Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hzrj4KZQ9nzOkcKiG44OcPqcV0.cer
File: 3hzrj4KZQ9nzOkcKiG44OcPqcV0.cer (raw, json)
Hash identifier: y+XdSt3lhSAYpRxcGaf915MYZeqW+7PYsh0xKGZfZYY=
Subject key identifier: DE:1C:EB:8F:82:99:43:D9:F3:3A:47:0A:88:6E:38:39:C3:EA:71:5D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4054
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Feb 2022 08:01:11 +0000
Certificate not after: Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources: IP: 158.89.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16468 (0x4054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 16 08:01:11 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=A9191B70/serialNumber=DE1CEB8F829943D9F33A470A886E3839C3EA715D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:83:2c:0a:7e:dc:2a:06:c6:85:b5:8e:ec:
b5:e3:25:6f:c8:57:2d:3a:14:ef:46:5e:8c:bd:dd:
33:6b:af:cf:6c:c1:50:08:4f:19:a3:dc:bf:89:f4:
40:6e:62:57:73:f2:c3:e7:cb:5e:2a:c4:f9:5a:03:
58:75:ff:0d:5a:a5:26:63:cb:15:86:d8:de:56:70:
8a:ce:41:39:4f:dd:54:84:58:a6:c7:9e:87:f5:f5:
00:ea:03:83:36:56:11:80:6a:42:11:63:7c:7a:a8:
7c:03:b0:84:cd:46:53:86:c0:73:a8:84:5f:3c:f5:
be:90:c2:e5:e0:ce:ea:03:2e:02:e8:e9:f3:ee:02:
97:d2:3b:4d:02:aa:83:9c:27:4c:61:a4:95:d3:3d:
13:05:28:e0:de:de:1c:53:b8:dc:e4:eb:b1:89:21:
4d:d3:db:c7:c7:b7:1f:32:fe:a4:0c:58:91:fa:60:
2c:c0:e3:a7:cd:df:46:e8:94:7f:0c:57:f2:3a:36:
e0:8e:6a:85:4f:5e:80:bb:13:40:52:f7:d2:c1:18:
ce:e4:73:94:c6:10:fc:3c:03:df:1c:44:8a:ea:8d:
bb:75:b6:8e:0d:32:16:4a:9b:94:8f:44:f0:f0:47:
a8:91:13:f4:26:f0:76:08:ba:ea:1a:ae:64:1d:eb:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:EB:8F:82:99:43:D9:F3:3A:47:0A:88:6E:38:39:C3:EA:71:5D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
158.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:23:cd:22:ab:77:cd:fb:0a:81:88:24:8c:07:7f:64:c4:8a:
4e:01:a0:c3:f0:fd:47:28:af:b3:a7:b4:14:4e:97:ca:f7:71:
14:49:e1:bd:37:30:2e:23:a3:82:57:10:b9:c2:bf:ad:93:ed:
02:94:c2:5e:ec:02:a9:73:32:b3:63:84:2c:e5:b7:2d:e1:4a:
17:62:38:96:de:de:e9:7f:39:e0:03:30:3a:e3:90:1e:d1:cc:
58:84:39:8b:01:c6:8e:b9:78:22:68:30:64:a2:c4:e6:92:ad:
bd:f1:dc:46:5d:e1:ab:aa:25:95:9b:8d:48:9a:0a:b6:59:6e:
f8:ec:1e:38:85:05:17:56:36:ca:af:eb:32:a9:4a:bb:e6:9f:
2c:2a:5e:6d:a0:dd:4e:0e:c4:39:e9:7a:10:a2:ee:df:97:6e:
1e:cc:c6:b9:04:73:36:9d:5c:eb:68:80:dc:75:fd:cd:22:b6:
8f:85:1e:7d:9d:7c:8b:09:08:fe:f6:26:6a:1c:3a:0c:af:73:
00:f1:df:97:b5:16:5e:d2:b3:7f:65:0f:e3:6e:ea:eb:9a:a9:
80:75:e1:a1:36:5a:a5:1e:8e:50:c1:6a:54:fe:5f:fd:e5:eb:
2b:dd:d9:7c:40:f8:c1:3a:33:84:2f:f5:fd:14:dd:0e:73:01:
4a:8b:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org