Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oC59PlWJLbgWebDGGJagN5Srua8.cer
File: oC59PlWJLbgWebDGGJagN5Srua8.cer (raw, json)
Hash identifier: K7OICymRDVL8aLMKV3GXqwmiCKdPb9HY0hLg5Go11ps=
Subject key identifier: A0:2E:7D:3E:55:89:2D:B8:16:79:B0:C6:18:96:A0:37:94:AB:B9:AF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 60F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C287/BCBC23AAD30811EFB4EC7482C4F9AE02/oC59PlWJLbgWebDGGJagN5Srua8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C287/BCBC23AAD30811EFB4EC7482C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jan 2025 06:19:59 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: IP: 161.248.170.0/24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 16:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24825 (0x60f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 15 06:19:59 2025 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:24:ea:e9:d2:0d:16:73:70:02:0e:41:dd:
f7:f9:b3:a3:0f:aa:ae:fd:97:b9:9c:20:f3:27:7c:
7f:b6:df:c5:f6:7d:84:26:f6:62:c6:65:b5:61:b2:
0e:9e:b6:6a:97:2f:7d:e5:11:77:ce:0f:c1:47:f7:
f7:d6:36:17:5b:f5:31:9f:38:33:aa:dd:d9:7d:4d:
26:c8:b5:47:3a:dc:e9:50:90:17:bc:80:7a:39:90:
01:23:1c:7b:c3:a8:7b:69:3b:af:2b:cb:fe:2e:3c:
e1:d4:07:0f:de:bf:f2:66:26:2d:ee:bc:91:17:a5:
e8:e9:79:e1:93:89:40:3f:a1:92:e1:f1:c2:23:b6:
69:01:0e:11:69:12:75:30:18:52:d2:6f:cb:a5:ea:
70:4d:f8:03:a5:43:a6:ed:f8:df:90:01:28:65:e1:
65:0d:1b:d1:f0:ec:a5:13:d9:27:8a:3c:11:a3:9d:
23:78:b1:6a:d9:1e:96:36:79:80:9d:f1:34:7c:c4:
03:39:8f:f1:54:ce:f1:68:13:22:c8:04:5b:8d:48:
d3:78:5d:6c:67:ff:d2:73:ac:87:04:82:35:ac:35:
98:20:cc:af:98:2d:e7:0f:f8:f3:a4:6f:89:0a:35:
44:23:89:a2:d2:4b:69:d7:4e:ea:5b:05:e9:e6:e8:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:7D:3E:55:89:2D:B8:16:79:B0:C6:18:96:A0:37:94:AB:B9:AF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/BCBC23AAD30811EFB4EC7482C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/BCBC23AAD30811EFB4EC7482C4F9AE02/oC59PlWJLbgWebDGGJagN5Srua8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.170.0/24
Signature Algorithm: sha256WithRSAEncryption
01:00:74:6f:33:c3:15:2c:a6:bb:16:b8:12:e9:5b:7e:a7:58:
eb:fc:43:f7:60:66:9f:07:39:35:7f:d9:f2:3d:f9:91:7d:a3:
09:c4:d4:b7:f5:d4:6c:e7:0e:ea:98:ef:f6:4a:2b:3d:9c:ef:
3a:43:a0:78:5a:97:c9:2e:45:f6:b1:d8:c2:94:55:34:2b:41:
de:8e:b6:03:5a:b7:8d:86:b1:de:96:90:78:5a:87:1b:82:38:
7c:8f:64:7a:e4:24:56:17:a3:6a:c1:31:a6:dc:88:22:86:05:
73:a9:af:e3:bc:ca:9f:7e:09:e5:ca:34:23:d9:5f:1d:80:26:
14:5e:12:5d:12:56:61:d4:47:3f:a1:5d:61:6a:a7:dc:c3:b0:
4e:0c:6e:62:04:26:82:25:e9:16:1c:2f:ce:57:77:1a:be:ea:
5b:40:f6:72:9b:cf:e4:16:1f:b8:e8:d3:77:28:91:02:0b:8b:
0d:a4:84:de:1a:41:72:68:a8:67:3c:dd:7e:11:c7:a7:c3:68:
63:32:aa:64:30:36:45:14:06:79:19:dd:42:c7:d0:e8:b6:82:
f4:41:f9:c1:7c:cc:a0:b1:3f:82:8e:6e:1f:11:39:81:01:27:
8f:17:fe:c6:60:99:cb:2c:a7:38:e5:aa:4a:26:d4:ca:ad:c4:
79:0b:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:02:19 2025 by rpki-client