Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vprtouQBwCThFN7roFBLwzpoUck.cer
File: vprtouQBwCThFN7roFBLwzpoUck.cer (raw, json)
Hash identifier: yj+EHU2y3Ep5/Js869EK+TgS0UzEgeJ06Ym5h0rzB4M=
Subject key identifier: BE:9A:ED:A2:E4:01:C0:24:E1:14:DE:EB:A0:50:4B:C3:3A:68:51:C9
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C16E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 02 Dec 2024 02:30:36 +0000
Certificate not after: Tue 02 Dec 2025 02:18:36 +0000
Subordinate resources: IP: 2401:dbe0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49518 (0xc16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Dec 2 02:30:36 2024 GMT
Not After : Dec 2 02:18:36 2025 GMT
Subject: CN=BE9AEDA2E401C024E114DEEBA0504BC33A6851C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:c7:e5:76:0d:94:47:42:50:7f:cb:88:b1:
20:94:b0:f2:ef:0d:af:dd:85:4c:74:49:8b:64:33:
2f:86:77:fd:3a:44:34:34:e9:ad:ac:6f:17:93:46:
27:dc:01:56:ac:4e:de:8b:d1:3a:2a:a1:29:ff:58:
69:8f:8a:04:49:3a:1b:c2:55:5d:be:eb:7e:ec:45:
ca:b3:37:12:3e:1a:0f:79:6f:12:97:8d:7d:7d:79:
c2:c2:50:29:d1:46:f6:99:c1:b4:a2:20:2e:b8:d1:
29:ac:f1:14:ca:ee:b2:e0:31:b9:44:e0:08:c2:f5:
5c:e9:93:9a:72:84:d1:ed:8b:28:dc:53:82:74:5b:
41:47:a4:32:c3:17:46:07:5e:fd:9e:b9:ad:77:39:
92:90:ff:fc:a5:21:a4:17:d3:da:96:4f:ec:75:aa:
2b:5f:9c:8f:3f:55:95:5f:38:f7:1a:ce:1e:f2:99:
d7:d6:3d:c9:c0:9c:58:41:65:3b:44:28:af:64:b8:
d9:4f:09:4b:0c:38:e6:36:77:6a:c4:ef:21:d1:a9:
cb:2b:33:e7:f6:ce:2f:20:16:0f:fe:bb:d5:ae:fd:
57:9b:9d:55:a3:c3:63:20:ec:2a:22:4b:7d:2d:eb:
ee:db:22:f7:8f:fa:6d:38:b6:b0:36:a3:fc:23:32:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:ED:A2:E4:01:C0:24:E1:14:DE:EB:A0:50:4B:C3:3A:68:51:C9
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3334/vprtouQBwCThFN7roFBLwzpoUck.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:dbe0::/32
Signature Algorithm: sha256WithRSAEncryption
72:02:1b:27:02:5b:38:c8:7e:f2:55:83:f4:53:26:86:e8:a7:
69:19:10:ab:b2:b3:fe:ee:6e:6e:c8:9f:12:c4:26:ae:04:aa:
40:94:8f:ea:ed:17:10:71:22:a7:3a:51:83:5f:84:2a:0c:f2:
b0:aa:b0:ae:51:05:8c:ed:a7:fa:4f:a5:07:c5:cd:76:45:1d:
f8:33:dc:a7:97:8a:e5:62:63:87:4e:78:bf:0a:97:0a:58:04:
5c:26:ab:b5:58:9c:a7:e6:83:b9:2b:eb:08:1b:33:11:b0:dd:
a5:1e:2e:29:5f:bb:e4:58:c5:99:31:3f:62:4a:ff:19:62:42:
b5:a6:63:13:2e:47:21:cc:6f:bb:9a:3d:b7:5d:a1:86:d1:28:
c0:ba:67:d3:63:e9:1c:af:96:02:7b:23:e7:50:bc:79:3e:4a:
3d:8c:93:2d:5f:95:dd:93:4f:e3:1f:8a:1e:b4:2d:ef:77:e7:
67:2f:ab:ad:6e:51:2e:c7:2f:8a:31:3c:99:20:d6:9d:ef:96:
7f:aa:ff:bc:96:7e:47:b5:13:22:0c:b1:19:f8:9a:1b:6f:08:
42:b2:82:a7:12:fc:4a:82:5e:9f:10:53:1f:e0:dd:6a:b1:16:
32:8c:d4:ab:6f:f8:f8:47:27:a1:7b:56:d6:1f:e4:e5:89:79:
7f:9c:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:36 2025 by rpki-client