Certificate
$ rpki-client -vvf dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
File: 9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer (raw, json)
Hash identifier: NVu5at++Qip4HB2DjSZ5JBe7amsYENtChUJG5P3jzwI=
Subject key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Certificate issuer: /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial: 3152BFA917DA38CD8B2CCDE96BDB66769D870A9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Manifest: rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.mft
caRepository: rsync://rpki.co/repo/AS945/10/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Tue 30 Apr 2024 04:31:50 +0000
Certificate not after: Tue 29 Apr 2025 04:36:50 +0000
Subordinate resources: AS: 1012
IP: 23.138.232.0/24
IP: 23.139.40.0/23
IP: 199.189.156.0/22
IP: 2602:234::/32
IP: 2602:fb44::/36
Validation: Failed, certificate revoked on Thu 20 Jun 2024 05:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:52:bf:a9:17:da:38:cd:8b:2c:cd:e9:6b:db:66:76:9d:87:0a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Validity
Not Before: Apr 30 04:31:50 2024 GMT
Not After : Apr 29 04:36:50 2025 GMT
Subject: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:39:ac:53:0b:9a:32:7d:7b:e3:65:82:f7:
42:e2:08:5d:c6:d9:1b:ce:f8:ac:78:4b:2f:b1:88:
ad:ca:a5:bc:eb:a9:dd:1a:6e:89:49:34:a0:14:1c:
ce:ac:19:c8:ff:ce:b0:eb:b7:c1:68:18:3c:34:1a:
68:50:e5:42:c7:36:60:c9:39:2b:97:fc:49:09:1d:
2e:20:33:3a:67:35:65:58:da:10:2f:28:1c:8d:a3:
48:9d:84:f6:da:c1:07:78:6e:8a:96:3b:a4:15:c4:
d2:a8:49:72:5f:65:7a:10:f4:9d:da:3f:c9:5a:6d:
e1:e5:8f:eb:01:e6:72:ad:4d:52:75:fe:58:2e:b8:
63:1f:df:62:f8:50:d8:7a:1d:f3:bd:e7:eb:da:83:
a8:2d:3b:1b:d3:e8:b7:d1:dc:5f:c9:be:3e:02:9b:
07:93:15:d7:7d:f1:7a:72:9d:b0:65:a0:82:be:85:
32:27:cd:c6:3b:53:5d:d1:5d:56:d9:62:8d:e2:81:
36:dc:4e:9d:e9:16:29:ae:a0:94:36:89:94:a0:c3:
ac:df:10:0c:5a:6e:d3:d0:ce:d3:c1:fc:75:c8:4c:
be:44:f2:66:3a:cf:be:86:eb:5f:4a:ab:f9:ef:76:
81:c4:f9:0e:c6:ab:1d:a9:41:92:6e:f7:05:a8:6f:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
X509v3 Authority Key Identifier:
keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/10/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.138.232.0/24
23.139.40.0/23
199.189.156.0/22
IPv6:
2602:234::/32
2602:fb44::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1012
Signature Algorithm: sha256WithRSAEncryption
96:6b:10:69:2f:20:31:58:a8:d7:18:bf:d1:c2:27:8a:0c:8a:
d0:88:6f:e6:cf:4f:2e:1e:03:0c:d6:44:d3:6d:87:b8:2d:75:
05:94:4e:52:67:7c:2b:50:69:cd:d6:39:e7:02:f4:2c:0b:2b:
3d:23:bc:83:74:53:77:42:55:43:72:fe:b5:90:bc:b8:f0:1c:
10:5f:49:a8:96:03:f4:4e:f3:0e:b3:54:0d:d1:b8:ab:3d:0f:
b4:fa:81:d8:5c:dc:70:3c:78:1d:30:ed:73:92:c7:11:b6:a8:
1d:70:aa:dd:59:70:a9:a9:01:80:34:c2:96:56:09:d8:f0:20:
ef:ce:3c:2f:2d:e7:7b:49:69:b5:d5:f1:9b:1d:45:a3:db:8b:
df:52:03:f8:4b:c7:72:e4:b7:f6:95:f2:cb:89:dd:4c:96:97:
93:b6:00:db:93:3b:2b:c1:58:58:a3:87:cd:e2:3e:7c:e5:e8:
58:c8:3a:07:f5:16:05:17:35:7e:49:64:00:e9:58:f6:eb:e0:
57:9b:22:91:6f:32:be:00:98:87:16:a5:df:2b:39:05:ad:cb:
73:36:69:d9:78:4b:29:40:33:40:2d:75:cd:3a:83:52:6d:4e:
b3:64:64:23:06:dc:f7:d7:db:e4:6a:49:cc:26:91:fe:cb:df:
b2:42:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:18 2024 by rpki-client on console-fra.rpki-client.org