Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6JAloSHN5WvTWL6mo3ERP__FFo.cer
File: k6JAloSHN5WvTWL6mo3ERP__FFo.cer (raw, json)
Hash identifier: 1ljKiNh+nb6eV21CsUuCKcuyGwGseTblPTpe2jnfnOA=
Subject key identifier: 93:A2:40:96:84:87:37:95:AF:4D:62:FA:9A:8D:C4:44:FF:FF:14:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D5BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.rp.ki/repo/misakaio/0/93A2409684873795AF4D62FA9A8DC444FFFF145A.mft
caRepository: rsync://rsync.rp.ki/repo/misakaio/0/
Notify URL: https://rrdp.rp.ki/notification.xml
Certificate not before: Mon 01 Jan 2024 12:50:45 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 23961
AS: 142616
AS: 152156
IP: 103.170.232.0/23
IP: 2407:b9c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120255 (0x1d5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 1 12:50:45 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A9121C330000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:bb:cb:68:9c:49:ca:4d:c2:48:b2:00:97:
8d:a9:c0:31:4e:57:25:97:80:12:00:c1:4c:db:22:
c3:a8:28:9f:90:46:6c:34:92:8b:dc:98:3d:53:ff:
5b:0f:24:7c:6a:c5:cf:2a:ae:d0:2c:ec:36:35:cd:
45:ed:93:78:7c:5f:f5:fc:73:fd:87:47:47:ab:01:
84:42:6f:fc:f6:92:41:e1:25:6d:03:85:95:bc:96:
6b:bb:bb:4f:ea:bb:a7:41:b1:75:db:a7:60:a6:6e:
b5:f2:5d:03:47:7c:86:1f:f6:59:80:84:ae:ab:39:
ef:31:3c:af:16:d0:f5:e2:51:e6:62:0b:9e:3f:22:
9a:b4:a0:78:f7:43:c5:77:64:81:dc:1b:5d:11:85:
dd:a4:d5:b2:cb:aa:3d:f5:06:51:06:53:5a:65:25:
ec:34:5d:c3:19:85:e4:42:39:e0:11:fc:00:82:e3:
08:23:2a:80:8c:7a:ce:db:3e:9e:b3:b1:0b:9c:1b:
39:66:f9:7b:08:fa:06:ab:60:2d:13:ae:35:41:8b:
41:78:36:42:5b:d6:7a:1e:21:e3:24:e4:65:28:1c:
2c:fc:1d:3a:52:b2:a6:cd:14:fb:6d:24:f4:cb:c1:
87:9a:d0:13:f4:60:7b:76:7e:b6:a8:66:17:ed:16:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:40:96:84:87:37:95:AF:4D:62:FA:9A:8D:C4:44:FF:FF:14:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.rp.ki/repo/misakaio/0
RPKI Manifest - URI:rsync://rsync.rp.ki/repo/misakaio/0/93A2409684873795AF4D62FA9A8DC444FFFF145A.mft
RPKI Notify - URI:https://rrdp.rp.ki/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23961
142616
152156
sbgp-ipAddrBlock: critical
IPv4:
103.170.232.0/23
IPv6:
2407:b9c0::/32
Signature Algorithm: sha256WithRSAEncryption
52:51:d9:51:ee:cc:05:db:00:e2:02:85:54:d1:0c:51:f1:29:
f8:6c:5e:7c:0b:19:83:58:17:b7:1a:c8:56:0b:72:d9:89:79:
a2:3a:3f:3b:16:a0:42:63:67:de:47:61:f6:91:f0:ac:80:3b:
05:55:af:31:d8:8f:db:15:9f:70:84:5b:82:96:2d:c6:2a:d5:
8c:76:82:4c:cd:68:17:1d:7d:32:be:43:e5:f4:20:86:f0:28:
bf:ce:b3:9f:ce:ad:a7:00:d9:c8:db:da:ae:3d:3e:79:91:8e:
46:5a:d9:ab:6c:69:c8:ac:16:f4:10:8e:47:29:f2:42:4d:bb:
95:17:08:52:2d:1e:3b:86:4b:7c:2e:8c:f7:e4:46:55:e9:6f:
3c:d3:76:fa:d0:53:8b:57:86:7b:ed:f3:6a:2c:e6:1e:a8:ca:
3c:54:13:dd:11:54:7b:2d:0b:8d:75:bd:ba:7e:71:bb:d9:b2:
7a:ff:bc:03:11:5a:89:76:b7:78:aa:31:63:f0:93:bc:27:3c:
a9:74:ec:38:dc:f1:02:b7:93:4a:4c:5d:26:9b:79:5e:04:3d:
53:38:4f:81:3d:b7:21:e6:4a:69:c9:e5:24:db:55:c1:6a:cb:
ee:b1:74:d5:f9:6a:a5:b7:b0:62:f9:44:0f:12:45:49:4a:66:
1e:c4:7b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:53 2025 by rpki-client