Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer
File: yBW9GaZ-f0MMkQyjqLbOk4KDb0A.cer (raw, json)
Hash identifier: Vc10ohfhYpw57jDUrFm0Ta/rMafEzNNlKtffRkslc7I=
Subject key identifier: C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 3942
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 27 Nov 2024 10:21:19 +0000
Certificate not after: Sat 15 Nov 2025 08:24:41 +0000
Subordinate resources: IP: 160.250.102.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14658 (0x3942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Nov 27 10:21:19 2024 GMT
Not After : Nov 15 08:24:41 2025 GMT
Subject: CN=C815BD19A67E7F430C910CA3A8B6CE9382836F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:ae:11:ba:d3:94:33:c9:f1:12:ad:8d:ae:
d5:80:9c:aa:64:f5:a8:7c:8e:ed:cd:c3:7e:bb:d2:
0f:d2:a2:19:7c:0a:da:39:3f:43:52:50:50:6b:d5:
d8:cc:2c:4d:cf:76:8a:b3:b9:73:fc:92:b3:bb:bd:
a5:93:66:66:92:47:31:05:a7:7c:96:c4:3a:47:72:
94:44:44:ae:ea:94:0d:b7:61:94:fe:49:79:7d:31:
c8:e1:14:cc:99:c4:d2:33:6a:41:cb:d4:0c:42:34:
57:a3:d9:0f:76:f8:ad:f0:48:9b:8b:14:93:93:4f:
f5:90:d5:20:aa:fc:20:22:54:e8:5c:ef:49:d2:9f:
77:f7:69:5a:37:c7:93:8e:e2:19:c8:c7:e1:63:e2:
d9:55:0d:21:95:5e:41:3b:9a:d4:63:1d:a4:2f:7b:
a0:d3:5d:d4:23:6d:a1:21:17:83:8e:89:42:16:a5:
37:92:8d:23:ce:e5:7e:6a:b0:4f:0e:e5:3d:f9:e8:
3f:8c:c3:d8:b1:7b:39:bd:b9:35:ca:bc:d7:83:49:
1f:9b:b3:d1:58:4a:58:4e:ff:78:78:7c:89:27:fc:
d8:97:b0:9c:62:b5:a4:96:b6:68:74:42:2a:26:8d:
cf:be:63:a9:82:96:c3:01:b8:81:81:e4:8f:f0:00:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:BD:19:A6:7E:7F:43:0C:91:0C:A3:A8:B6:CE:93:82:83:6F:40
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3330/yBW9GaZ-f0MMkQyjqLbOk4KDb0A.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.102.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:c6:1a:ea:e0:1d:74:51:60:ff:01:d5:d0:6d:a5:86:85:6f:
40:d7:7e:28:7c:79:f1:e1:49:32:59:38:98:fd:48:a9:30:f1:
33:83:a3:5c:bb:c3:9e:3f:3b:ba:b6:ca:05:ea:8a:45:e3:c3:
0d:d1:c3:34:e7:92:06:d9:22:3d:53:f5:67:1e:6e:9f:32:ca:
1f:c9:b4:90:2f:e7:c3:95:2b:c7:2b:c9:06:1b:af:fb:ee:a6:
a7:a5:84:59:3f:b8:13:61:cb:ea:69:f0:43:31:96:40:10:11:
df:9b:ae:fe:7b:91:52:08:cc:8e:47:b1:70:ac:09:61:ad:e1:
f3:08:3e:bf:1c:39:68:8f:c9:96:ea:c5:ff:19:5d:9c:09:7d:
f7:84:41:c6:8b:b0:a4:e0:ad:6e:e9:f1:0b:86:ab:a6:bc:55:
6c:dd:d3:c8:c3:b2:72:15:f1:4f:7b:f2:43:32:3d:53:c9:12:
f4:78:bc:0d:87:7c:dc:fe:a9:83:df:f1:f8:6b:dc:6e:ce:5e:
9b:e6:4a:24:93:42:f7:33:43:69:2d:f1:de:2a:94:40:a8:ed:
90:72:89:18:a5:6d:72:df:b8:9f:d0:54:d0:27:0a:7d:9f:c3:
c7:4a:83:3b:ed:18:b7:c9:f8:c6:c1:f6:a8:21:76:00:03:e3:
49:45:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:15 2025 by rpki-client