Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-e5lEEjrQrOitV4uie67TsfXJkA.cer
File:                     -e5lEEjrQrOitV4uie67TsfXJkA.cer (raw, json)
Hash identifier:          R3Uoo/pxh8M4iiNvucHUhC4lNMi0bh59r7tzsKY+lSM=
Subject key identifier:   F9:EE:65:10:48:EB:42:B3:A2:B5:5E:2E:89:EE:BB:4E:C7:D7:26:40
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4C73
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/-e5lEEjrQrOitV4uie67TsfXJkA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Jul 2023 17:21:49 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 132.234.0.0/16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19571 (0x4c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 31 17:21:49 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A9167B91/serialNumber=F9EE651048EB42B3A2B55E2E89EEBB4EC7D72640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:7b:f0:10:7a:75:92:da:fb:e4:cf:47:16:
                    c5:2d:ff:75:6b:35:5d:ff:7a:8c:20:ce:5d:d2:ca:
                    d6:29:f0:41:4d:86:f8:b2:14:cc:f8:f6:26:55:44:
                    7e:9b:bf:06:10:66:83:de:6a:f8:80:0c:37:ba:0f:
                    7b:10:31:db:8d:b0:f0:5b:fd:55:f7:8c:99:a8:96:
                    38:99:28:23:a8:01:f8:14:00:35:d5:c7:51:93:2b:
                    74:97:e9:2d:a3:3d:2c:3c:d5:88:fa:1a:f3:f3:fc:
                    8e:33:8e:bb:c6:87:d3:64:94:e4:d0:c3:8a:8d:02:
                    6f:3d:1c:14:8e:1b:95:37:1d:83:e6:e9:cd:27:be:
                    43:6e:2e:bf:f1:96:80:42:25:48:2e:19:f7:0e:30:
                    e8:01:96:c7:a1:dc:dd:8c:c2:38:cc:ae:3a:97:9c:
                    0b:b1:65:1a:b1:ae:8d:fe:1f:8e:76:32:89:60:ae:
                    41:f7:a3:7a:f0:7e:1d:9d:21:ec:cd:ff:5a:6e:a9:
                    d6:96:d8:ab:db:62:80:84:52:14:ff:56:4b:7d:1d:
                    13:99:42:11:38:ed:61:c8:10:fd:0f:f4:27:7d:6a:
                    ed:57:c6:ef:01:13:7d:ec:93:37:60:83:f5:f7:6e:
                    fe:cf:cf:92:5a:9b:67:72:f5:88:38:79:37:ac:43:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:65:10:48:EB:42:B3:A2:B5:5E:2E:89:EE:BB:4E:C7:D7:26:40
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/-e5lEEjrQrOitV4uie67TsfXJkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:75:89:36:60:c3:cd:dd:ce:1b:4a:74:96:00:6b:19:42:
         42:fb:5d:0d:4c:d5:0e:20:cf:66:c9:55:92:32:2b:3f:cc:9f:
         a5:c4:c1:88:f1:03:57:77:cb:14:3c:9d:b6:2f:c8:9a:c1:26:
         ae:cc:56:e0:d5:eb:14:50:d1:44:fd:b6:64:63:11:ce:a7:37:
         cf:48:de:b5:30:b4:15:89:f6:48:b5:0a:5c:38:c4:12:df:d8:
         12:06:e8:2c:71:dc:b7:07:b9:64:3c:05:d8:1a:d4:f7:3b:fe:
         6e:a2:c2:b5:6e:0b:ec:68:84:47:af:6d:d1:04:e0:5b:30:75:
         db:ac:24:08:97:6b:0e:2d:b3:b1:fb:de:67:2f:b5:f3:4f:b0:
         42:55:1b:32:3c:70:bc:90:f7:76:ba:15:b9:1f:92:99:a1:13:
         91:0f:5d:c9:fd:cb:49:6c:09:2e:45:95:74:c8:11:d2:4f:c3:
         dc:43:e7:a2:13:bb:70:3a:3a:27:38:9d:a5:b1:af:a7:a5:2d:
         a8:80:a8:8a:b6:59:5a:19:d9:65:09:70:67:c4:a1:9b:64:ff:
         cc:eb:a4:b0:73:7e:48:bd:bb:18:c0:38:06:ca:f4:fc:26:2d:
         b4:2e:4b:64:10:97:2a:9c:bc:d5:59:c5:2d:7b:09:3e:6e:f2:
         44:c4:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org