Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/uge0OwuPJrADnwzD_eHuRAJWurQ.cer
File: uge0OwuPJrADnwzD_eHuRAJWurQ.cer (raw, json)
Hash identifier: SSGWgsX3iUmbh2Uw1XclHasBEFnrhKy/Z7qQcQcfg3Y=
Subject key identifier: BA:07:B4:3B:0B:8F:26:B0:03:9F:0C:C3:FD:E1:EE:44:02:56:BA:B4
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CBCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3304/uge0OwuPJrADnwzD_eHuRAJWurQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3304/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:28:48 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 2401:b220::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52171 (0xcbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:28:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BA07B43B0B8F26B0039F0CC3FDE1EE440256BAB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:2f:1c:ed:8d:9e:ae:64:14:aa:e0:a6:46:
90:52:fa:f1:25:33:15:1a:1e:47:ae:9f:ec:0e:e2:
5b:c8:9f:49:83:d9:b7:64:5b:47:75:44:d0:25:cc:
9f:4f:1e:ad:35:b7:53:2e:e9:9d:65:6a:85:dd:62:
cb:7c:96:a3:d1:ad:4a:ae:64:19:57:fe:54:66:fb:
d1:d1:d1:0e:7c:61:99:4a:e0:65:30:4d:27:e1:97:
00:fc:be:79:67:bc:b1:bc:e8:d6:41:09:da:77:d2:
c9:d7:37:e1:7a:cf:02:cd:28:cc:3a:80:9d:96:09:
61:ef:4c:21:44:94:14:7c:c8:ae:eb:67:58:a9:c7:
bb:0d:42:89:b4:56:eb:7c:dc:35:c2:38:5a:5a:61:
1f:da:08:2a:72:a6:44:36:da:69:a1:af:44:1c:be:
bc:73:b4:84:98:c0:ed:f1:c5:ab:a1:97:5e:99:0d:
f6:40:e0:a2:ff:9b:5b:4a:7b:23:e1:db:3c:8e:4f:
ab:22:da:ce:b7:d9:5d:a3:d4:bc:68:38:93:5b:f8:
1d:1e:8d:95:51:cb:53:f4:c5:95:23:e4:32:7a:02:
9e:2b:f3:c8:01:f6:e7:b8:d0:84:c8:e3:b9:a9:af:
81:f6:7c:28:87:b1:06:d8:8d:87:73:d8:22:8b:aa:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:B4:3B:0B:8F:26:B0:03:9F:0C:C3:FD:E1:EE:44:02:56:BA:B4
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3304/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3304/uge0OwuPJrADnwzD_eHuRAJWurQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b220::/32
Signature Algorithm: sha256WithRSAEncryption
07:a1:a3:81:78:c3:27:5b:52:23:6f:93:30:4a:9c:fb:d5:c6:
bd:ec:90:a0:0c:ce:09:ec:7c:2c:e4:4f:be:cb:ac:32:8b:f1:
43:75:02:f3:44:72:74:ac:58:70:69:d2:f7:b7:fc:ee:ed:02:
24:c9:c2:78:7d:7f:22:92:1f:80:93:0f:31:2f:9b:3d:3f:41:
d3:0d:1e:98:a5:61:b6:2b:d6:ab:d7:70:87:5b:fe:ed:d6:76:
e2:f2:a8:84:aa:47:9b:f3:af:2f:38:68:1c:7e:ed:ee:5f:89:
a8:a6:65:d2:7b:a9:b5:e8:f5:40:7b:2f:54:94:53:0d:c9:f6:
23:1c:c6:17:d7:5e:ff:a4:53:2c:fd:76:a8:69:3f:0f:45:14:
a2:55:28:28:3c:a7:22:17:82:26:ca:fa:87:22:ff:e5:d6:80:
a8:71:84:ce:26:fe:a2:bd:2b:75:4c:ef:84:11:84:52:14:0c:
d6:3f:fd:6c:e3:c7:d5:d3:a2:d3:c2:bd:30:8d:f6:78:4d:8c:
cf:08:90:31:4b:eb:5f:ad:ce:26:52:05:14:f3:f3:a3:1b:ab:
8d:c8:82:bf:a5:ca:0a:ec:4f:f2:1a:8e:21:1c:65:45:39:be:
55:62:89:25:21:d6:c0:70:26:a1:7d:bc:f9:40:06:f4:a2:76:
e7:dc:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:20:41 2025 by rpki-client