Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
File: nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer (raw, json)
Hash identifier: 4bsaKyx/bHwzFF+3EuZ5Dn9rBhp0tEODqyzuLR9Wwhw=
Subject key identifier: 9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4660
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Nov 2022 13:32:06 +0000
Certificate not after: Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources: IP: 138.77.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18016 (0x4660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 9 13:32:06 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:f8:d1:2d:4a:7f:4f:7f:33:7b:02:ee:da:
11:e1:48:7b:63:d1:da:76:03:1b:7b:72:fe:2d:1c:
94:cf:23:64:bf:34:96:98:8c:00:39:a6:02:b0:68:
42:0c:56:1f:64:d8:bc:7c:70:02:15:87:24:63:e6:
25:96:20:59:25:2a:eb:dc:1f:02:93:67:1e:1a:87:
83:a7:d5:ae:7c:70:fe:0f:2b:91:07:83:07:a1:68:
5f:47:17:62:ad:45:ba:61:73:0b:fd:bd:f2:ed:97:
81:d9:57:88:9b:49:85:54:da:c0:f8:98:dc:fe:05:
ec:76:c2:4b:40:ba:87:91:ce:fb:53:0d:fa:57:78:
53:92:a7:2b:84:ca:77:b8:ab:a4:cb:b4:ce:e5:81:
33:22:3c:74:bb:7d:85:e9:4a:fa:19:ba:b0:47:e9:
f9:0c:48:e7:2b:9b:1b:5f:4f:29:67:a3:6b:ee:8d:
e1:e7:e2:f2:84:0a:58:d8:4c:67:cc:be:51:06:31:
06:0f:08:82:dc:8d:e3:23:df:07:63:70:39:fc:ba:
8a:a1:54:0b:c6:b6:e2:d3:dc:81:12:c3:61:11:d9:
f0:e0:2c:5a:d8:84:59:5e:04:3f:e3:ca:a3:ad:d7:
54:0e:db:87:c2:b3:f3:f4:da:fc:5e:e6:10:7c:77:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:26:57:40:05:23:ac:e9:5d:83:d9:a9:9d:ee:fb:6b:9b:d2:
35:85:a8:21:92:43:92:fb:87:89:96:8f:26:8d:41:81:af:f7:
8a:17:1c:f3:2b:91:c9:d6:9d:1b:c5:62:f4:bf:30:51:27:2f:
2c:99:67:e4:9d:f4:55:13:95:2c:d6:3b:a5:d2:b5:b2:9c:24:
6a:9e:e0:4c:9f:34:18:8e:f8:bb:91:73:27:a0:de:fd:2b:da:
5c:01:c0:7b:44:24:86:af:4e:36:38:aa:6a:df:a2:bc:a1:d9:
8c:77:60:34:f3:5e:89:43:81:a8:e4:cc:7b:41:e2:b4:2c:16:
83:19:1e:2e:f9:0f:c3:67:da:07:5b:a5:74:59:4a:f0:9c:60:
88:6b:f8:72:33:04:84:9f:41:69:64:8d:35:c1:54:1f:88:7a:
ef:37:87:70:bb:24:90:15:27:d9:3f:45:1e:9d:b4:7b:e4:04:
37:cb:d4:34:0f:c4:ff:94:4f:96:ad:d6:09:0e:29:20:57:94:
f8:75:66:2e:eb:25:b7:e2:9d:7b:d2:ba:c5:10:31:f1:84:48:
4f:11:cc:2d:db:21:3e:a7:41:83:c0:d2:b4:49:37:c9:fe:53:
5a:03:4a:b2:11:dc:8b:7b:25:d4:ca:ea:c0:ff:7d:03:07:1d:
b0:a7:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org