Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TBGgdwrPZn2UqAWy5rc6c_oKVis.cer
File: TBGgdwrPZn2UqAWy5rc6c_oKVis.cer (raw, json)
Hash identifier: 0IkRdwO2Hij3D/0ZCdJikKFCb3QOVUfwf6iJq28I9Y0=
Subject key identifier: 4C:11:A0:77:0A:CF:66:7D:94:A8:05:B2:E6:B7:3A:73:FA:0A:56:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E1A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153690/C4809B409EDA11EBB686332FC4F9AE02/TBGgdwrPZn2UqAWy5rc6c_oKVis.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153690/C4809B409EDA11EBB686332FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 00:32:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 134481
IP: 103.161.20.0/23
IP: 2406:f8c0::/32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123299 (0x1e1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 00:32:42 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A9153690/serialNumber=4C11A0770ACF667D94A805B2E6B73A73FA0A562B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:9a:e4:83:0c:05:a6:75:72:58:3f:76:ed:
83:55:3d:ed:01:92:51:f3:94:21:68:23:fb:0c:29:
83:38:2e:91:9b:13:dd:a1:ac:b2:58:9c:d1:49:9d:
e0:07:16:84:b6:1f:da:a8:32:e2:fb:21:93:00:b0:
da:5b:31:35:34:71:b4:ea:fe:a2:34:8c:43:0c:86:
42:c0:1d:e2:bc:72:16:ef:90:20:c1:79:0e:b3:42:
e7:12:b4:02:44:1c:82:87:ef:f6:05:3b:d3:ca:a0:
fe:73:38:d7:2c:6c:9f:bf:ea:05:16:87:a1:c6:f7:
e8:23:bf:6a:f9:c6:da:50:2f:6f:d7:40:25:37:2e:
d1:6f:10:c7:a7:66:ad:bd:6b:53:7b:70:7b:da:18:
75:0f:b5:0f:66:da:20:47:de:6d:0b:11:6c:4d:e2:
c4:26:cd:93:02:99:f4:c2:87:54:13:9f:53:30:b3:
17:52:3d:71:29:15:40:98:5b:59:d2:eb:0a:24:17:
e2:5f:80:b1:b1:4b:96:a2:8a:02:4d:86:c9:e4:5c:
b2:6b:63:db:6a:ee:a3:ed:ff:e3:34:5a:04:ab:55:
0f:de:8b:99:1d:2e:65:81:69:a7:0c:99:84:7f:07:
f7:d8:5f:3c:e3:5c:f5:91:fd:24:98:51:52:ec:70:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:A0:77:0A:CF:66:7D:94:A8:05:B2:E6:B7:3A:73:FA:0A:56:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153690/C4809B409EDA11EBB686332FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153690/C4809B409EDA11EBB686332FC4F9AE02/TBGgdwrPZn2UqAWy5rc6c_oKVis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134481
sbgp-ipAddrBlock: critical
IPv4:
103.161.20.0/23
IPv6:
2406:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:a8:ba:91:e8:16:4d:e6:b2:17:55:28:e3:f2:f5:ba:8b:de:
f1:1b:d6:1b:fc:63:e2:57:23:65:c5:7f:89:09:d0:4a:39:4d:
66:39:9b:a3:b7:40:f8:33:92:9b:cf:4e:0d:fa:ad:70:51:4c:
ea:e0:9b:2f:0f:24:3a:cc:9e:21:3e:76:99:ec:1a:0a:65:52:
50:32:0a:32:ec:b2:65:5f:b3:1f:dc:91:61:76:b0:a5:a3:60:
06:64:52:d1:ae:0c:f1:62:8d:a3:c4:c5:43:74:07:06:c8:94:
45:c5:c9:aa:3f:6b:99:3c:63:52:15:2d:d3:0f:ab:9f:b1:80:
8a:d6:e2:6e:c7:cb:a2:76:6b:44:96:b6:6d:52:18:95:dc:07:
b7:6e:4d:00:a9:b3:e4:5a:e7:42:21:d4:db:86:27:52:1b:8c:
e5:c4:85:f6:4a:2a:b6:fa:2d:69:a4:91:88:d0:96:56:da:2a:
97:fa:41:a0:53:f2:9e:2f:a0:57:e6:8f:6b:3e:94:e8:0b:0e:
a3:1d:b1:d7:d6:43:9c:c6:4c:a4:59:a8:0e:49:74:67:d2:e5:
50:db:04:71:99:b4:52:3c:c0:cd:73:68:94:6b:81:af:c3:6d:
9f:2d:76:2e:8b:7b:67:e0:c5:9e:9a:93:6f:de:1a:09:27:98:
e8:fa:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:18 2024 by rpki-client on console-fra.rpki-client.org