Certificate
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/L-xqDUU7pdQWzM1ZEjmRmsn_CFk.cer
File: L-xqDUU7pdQWzM1ZEjmRmsn_CFk.cer (raw, json)
Hash identifier: n9+UnU6vwHPKOck2FrJKhE7agDQNFuK2MJDzZNLfs28=
Subject key identifier: 2F:EC:6A:0D:45:3B:A5:D4:16:CC:CD:59:12:39:91:9A:C9:FF:08:59
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial: 4138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2642/L-xqDUU7pdQWzM1ZEjmRmsn_CFk.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2642/
Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before: Wed 18 Dec 2024 12:06:08 +0000
Certificate not after: Thu 18 Dec 2025 12:02:39 +0000
Subordinate resources: AS: 17953
Validation: Failed, certificate revoked on Mon 13 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16696 (0x4138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Validity
Not Before: Dec 18 12:06:08 2024 GMT
Not After : Dec 18 12:02:39 2025 GMT
Subject: CN=2FEC6A0D453BA5D416CCCD591239919AC9FF0859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:74:bd:0c:53:52:ed:4e:02:01:e8:b4:db:
17:b2:e2:3f:9f:ea:03:3c:32:0c:7f:78:06:44:3d:
4e:7b:04:a5:8b:e1:37:02:e3:b8:f8:3e:66:af:e8:
bc:1a:93:b9:9e:37:50:66:fd:d1:a4:c8:f5:72:d2:
5a:3f:13:7f:ec:0e:e8:5b:ae:e4:91:11:dd:a4:40:
91:4f:3b:42:9c:9c:04:1a:37:37:45:b7:e2:e1:2a:
77:54:68:85:49:f3:3c:c5:b4:a6:c7:55:af:9e:02:
46:f7:88:3e:44:76:01:40:4f:3f:20:0d:50:10:a2:
e3:21:69:20:95:4a:d2:c4:d8:0b:91:5b:8b:d9:5a:
9b:c4:a3:66:40:d5:2b:07:5d:3f:c6:0a:fe:d0:24:
da:5b:26:8b:c2:59:ea:cd:e2:06:6a:e0:10:8f:4f:
20:8e:76:da:df:80:35:65:05:7e:6d:af:92:01:e8:
95:e8:3e:12:c4:73:26:d3:5a:fb:35:7a:2a:be:60:
40:da:2f:b4:3c:a8:3e:d4:26:1b:04:0d:9f:15:ec:
48:f3:9f:a6:87:31:db:82:df:d5:39:f5:56:99:3e:
ef:c0:64:56:cd:4a:ea:1e:55:b4:fb:43:34:93:29:
0e:bf:25:d8:e5:b6:0c:a2:31:9f:aa:22:c9:35:be:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:6A:0D:45:3B:A5:D4:16:CC:CD:59:12:39:91:9A:C9:FF:08:59
X509v3 Authority Key Identifier:
keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2642/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2642/L-xqDUU7pdQWzM1ZEjmRmsn_CFk.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17953
Signature Algorithm: sha256WithRSAEncryption
77:9e:8d:54:b3:f1:a9:0e:8b:fe:dc:25:ca:5b:fa:ab:8a:2f:
f7:06:cc:15:a8:f9:e0:af:f4:11:99:09:fa:15:a9:29:1e:73:
ac:2c:84:81:8c:95:2a:6a:2f:13:6d:be:ac:5b:d9:9b:98:13:
6a:a7:ac:22:78:99:b3:b8:c6:16:b0:66:c2:a9:38:65:eb:1e:
15:e6:7a:c8:ab:c4:78:38:73:90:04:84:16:97:09:c0:3f:88:
e3:7b:fb:45:93:68:f9:85:a6:42:8d:36:dc:62:d2:33:b9:27:
22:21:61:2c:99:86:6a:3a:cb:be:1f:d0:cd:c5:99:83:f6:11:
f2:39:dd:fe:22:ef:2a:0f:af:73:3f:a1:fe:20:74:31:f5:6f:
a5:0f:09:2d:3e:da:f4:67:ce:b9:3c:b8:d5:14:63:ca:ce:3d:
8a:ea:06:2f:04:87:d0:ab:a3:1c:4d:1f:d0:f3:e6:3e:73:93:
e4:c8:74:ac:37:b4:52:13:85:08:99:a2:d7:56:d2:8e:9a:79:
b2:da:fc:a0:72:50:23:50:8b:08:a0:9a:e5:11:b2:9c:ae:23:
2d:4d:e6:f8:7d:60:6e:40:6e:8f:5c:21:96:e1:51:76:fb:cb:
f0:e5:8b:17:7b:f2:52:36:c3:aa:c8:21:6d:8b:62:b5:e1:64:
db:83:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:26 2025 by rpki-client