Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
File: FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer (raw, json)
Hash identifier: Mv4z/KHHa4JBGLS4CafcH9NyLRDCuRSegrywHU+Ru7M=
Subject key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4E63C482C9B0B00CA4520F833CF981B21F303F36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft
caRepository: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 16 Nov 2023 16:29:33 +0000
Certificate not after: Thu 14 Nov 2024 16:34:33 +0000
Subordinate resources: IP: 103.89.76.0/22
IP: 2001:df0:a900::/48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:63:c4:82:c9:b0:b0:0c:a4:52:0f:83:3c:f9:81:b2:1f:30:3f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 16 16:29:33 2023 GMT
Not After : Nov 14 16:34:33 2024 GMT
Subject: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:40:a8:8a:72:19:88:47:93:fb:bb:71:50:
50:cb:a9:14:6e:71:45:f4:38:f7:61:25:1c:da:26:
d9:01:3a:f4:8f:b4:f5:5d:0b:07:9a:13:48:20:33:
88:34:e6:14:d4:7b:46:1f:66:f4:31:07:e4:80:17:
72:a4:46:ff:90:6f:03:c5:1e:45:d2:e8:4d:78:be:
db:35:fc:4a:fc:1d:de:64:15:91:0a:db:dc:e7:a2:
bb:7c:b3:02:ac:f5:df:ee:11:2b:8e:62:4b:63:6b:
f6:0b:61:83:e3:e3:19:b4:89:d3:3c:fa:0c:69:2f:
e1:12:c5:46:c5:14:ee:e1:4b:e9:71:89:19:52:10:
db:e3:ef:10:54:88:88:a1:65:1c:a1:5c:ac:99:07:
33:67:fc:7b:fb:84:a3:15:f4:55:98:db:c8:00:7c:
4e:b8:da:c3:04:88:b0:99:f7:ad:5b:05:51:7c:6d:
2a:b5:20:25:c5:22:bd:2c:da:00:1a:bf:06:66:90:
0a:73:b3:3a:37:96:75:ed:6e:f4:d4:fa:fa:dc:26:
0c:c0:a2:c6:d1:88:14:b6:5d:76:a9:e9:dd:b4:c0:
e5:c3:76:b7:cc:e4:c5:9d:43:be:a4:1e:19:1b:1a:
01:d1:79:97:ae:1a:bf:c0:50:1a:20:08:a0:92:1f:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.89.76.0/22
IPv6:
2001:df0:a900::/48
Signature Algorithm: sha256WithRSAEncryption
7d:fe:c5:6c:26:91:79:05:29:9f:76:80:72:ed:a8:9f:f4:3e:
d2:74:f5:0b:ea:c0:30:ef:55:dc:3c:77:02:a1:c9:28:e5:a4:
4a:86:da:8d:20:28:c2:ae:6c:76:14:2c:ce:76:6c:7a:63:60:
40:60:c1:37:9d:c3:7c:07:f7:38:cf:47:f9:58:00:77:95:49:
ce:7a:94:9d:64:b9:aa:d1:20:4e:18:65:2e:74:6b:1b:ce:74:
5f:5b:01:5b:5b:a3:9c:ce:b7:eb:34:03:ca:e0:32:7b:fd:a4:
49:62:03:62:86:6e:9d:19:db:c5:ba:23:fe:be:9a:9d:91:b7:
bc:37:8a:10:3f:04:df:1b:19:fa:0b:38:ae:b3:a8:00:13:4b:
38:c5:de:96:16:a2:1a:d1:31:6a:94:78:bf:f3:23:c8:0a:31:
9c:74:1a:ae:80:87:c9:54:25:07:5c:f1:ad:7a:89:c5:22:36:
25:13:b3:36:46:5d:b0:9d:32:75:0a:99:87:41:37:eb:1f:87:
85:1a:b8:d0:9e:8a:ef:4a:26:68:76:dc:69:d5:24:35:00:72:
17:89:e2:6c:78:04:ef:1d:4d:ce:a7:f4:43:15:4c:44:82:ce:
3d:51:66:e4:be:dd:23:78:3c:a3:c7:0c:5f:34:8f:29:89:c6:
99:2b:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:05 2024 by rpki-client on console-fra.rpki-client.org