Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer
File: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (raw, json)
Hash identifier: EBPO+j383ZTZL3W25SBCuUDnWsryeNl/oCk3sCJDyPg=
Subject key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4522
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Dec 2024 18:17:54 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 154.8.64.0/18
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17698 (0x4522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 24 18:17:54 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A919986F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:e6:5e:79:19:0c:eb:25:43:58:a4:6c:69:
3c:1b:b1:76:40:04:59:1b:10:96:c5:9a:ff:38:6a:
00:ac:27:6a:42:e0:1e:31:62:32:bf:a5:0a:16:c6:
ae:fd:f1:21:70:77:4a:aa:76:51:5e:05:59:e0:5d:
c7:bd:9e:f3:c2:b7:a3:dd:f4:2a:ce:6c:b9:dd:0d:
4e:91:28:62:6a:4d:42:0a:62:da:f9:da:68:2b:dd:
f7:3a:e7:c6:c9:4d:d7:96:22:7c:60:66:18:92:0e:
ba:d9:5f:b9:c9:87:86:90:5d:1d:b7:0f:cd:f2:8f:
36:50:56:fe:07:bc:ca:13:8f:4c:68:9f:2c:44:c5:
ac:06:6c:3e:d4:10:a0:2c:2d:e8:f7:87:0a:31:c3:
3a:bb:56:45:a7:96:06:32:9a:42:3a:b0:7e:bd:fa:
6e:d3:53:2d:01:9d:70:d9:13:fe:86:9d:6a:85:72:
4a:8d:54:5e:64:74:63:1c:25:5f:9a:d1:57:67:8c:
5e:37:f9:67:00:ef:e4:77:28:a4:ad:c7:d0:d7:f8:
c0:40:9e:a5:95:4a:c6:97:4d:c5:f2:9a:ea:db:42:
27:86:c6:dd:ad:97:f9:c0:5f:59:c0:e9:af:3e:2a:
5e:94:1d:ec:be:ef:7d:ab:84:29:b3:77:3f:0f:4c:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.8.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:7d:c5:2d:50:04:4e:89:a2:95:b7:b9:74:a8:8b:90:5c:d0:
d3:be:33:d6:be:c1:6c:2f:1d:40:35:84:57:ce:7e:b6:0c:ea:
e2:06:de:f1:9f:62:8c:37:7b:5c:8e:2b:cc:fa:80:d0:b5:fc:
01:60:39:5a:e5:8a:b4:c2:db:1e:cd:44:7b:47:98:28:86:a2:
70:2e:9a:bc:94:48:58:04:dd:e8:6f:55:ec:ec:5e:95:ab:ae:
bc:35:73:9b:1b:71:d6:2b:58:44:b7:18:1d:f8:b7:54:85:bc:
bb:75:07:18:87:03:c7:da:6f:14:0e:a1:cf:89:76:6a:39:a7:
1a:15:f5:69:10:41:8f:da:82:ac:73:4f:15:75:3d:b5:e5:ad:
1c:64:c1:9e:c3:70:c7:bb:37:56:2a:10:46:ad:8c:20:42:c3:
ee:40:be:66:8c:21:9b:9b:9f:99:27:21:cb:3f:0d:c0:5f:c7:
8f:ed:70:ca:10:77:5f:47:d6:90:41:e0:e2:7d:e8:2a:75:f6:
4d:4b:a1:1f:c8:90:2a:b3:e7:60:41:f8:13:29:7e:4e:45:d9:
a1:48:35:f6:be:d8:c5:49:99:99:70:cc:32:66:26:60:42:56:
5f:6e:81:2d:7e:53:36:4a:19:be:10:0b:ff:9a:9f:5c:99:e6:
28:0f:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:01 2025 by rpki-client