6:ae:8f:ce:bf:90:1a:0d:bc:a8:
11:71:78:aa:0f:f8:35:5c:54:e6:fd:88:bb:d3:72:
f2:7c:c2:b6:e0:d5:90:b8:8f:19:83:73:5c:a8:79:
1d:af:ec:3e:35:00:9c:81:4a:30:93:1f:33:52:b7:
a2:86:b3:53:63:4d:47:a5:ad:55:2c:d9:cf:25:26:
92:b4:ba:13:24:a4:42:e9:d8:23:c3:1c:ab:3d:d5:
97:47:00:bf:b5:3f:9c:f2:3f:8b:db:88:b1:42:8c:
55:00:c7:43:23:e2:d9:89:9d:a8:d1:f4:09:70:03:
92:72:9e:fc:c6:b9:be:7e:10:57:c3:84:42:67:9b:
ef:fc:b6:ea:c2:36:7e:1c:ce:be:94:bb:19:d7:fd:
06:aa:4f:c5:61:de:5f:1a:6a:ab:3e:28:c4:b6:eb:
a1:d9:5f:19:55:84:86:54:a7:f4:45:6a:9b:cf:44:
83:94:3a:34:a1:a2:ef:64:12:4b:1c:22:30:f6:e4:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.160.0/23
Signature Algorithm: sha256WithRSAEncryption
50:fe:4a:70:50:35:f5:9d:62:22:f2:c8:9a:ba:bb:5f:35:b1:
16:9e:b1:86:5c:fd:e6:5e:77:77:a5:af:b2:64:da:e8:e5:de:
b7:b5:5d:bd:60:1a:0e:e6:3f:2c:56:4d:b0:36:da:5e:88:65:
60:34:64:0a:72:78:5c:b5:ef:84:62:12:d5:e7:92:bd:d7:26:
c9:cc:25:97:66:58:a4:b4:41:47:26:5e:ca:03:03:fc:85:c6:
67:98:47:b7:f6:60:18:f3:6a:c8:ab:c0:24:a1:d0:20:dc:07:
5c:9c:d1:2b:3e:b0:53:7f:ba:c1:df:7b:d7:cb:16:8e:35:cd:
17:ec:2d:07:6e:45:d4:da:ee:44:de:0d:f4:85:80:6a:f7:36:
d1:07:e7:e7:d6:90:a3:a1:10:5d:2f:f4:fa:d3:ac:34:7c:20:
e0:9e:1b:44:dc:40:c4:5c:81:53:e3:fd:e5:da:8e:2e:1f:b6:
76:74:a4:64:21:d8:a1:c3:49:c7:6d:78:dd:fb:ea:9b:94:41:
48:85:8d:68:f2:91:4c:69:38:25:92:13:01:e0:e5:4b:ad:41:
6a:e5:8a:78:5b:30:da:64:dc:35:b5:55:19:a5:a6:e1:43:ac:
af:66:bd:38:2a:5d:2a:44:fe:71:7c:b9:4d:e0:15:31:71:39:
3f:3a:5b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:07 2025 by rpki-client