Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer
File: KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer (raw, json)
Hash identifier: ca8VWX3ROVqwDruj0SorvK1dT+trG6HKxUi8SRUs89c=
Subject key identifier: 29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5044
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jan 2024 22:22:29 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 161.118.0.0/16
Validation: Failed, certificate revoked on Mon 29 Apr 2024 12:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20548 (0x5044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 10 22:22:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A9112A43/serialNumber=295B8404DE75A33E8E87B010E66A3B10AF40E83C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:ed:0b:41:79:0d:ca:10:46:e1:52:df:d3:
d5:fb:14:be:3e:63:85:de:0a:51:69:9a:9b:a9:0f:
65:3b:c4:c1:fd:3d:5a:94:e5:15:06:7c:b1:f5:c6:
a3:3f:e5:ea:25:ed:07:8e:7f:5c:c3:6d:bc:ef:9b:
3e:f3:d1:dc:04:b7:6e:0f:f6:30:41:25:12:d1:c8:
1a:4b:4c:a8:2a:3c:41:ee:49:bd:d7:28:65:af:9b:
54:e2:14:94:1f:45:bf:63:12:ec:8c:18:05:ab:f4:
b2:cf:e7:d2:fd:e5:d8:51:91:a6:be:74:98:ac:89:
ee:88:7d:ab:c6:68:eb:9e:a8:51:25:55:f2:05:bb:
f0:7d:2d:4a:1f:2b:a2:d2:98:c3:e2:d5:e4:19:be:
4c:80:36:23:fe:80:12:0b:63:ce:9f:12:38:26:d9:
1d:ff:68:ac:fd:15:70:c1:ab:a9:a7:c5:3d:49:1e:
2a:5a:c4:db:62:ec:66:d2:35:bd:51:a2:7b:35:fd:
7a:e9:0d:01:35:1a:0d:3e:6d:27:41:db:fd:b5:dd:
e5:1f:7c:95:e8:c4:ef:e7:58:f4:0d:99:8c:ad:bf:
2f:9f:f3:d0:4a:94:27:c2:b5:88:58:7d:47:81:7f:
82:db:2d:90:61:7f:c6:c6:ac:9c:73:dd:84:a0:39:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:69:3c:26:9f:26:25:36:87:31:6a:ca:a3:07:f3:38:12:77:
13:7f:0e:2b:ed:3a:f8:e4:3f:ba:ae:45:44:b3:fa:98:81:38:
9e:1f:2b:8e:5d:ad:21:4c:7c:8c:7f:e4:dd:b6:71:4b:4d:4a:
4f:f1:a8:c9:f6:c8:44:b3:e9:ea:c9:2e:42:6c:9b:3a:b4:e1:
e4:ec:72:a6:63:24:70:3e:13:9d:e3:c3:40:01:46:20:ad:0d:
46:22:3d:aa:2b:61:0a:2c:c4:37:60:52:1f:0d:ee:3e:12:c4:
6e:75:55:58:57:87:72:a4:fe:36:ad:a3:bf:ab:f5:72:6b:5a:
bf:22:aa:fd:1b:4b:e9:56:c2:4a:b4:1a:aa:d1:69:65:e2:62:
57:d4:cd:eb:fd:50:e2:e7:33:97:5f:ce:a0:e2:70:45:44:ea:
7a:61:21:0a:57:56:82:a1:c2:d6:0e:05:0a:28:54:b0:06:b3:
67:ad:cd:c3:d4:9d:43:8a:05:98:81:10:fc:0a:e1:20:72:4d:
5f:93:2f:0b:65:01:87:30:48:b9:29:c1:6f:21:ae:2b:9d:c1:
de:4b:59:59:3b:38:3c:1b:ad:b7:80:b9:35:2d:71:12:bd:91:
95:c3:1a:77:fb:ae:b3:3a:64:d1:bf:3e:3d:6b:4c:59:6e:f9:
39:f7:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org