Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
File: zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer (raw, json)
Hash identifier: SLlXPDgaOLCpryExHe2Q2P0Y0xkw8ZWm7wWHwg3dp0Y=
Subject key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11
Certificate serial: 37AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:52:15 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 47.92.0.0 -- 47.127.255.255
IP: 139.129.0.0/16
IP: 139.196.0.0/16
IP: 139.224.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14251 (0x37ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Sep 27 02:52:15 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:38:14:7f:eb:9c:13:17:15:f5:a0:1a:86:
59:77:69:59:65:2a:51:e0:15:c1:2a:3c:cf:c2:81:
98:c4:aa:55:c0:31:b4:c3:f4:72:00:4f:a7:8b:46:
6a:fb:4f:a4:23:81:2a:1f:6d:b2:36:4f:0f:fb:6e:
9a:0b:2f:b4:68:69:75:8d:f7:1c:30:a2:43:7a:b4:
06:16:ad:dd:a1:41:dc:04:b2:31:ee:64:ba:9f:12:
91:39:9e:ca:f5:63:21:34:c0:32:63:00:ca:c6:87:
8b:e2:d9:07:d9:8d:ea:b9:08:ba:d8:e2:3d:5b:71:
9a:bc:9c:49:f2:e9:31:99:a6:34:16:c4:34:84:8b:
0e:59:6f:0d:8a:25:63:d7:80:c5:48:62:ad:d6:79:
fb:bd:80:25:97:8e:fa:41:62:31:4f:cb:6f:16:d6:
4d:8e:87:90:2e:94:d1:be:b2:c1:07:a2:9c:d0:5d:
77:c6:96:11:a5:a6:c3:ac:3a:65:0f:cd:fa:f6:00:
78:15:ee:c9:d7:7f:b9:dc:51:33:7a:58:5f:39:4a:
c5:d2:d1:25:61:cf:e4:98:79:a5:02:f0:89:5a:2c:
59:f4:3d:c2:87:34:fe:9b:3d:63:81:94:74:58:15:
da:2b:df:87:59:cb:24:94:bf:6d:32:5e:4e:09:57:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Authority Key Identifier:
keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.92.0.0-47.127.255.255
139.129.0.0/16
139.196.0.0/16
139.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:e7:7a:d2:d2:2b:8f:3b:0e:8a:07:2a:31:6a:d6:39:00:35:
69:3b:87:e0:07:f7:98:39:47:88:b7:a7:c4:fe:b4:7e:29:23:
38:b0:22:fa:25:ce:29:87:cc:b6:73:34:a0:d6:91:48:78:fb:
73:de:57:ee:8a:7f:e8:1b:9e:a3:92:c8:7a:c8:8f:00:8f:a8:
e3:29:7c:05:92:f1:bb:f6:02:8e:7f:3d:a1:f9:ed:21:c6:64:
f8:3d:8d:77:c7:4b:33:a5:13:0d:03:7a:5d:19:7f:ae:aa:c6:
27:67:52:60:c1:2e:62:a7:dd:56:19:f8:7f:fd:c6:1d:fb:bf:
03:be:cf:67:75:ce:93:e9:dc:ac:b2:0a:c8:64:68:f5:17:73:
09:71:bf:0c:c5:ac:ef:b5:6d:b4:6f:12:5c:da:13:6e:04:e8:
5c:e3:b5:12:40:8b:6c:cf:eb:ec:ab:1c:7f:c1:25:30:a7:b4:
a5:70:68:01:60:d5:24:3b:cb:20:06:66:d3:60:e6:4c:8f:ea:
e2:07:2f:a1:5f:90:ec:ee:04:43:2d:99:df:e6:96:77:8d:71:
dd:29:ce:34:83:c3:71:09:2a:8e:e9:83:f9:f7:8c:1b:73:8f:
d6:4d:ed:f1:02:0a:57:05:b9:70:d1:77:ad:21:5e:bd:ad:23:
26:ac:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:22:00 2025 by rpki-client