Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oeiuWM_2HCc74Z_43wuGs3IAjP4.cer
File:                     oeiuWM_2HCc74Z_43wuGs3IAjP4.cer (raw, json)
Hash identifier:          L6lmKsUWGAS16scUmFylys/7ozk3LSr7XcMuzCpgp48=
Subject key identifier:   A1:E8:AE:58:CF:F6:1C:27:3B:E1:9F:F8:DF:0B:86:B3:72:00:8C:FE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       408E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B60EC/E7A67B4A254511EA86406A84C4F9AE02/oeiuWM_2HCc74Z_43wuGs3IAjP4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B60EC/E7A67B4A254511EA86406A84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Apr 2023 04:55:05 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    IP: 185.78.104.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16526 (0x408e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Apr 18 04:55:05 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A91B60EC/serialNumber=A1E8AE58CFF61C273BE19FF8DF0B86B372008CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:18:c1:db:59:4d:43:df:22:ee:70:2f:dd:
                    57:3c:8d:fb:ea:4f:2f:65:27:eb:3c:35:35:92:ad:
                    0e:21:72:79:3e:2f:07:8f:17:dc:4e:63:ab:5a:17:
                    64:ed:ac:38:cf:ab:54:05:07:c6:e2:c1:cc:58:e6:
                    c9:3d:3a:19:06:3d:ad:44:4b:63:ce:57:84:1f:51:
                    d7:b4:5f:01:f2:9f:f9:4f:e9:3f:10:f0:a9:88:e1:
                    0b:81:28:b2:c8:4f:f9:78:a9:97:b9:78:ad:16:3d:
                    de:e1:d3:fb:a6:78:54:d0:2a:6d:40:a3:e5:cc:01:
                    e2:52:ca:d0:7b:13:92:3a:02:68:02:d4:a9:1b:8e:
                    39:fc:13:91:f7:52:15:48:ff:f1:07:ae:e2:b5:85:
                    28:2f:b9:4f:0e:18:a5:93:a8:49:a7:f7:8a:b0:1b:
                    77:4e:07:28:12:23:c5:a6:5f:06:18:29:10:a9:6a:
                    42:3c:59:40:c4:d9:ab:41:f2:94:f3:4e:9c:ff:74:
                    68:b1:6e:17:b7:c4:85:bd:a2:05:27:e6:64:bc:42:
                    52:e5:58:5d:c5:50:16:3d:03:1d:d4:c9:62:75:08:
                    8f:89:85:eb:0b:00:07:fd:ee:16:9b:c8:09:1c:c7:
                    ca:bb:47:c8:0b:74:5f:55:00:6b:ea:5e:e8:56:14:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E8:AE:58:CF:F6:1C:27:3B:E1:9F:F8:DF:0B:86:B3:72:00:8C:FE
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B60EC/E7A67B4A254511EA86406A84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B60EC/E7A67B4A254511EA86406A84C4F9AE02/oeiuWM_2HCc74Z_43wuGs3IAjP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:a5:ea:24:53:2c:1d:7d:07:63:8b:23:57:ab:70:67:a1:ca:
         ec:7b:f6:8b:e7:6e:8f:1d:b7:15:63:60:c3:f1:a8:66:78:a7:
         c4:5a:7f:cd:43:54:af:87:50:4a:ec:b6:88:8a:f1:c5:4d:1d:
         5c:38:ca:42:1e:a7:78:73:50:d3:1a:8b:65:39:e1:b4:f4:56:
         f4:0b:73:f2:f9:55:fe:5e:fc:09:2a:ad:95:13:93:f6:c8:01:
         ca:b8:a7:af:18:5d:23:ac:26:ab:07:ae:26:16:8c:14:b7:66:
         f5:6c:6e:bd:7e:2a:5f:05:3b:33:17:b2:1e:36:20:5b:6b:67:
         94:13:b0:19:94:11:73:7c:db:a6:d5:8d:98:9a:ad:c3:56:e7:
         4d:9b:85:e3:7f:5f:be:82:a8:7b:8d:24:a6:4d:ec:18:22:ab:
         13:5f:24:e7:08:73:b4:f2:f0:dd:bd:31:cd:64:be:4a:3e:dc:
         61:2b:fe:d7:d4:e2:09:bf:a0:ca:cf:e0:10:98:97:5f:91:3f:
         9c:3e:b7:5d:31:f3:60:bb:9b:e3:7b:3b:42:15:d1:59:55:a7:
         bc:c3:c7:e3:1a:e2:9c:fe:67:cf:9f:d3:31:8e:9c:44:35:49:
         4a:bf:4b:88:a1:2e:71:b8:6e:43:45:29:83:be:0b:62:b1:b7:
         e7:47:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org