Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pA8Mwwioc5vfU-tW6uO4YehCydY.cer
File: pA8Mwwioc5vfU-tW6uO4YehCydY.cer (raw, json)
Hash identifier: 72MQheWPGiFpC0v7+saW9AWzUyOP/GsdqGXF0J2f19g=
Subject key identifier: A4:0F:0C:C3:08:A8:73:9B:DF:53:EB:56:EA:E3:B8:61:E8:42:C9:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91856F6/7E946CAA869E11EB9A049627C4F9AE02/pA8Mwwioc5vfU-tW6uO4YehCydY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91856F6/7E946CAA869E11EB9A049627C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Nov 2023 00:23:49 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 67.215.112.0/20
Validation: Failed, certificate revoked on Tue 30 Jan 2024 20:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20074 (0x4e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 1 00:23:49 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91856F6/serialNumber=A40F0CC308A8739BDF53EB56EAE3B861E842C9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:99:33:57:6f:94:2e:76:1e:cb:db:51:5a:
f5:8d:3f:e3:98:36:90:e2:11:69:c1:9f:9c:5c:76:
34:b4:62:96:e8:ad:82:ff:c4:91:5a:af:dc:c7:a5:
93:ee:01:ca:99:48:4d:b4:06:6f:ff:33:37:67:20:
0d:0d:23:ab:5e:07:04:97:e0:e4:f2:5d:0c:d6:8a:
8d:a3:d8:3e:ee:03:6e:d3:f2:c3:79:b2:73:be:95:
27:fe:53:90:b8:ed:96:0d:4a:85:18:fe:99:dc:76:
32:a4:c4:16:fb:11:5f:53:4c:a4:d7:55:8e:61:8c:
f1:07:ca:20:70:c5:4c:ca:84:36:a8:58:ef:94:33:
95:c5:62:31:72:14:fc:f4:5f:09:59:f9:26:b8:ce:
b0:01:72:b6:55:0c:6a:2b:52:1d:f9:d2:7c:2d:9d:
ea:ea:68:ec:68:4e:45:a2:ad:01:c0:ae:15:0a:11:
9a:18:cf:a0:a0:9e:df:ad:fb:e7:86:f0:12:10:77:
a9:35:31:06:98:8b:5c:6f:d2:f7:10:d6:85:33:22:
25:95:54:64:b4:1b:b3:76:c4:8d:06:6d:c0:f1:c1:
75:fc:24:27:92:4d:7c:7e:41:69:82:23:da:66:fa:
c9:bf:93:62:05:07:4d:1b:bd:ea:fd:1b:59:16:d2:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:0C:C3:08:A8:73:9B:DF:53:EB:56:EA:E3:B8:61:E8:42:C9:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91856F6/7E946CAA869E11EB9A049627C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91856F6/7E946CAA869E11EB9A049627C4F9AE02/pA8Mwwioc5vfU-tW6uO4YehCydY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
67.215.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:2c:64:e5:64:40:88:2f:21:1a:6e:5d:49:31:38:b5:df:39:
e5:84:a3:1f:ea:f2:ad:fc:42:03:70:9c:c5:89:92:f4:1a:9a:
03:8a:e6:6c:d0:fa:32:fe:ca:1d:00:1b:f4:1f:cd:04:56:69:
f9:4b:fd:a2:0d:88:19:0f:bb:8f:2b:f1:f2:10:de:25:8f:f3:
7f:fe:f0:6b:7b:e6:c0:f7:0f:d2:d5:29:94:59:57:fb:4d:82:
54:63:e0:e5:26:97:2d:69:a1:9f:21:18:8a:03:d3:3e:dc:c2:
71:99:2d:1c:2c:ae:b8:ea:20:dd:21:c1:dd:fc:40:00:7f:8b:
44:3c:2a:e7:01:3b:19:d5:70:c0:28:d7:b0:e1:45:02:b0:fc:
a8:5a:cb:3d:12:90:96:df:78:9d:d9:c6:39:ce:b4:f9:22:c6:
72:20:e1:44:cb:e3:23:d0:57:34:ab:80:f7:e4:8b:19:4e:ca:
de:eb:24:f1:01:70:cf:24:2e:26:a0:16:c6:9a:c9:19:51:71:
ea:6a:7c:d4:bd:fb:14:4c:81:dd:e4:61:68:4a:61:cb:6f:9e:
dd:87:e0:f1:31:25:41:d6:59:40:9e:08:35:f6:18:5f:28:f7:
55:f2:f9:e2:19:92:d4:50:48:ba:d4:f1:75:a0:92:f0:c3:87:
44:aa:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 22:09:38 2024 by rpki-client on console-ams.rpki-client.org