Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqGarmkA4IY_Ye34Klvl0CVu64g.cer
File: DqGarmkA4IY_Ye34Klvl0CVu64g.cer (raw, json)
Hash identifier: M+DYWYYBcPIBsDXgaXwn3p3fjD0UXIvlPshaLma0DJ8=
Subject key identifier: 0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4693
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/DqGarmkA4IY_Ye34Klvl0CVu64g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Nov 2022 06:50:15 +0000
Certificate not after: Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources: IP: 161.139.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18067 (0x4693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 18 06:50:15 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=A9113F6F/serialNumber=0EA19AAE6900E0863F61EDF82A5BE5D0256EEB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:3e:eb:53:ee:ba:8e:32:88:e4:37:2b:d3:
6a:40:a5:cc:08:6d:2e:ed:19:19:03:ba:6c:f1:d1:
f3:f5:a0:04:b0:e9:4c:96:6c:18:4f:86:dd:2f:23:
68:55:76:75:d7:b0:78:21:4b:93:ad:63:25:6b:b6:
e7:f6:86:5c:fb:d9:68:11:b4:04:f6:61:a9:1c:1e:
11:19:b1:f8:85:a8:b8:f4:5f:d8:0d:93:5e:63:91:
94:5a:5c:80:62:ab:eb:8e:cc:b6:ca:7a:25:4f:63:
bc:30:9b:b9:e3:70:76:9c:8d:a8:62:32:d6:64:6c:
3b:d7:ce:54:e3:6e:76:95:24:0e:57:fd:db:14:81:
df:7c:e6:d5:7f:e2:c6:79:35:fe:40:d7:fd:f3:f0:
db:84:4b:28:67:81:03:0d:84:cb:62:33:d0:75:45:
88:27:c6:19:88:9f:5f:e1:81:1a:36:6b:aa:10:ea:
3e:af:00:73:05:da:05:20:09:b0:a5:aa:1f:98:b6:
53:7e:00:22:85:73:6f:f0:d7:81:95:d4:3c:ab:21:
0d:4b:47:46:8f:17:88:33:72:56:c1:92:9b:2f:e5:
4d:76:53:64:1f:08:dc:bd:c6:d6:00:3a:ac:9e:58:
1b:6a:56:34:10:24:5a:d0:5a:c8:88:d7:ae:7c:c4:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/DqGarmkA4IY_Ye34Klvl0CVu64g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.139.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:32:29:79:e3:12:ad:cf:05:d0:1a:40:f6:77:85:e6:5f:73:
96:1e:91:75:20:e0:dd:73:51:8d:a0:e4:93:cc:1d:07:59:96:
3c:07:ff:18:74:d3:65:5a:4e:26:c1:6f:80:c1:e9:ad:46:a1:
31:9c:72:2c:03:42:17:23:3f:5e:f0:e3:e8:f4:0f:d7:87:2d:
d8:bd:ed:5d:41:c3:0f:05:3c:4e:80:86:24:7d:20:d4:a9:0e:
75:91:08:b2:98:8d:62:1c:02:df:bb:20:c7:51:61:0e:a2:14:
15:5c:99:3a:66:c2:6d:9a:05:08:3c:2f:d8:66:56:e6:b3:84:
56:32:7c:e1:00:8b:45:6b:96:82:8a:1b:c2:b1:0d:70:13:02:
bd:86:59:1c:4a:27:7f:c7:0f:b6:32:87:13:f1:c1:94:60:5b:
4e:aa:31:af:c7:8e:e5:51:04:08:84:47:3d:61:94:a9:31:b3:
37:eb:87:ca:30:b4:c9:36:74:db:84:54:9d:65:9f:a6:19:1a:
76:6c:9c:62:40:da:1d:9a:92:10:b5:ab:c9:76:1d:2c:3a:42:
08:f9:87:c3:c5:f5:48:9b:5e:3b:cc:f5:cf:0e:fb:1f:ef:8d:
e1:f7:e8:a3:38:0f:fe:46:24:20:60:ae:97:72:74:bf:7b:5d:
04:88:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org