Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_bVbh91-DzjaYfgtQcs24VDcg0.cer
File: B_bVbh91-DzjaYfgtQcs24VDcg0.cer (raw, json)
Hash identifier: Bzb2FPhtt0XLsdVgaZZxcZnA0FMEI+kXT+2GZYnmNSw=
Subject key identifier: 07:F6:D5:6E:1F:75:F8:3C:E3:69:87:E0:B5:07:2C:DB:85:43:72:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 49EB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/B_bVbh91-DzjaYfgtQcs24VDcg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Apr 2023 05:43:58 +0000
Certificate not after: Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources: IP: 167.179.216.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18923 (0x49eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 3 05:43:58 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=A911CC1D/serialNumber=07F6D56E1F75F83CE36987E0B5072CDB8543720D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:1b:0e:2f:53:9d:5a:d5:ff:de:8d:35:21:
fd:4b:86:1b:2a:86:dd:b4:c1:62:a3:dd:db:6c:0e:
d8:7a:b1:fa:49:2c:cf:21:1d:8a:40:20:b1:ef:04:
5c:d7:8c:ad:6d:d5:64:30:62:47:7e:8e:84:3e:a3:
d9:c4:14:5f:73:16:6e:90:1f:62:dd:90:61:c0:f9:
cb:db:11:f2:80:38:eb:a1:cb:0c:d7:50:fe:41:17:
8c:dd:e8:99:f7:6e:4e:2c:af:82:19:4f:71:c3:0d:
0c:d4:32:ac:12:19:44:0d:ae:c7:21:3d:00:3b:90:
48:b0:fd:60:5f:86:35:99:c6:6e:d2:dd:73:95:64:
4e:fb:37:9b:9a:97:06:7d:f6:a0:54:c9:bd:6a:a8:
0d:fc:6d:84:e6:67:00:cc:ea:62:32:69:17:81:ff:
82:07:f8:17:a5:fa:f9:4f:1e:2a:bd:35:91:f4:17:
8e:96:71:29:da:89:ae:6c:7e:52:d4:0d:5a:35:54:
3c:fe:93:38:bf:0d:11:97:55:c9:79:4e:82:a5:6a:
a6:61:de:17:ea:dc:7a:6d:3f:44:50:9d:97:d2:d3:
f7:92:cb:9f:7f:c0:84:49:d4:43:12:3d:85:f1:90:
b8:fc:72:56:db:5f:1e:b8:85:d3:fa:8f:ca:be:50:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:D5:6E:1F:75:F8:3C:E3:69:87:E0:B5:07:2C:DB:85:43:72:0D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/B_bVbh91-DzjaYfgtQcs24VDcg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:c1:d7:b0:a5:bc:93:ab:0a:bb:17:4b:5a:15:e1:eb:3c:2b:
1c:11:6a:fc:13:f9:23:5d:0a:a5:a9:af:df:2b:2d:2a:ef:f4:
26:da:bc:12:97:f2:3e:65:ae:87:d0:46:f5:71:3e:37:af:7a:
1a:49:26:2b:cb:5c:12:e9:15:ea:14:b0:3c:70:a2:04:00:40:
3e:8e:1a:58:d0:c2:c3:85:36:06:bf:5b:26:e7:6a:e5:8b:7f:
72:df:3d:f5:42:9b:5b:b3:ab:96:2c:82:78:88:47:72:bd:51:
4e:1f:e0:80:aa:3a:9e:c7:d3:1a:74:f3:5e:ba:1d:7b:68:6e:
1e:1f:6e:01:16:49:79:4b:10:64:84:ce:e1:58:91:b2:dc:73:
d9:5a:5f:1e:cd:64:59:91:3a:61:e8:28:11:21:47:f9:41:60:
c1:ae:84:24:46:e1:9e:36:35:02:fb:e3:66:c7:18:bc:64:84:
b0:c7:33:e7:77:42:5c:2c:13:db:5d:87:a4:c6:a0:5c:74:4b:
03:15:3d:ce:33:bd:d4:f8:50:16:f2:25:45:9a:09:bc:43:7f:
cf:97:c3:a5:23:b2:36:40:11:60:dd:c9:af:57:c6:44:d6:ff:
cb:5d:b2:09:18:3c:0f:a2:fe:90:79:ef:8e:72:ca:f9:f6:08:
00:20:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org