Certificate
$ rpki-client -vvf dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
File: 3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer (raw, json)
Hash identifier: VE8zxm+/6QwhHQkJu62YUGvcjAUIBwT9rByHUvjN/vU=
Subject key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Certificate issuer: /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Certificate serial: 628B660C8DA611EF60F0EF9497750A78B7927155
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Manifest: rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
caRepository: rsync://rpki.co/repo/AS945/14/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sun 15 Oct 2023 19:20:22 +0000
Certificate not after: Sun 13 Oct 2024 19:25:22 +0000
Subordinate resources: IP: 2a05:dfc6::/32
Validation: Failed, certificate revoked on Thu 20 Jun 2024 05:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8b:66:0c:8d:a6:11:ef:60:f0:ef:94:97:75:0a:78:b7:92:71:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Validity
Not Before: Oct 15 19:20:22 2023 GMT
Not After : Oct 13 19:25:22 2024 GMT
Subject: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:b8:e5:08:4f:27:46:62:df:62:6c:9d:64:
42:eb:7b:99:7c:d4:51:a5:de:aa:31:79:81:7c:e5:
2b:bf:f9:5e:fb:04:1c:70:7f:01:2b:a5:5a:97:0f:
f9:5d:33:a8:c0:e7:7e:85:fd:10:67:23:88:d6:ac:
9f:9d:a6:b6:d2:e7:67:8e:51:68:23:2d:10:91:69:
dd:53:2d:83:fa:29:d9:88:3c:94:82:25:f4:57:3b:
8f:96:9f:94:be:6c:21:0e:14:db:f2:6c:b0:00:02:
d0:a3:e5:90:a5:7e:3c:34:43:48:3f:7a:27:b3:f2:
79:30:0f:03:bd:b0:b6:83:be:d7:c3:15:4e:1b:40:
f2:da:e3:72:58:e7:fd:92:5d:b8:f8:3e:f4:c1:df:
a8:39:c6:06:6f:5d:cb:5e:38:6a:b1:b3:c8:f2:d2:
aa:88:7d:fe:03:75:38:e3:78:af:92:ba:12:29:d3:
0e:32:78:15:94:52:0a:d5:2f:96:80:e8:ab:f7:49:
75:2d:2e:91:81:c1:19:56:98:57:fa:93:8c:a8:44:
f2:24:ec:9a:1f:a3:31:05:d1:5a:32:b5:ea:16:8e:
42:3c:73:d9:54:75:31:8b:21:e0:2d:41:a9:1e:39:
7e:9a:0b:3c:ea:f1:96:5a:78:74:d8:13:56:2c:2a:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
X509v3 Authority Key Identifier:
keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/14/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc6::/32
Signature Algorithm: sha256WithRSAEncryption
1b:e1:6c:f2:04:63:cd:53:1b:08:8d:07:24:e5:7e:06:e8:31:
8e:58:50:be:9e:be:fd:d7:df:e6:38:e6:6e:f8:7a:50:01:68:
60:86:06:43:98:e9:bd:6e:95:04:31:37:d1:1d:8f:67:49:cf:
18:2d:a6:0a:e2:08:8c:7e:e5:a4:3c:3d:44:ea:c6:3e:b4:02:
66:b6:6b:84:47:2d:0e:fe:27:3b:85:fe:16:a2:2b:25:c1:11:
58:7c:09:dd:c6:d1:b4:db:95:47:f0:6e:f1:ad:78:74:82:bd:
e5:84:c9:54:3c:7b:20:b2:52:c3:c3:0e:d1:5c:e3:f3:26:bd:
4e:7d:30:b6:e4:4b:80:66:4c:e3:80:85:a3:f2:72:82:8b:60:
6f:5c:d4:3d:68:7c:5c:74:a8:87:38:72:e3:31:ed:79:52:d4:
ee:e8:5a:f7:e5:07:fd:23:f7:d7:cf:ab:cb:20:fd:ef:9d:b7:
1e:d9:8d:ee:63:72:0b:94:25:a8:06:21:4c:8d:1d:31:32:fe:
e9:41:50:26:29:20:ec:07:79:66:29:ec:2f:29:92:bc:a9:f2:
8f:35:b5:a4:84:01:7f:8c:7b:ee:61:b6:0e:eb:3d:ec:f4:95:
1a:a6:f8:a7:98:a7:93:3f:32:31:44:59:f3:b8:7c:2b:6b:1f:
8c:32:2c:2d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUYotmDI2mEe9g8O+Ul3UKeLeScVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlD
RUM2RkJDRTAeFw0yMzEwMTUxOTIwMjJaFw0yNDEwMTMxOTI1MjJaMDMxMTAvBgNV
BAMTKDNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vrjlCE8nRmLfYmydZELre5l8
1FGl3qoxeYF85Su/+V77BBxwfwErpVqXD/ldM6jA536F/RBnI4jWrJ+dprbS52eO
UWgjLRCRad1TLYP6KdmIPJSCJfRXO4+Wn5S+bCEOFNvybLAAAtCj5ZClfjw0Q0g/
eiez8nkwDwO9sLaDvtfDFU4bQPLa43JY5/2SXbj4PvTB36g5xgZvXcteOGqxs8jy
0qqIff4DdTjjeK+SuhIp0w4yeBWUUgrVL5aA6Kv3SXUtLpGBwRlWmFf6k4yoRPIk
7JofozEF0VoyteoWjkI8c9lUdTGLIeAtQakeOX6aCzzq8ZZaeHTYE1YsKiQNAgMB
AAGjggJjMIICXzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+OCPP9NQcLG9r
OiDM3Vn2676t6TAfBgNVHSMEGDAWgBT0ZJiWpwogzYq7lkTeDAOZzsb7zjAOBgNV
HQ8BAf8EBAMCAQYwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9kZXYudHcvcnBr
aS9BdWd1c3QvMTMvRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlDRUM2
RkJDRS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6
Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw
MTg1NzU1YzkxYmUzZjlkLzIvRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAz
OTlDRUM2RkJDRS5jZXIwgcwGCCsGAQUFBwELBIG/MIG8MCoGCCsGAQUFBzAFhh5y
c3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8xNC8wVgYIKwYBBQUHMAqGSnJzeW5j
Oi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgyM0NGRjRENDFDMkM2RjZCM0Ey
MENDREQ1OUY2RUJCRUFERTkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF38YwDQYJKoZI
hvcNAQELBQADggEBABvhbPIEY81TGwiNByTlfgboMY5YUL6evv3X3+Y45m74elAB
aGCGBkOY6b1ulQQxN9Edj2dJzxgtpgriCIx+5aQ8PUTqxj60Ama2a4RHLQ7+JzuF
/haiKyXBEVh8Cd3G0bTblUfwbvGteHSCveWEyVQ8eyCyUsPDDtFc4/MmvU59MLbk
S4BmTOOAhaPycoKLYG9c1D1ofFx0qIc4cuMx7XlS1O7oWvflB/0j99fPq8sg/e+d
tx7Zje5jcguUJagGIUyNHTEy/ulBUCYpIOwHeWYp7C8pkryp8o81taSEAX+Me+5h
tg7rPez0lRqm+KeYp5M/MjFEWfO4fCtrH4wyLC0=
-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:17 2024 by rpki-client on console-fra.rpki-client.org