Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer
File: qO17h9snVXFpQq81cWqommKT6C4.cer (raw, json)
Hash identifier: 2BQFvHEk8sfsqsfwfPjDQMatlmFOUsJvFCOFnfQPhiY=
Subject key identifier: A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018466
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.mft
caRepository: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/
Notify URL: https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before: Mon 09 Jan 2023 14:41:19 +0000
Certificate not after: Mon 31 Mar 2031 00:00:00 +0000
Subordinate resources: IP: 203.119.21.0 -- 203.119.23.255
IP: 2001:ddb::/48
Validation: Failed, certificate revoked on Tue 07 Mar 2023 12:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99430 (0x18466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 9 14:41:19 2023 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=A91DA6130000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:83:0e:91:a8:54:f7:85:34:6a:f8:b4:05:
93:cc:fa:98:6d:08:d8:45:cf:90:01:77:6f:18:b9:
40:5e:e6:38:65:91:ee:9f:49:ba:1c:7f:b6:c6:e9:
3b:7c:7b:44:fc:f9:98:67:36:00:6b:c4:4e:26:9c:
a9:ef:2a:06:e1:15:54:a5:03:31:2f:ad:70:c0:55:
11:d1:c6:bf:bf:7c:6c:3c:c8:66:6f:2e:82:97:8b:
75:ea:91:7b:93:c7:cb:1a:e3:d0:1f:2a:f4:d4:0d:
aa:40:89:68:3b:90:c9:06:47:fa:82:39:75:ec:01:
b8:a5:ae:90:b9:4b:73:30:52:24:c2:75:57:17:9e:
0c:ef:ca:8c:76:9f:4d:77:2f:2c:2e:80:b8:8f:c8:
05:a1:ad:2c:06:35:cb:2c:8d:af:0f:6b:77:aa:76:
87:ab:5a:79:80:10:e9:12:be:88:0c:11:fa:fd:07:
de:5a:0e:4e:f0:04:33:93:39:d4:76:a6:78:7c:6d:
9e:81:40:17:9b:cb:85:0b:5c:86:6a:d7:de:bf:d6:
29:39:c6:cd:a1:ba:76:f0:04:60:c4:59:4b:6b:1a:
45:0a:61:2e:d0:6c:33:8f:03:67:3a:74:a5:1e:f8:
fe:ca:d4:96:ae:da:3b:0c:9d:4e:62:b1:7e:d0:d7:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0
RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.mft
RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.21.0-203.119.23.255
IPv6:
2001:ddb::/48
Signature Algorithm: sha256WithRSAEncryption
15:37:d7:3d:6d:2c:38:87:49:4b:e7:96:df:35:9e:96:75:f4:
0f:f0:87:85:37:5f:31:be:56:1d:41:70:15:b4:30:e2:36:63:
07:d3:6c:89:25:1c:2b:ce:a3:a6:c8:81:fd:08:c0:0a:05:92:
d5:6e:55:87:68:97:ef:75:b7:e5:8a:39:12:23:d7:a3:67:e3:
51:17:22:b9:86:2c:e7:33:87:6d:03:fb:44:a0:c9:9e:2b:b2:
3b:95:86:e3:2e:20:2a:a4:2c:6d:58:b2:8d:04:4b:43:9d:47:
e0:44:4d:de:88:08:2c:6a:ef:e2:26:63:e2:7b:47:be:54:c4:
e9:b9:6d:13:09:61:72:7c:ea:33:8d:ab:91:c0:ad:70:6d:f6:
82:72:12:03:f9:18:36:53:2d:af:e5:33:66:50:08:56:c0:d6:
40:e3:1d:3f:d8:4e:c1:8a:9f:e8:f3:86:16:d9:59:40:86:44:
a0:cf:58:b3:42:9f:03:59:4b:cf:cc:49:91:b3:f1:8a:25:5e:
87:2e:f8:98:38:ba:3e:0b:c6:cd:4e:6b:54:dc:ba:c0:97:7a:
c3:36:89:8f:db:b5:4e:88:b4:f8:d1:29:45:d5:19:d9:90:87:
e4:af:60:83:22:68:8c:72:7f:db:f8:e1:78:07:fb:84:6c:eb:
6f:37:da:94
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIDAYRmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDEwOTE0NDExOVoXDTMxMDMzMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxREE2MTMwMDAwMTEwLwYDVQQFEyhBOEVEN0I4N0RCMjc1NTcxNjk0
MkFGMzU3MTZBQTg5QTYyOTNFODJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA45WDDpGoVPeFNGr4tAWTzPqYbQjYRc+QAXdvGLlAXuY4ZZHun0m6HH+2
xuk7fHtE/PmYZzYAa8ROJpyp7yoG4RVUpQMxL61wwFUR0ca/v3xsPMhmby6Cl4t1
6pF7k8fLGuPQHyr01A2qQIloO5DJBkf6gjl17AG4pa6QuUtzMFIkwnVXF54M78qM
dp9Ndy8sLoC4j8gFoa0sBjXLLI2vD2t3qnaHq1p5gBDpEr6IDBH6/QfeWg5O8AQz
kznUdqZ4fG2egUAXm8uFC1yGatfev9YpOcbNobp28ARgxFlLaxpFCmEu0GwzjwNn
OnSlHvj+ytSWrto7DJ1OYrF+0NfcsQIDAQABo4IDBTCCAwEwHQYDVR0OBBYEFKjt
e4fbJ1VxaUKvNXFqqJpik+guMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBIQYIKwYBBQUHAQsEggETMIIBDzBKBggr
BgEFBQcwBYY+cnN5bmM6Ly9yb3YtbWVhc3VyZW1lbnRzLm5sbmV0bGFicy5uZXQv
cmVwby9yb3YtbWVhc3VyZW1lbnRzLzAwdwYIKwYBBQUHMAqGa3JzeW5jOi8vcm92
LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMubmV0L3JlcG8vcm92LW1lYXN1cmVtZW50
cy8wL0E4RUQ3Qjg3REIyNzU1NzE2OTQyQUYzNTcxNkFBODlBNjI5M0U4MkUubWZ0
MEgGCCsGAQUFBzANhjxodHRwczovL3Jvdi1tZWFzdXJlbWVudHMubmxuZXRsYWJz
Lm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8EKTAnMBQE
AgABMA4wDAMEAMt3FQMEA8t3EDAPBAIAAjAJAwcAIAEN2wAAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVN9c9bSw4h0lL55bfNZ6WdfQP8IeFN18xvlYdQXAVtDDiNmMH02yJ
JRwrzqOmyIH9CMAKBZLVblWHaJfvdbflijkSI9ejZ+NRFyK5hiznM4dtA/tEoMme
K7I7lYbjLiAqpCxtWLKNBEtDnUfgRE3eiAgsau/iJmPie0e+VMTpuW0TCWFyfOoz
jauRwK1wbfaCchID+Rg2Uy2v5TNmUAhWwNZA4x0/2E7Bip/o84YW2VlAhkSgz1iz
Qp8DWUvPzEmRs/GKJV6HLviYOLo+C8bNTmtU3LrAl3rDNomP27VOiLT40SlF1RnZ
kIfkr2CDImiMcn/b+OF4B/uEbOtvN9qU
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:21 2025 by rpki-client