Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-sgRXM00cWfZHKIu2wYJeaEJF0.cer
File: 0-sgRXM00cWfZHKIu2wYJeaEJF0.cer (raw, json)
Hash identifier: 4S9mWUPYfOr7d/icnFDeLIkLQuZZnvszfy8XMPgwWTU=
Subject key identifier: D3:EB:20:45:73:34:D1:C5:9F:64:72:88:BB:6C:18:25:E6:84:24:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02129E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/0-sgRXM00cWfZHKIu2wYJeaEJF0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Oct 2024 20:51:30 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 17542
IP: 202.36.134.0/23
IP: 202.50.206.0/23
IP: 202.50.220.0/24
IP: 202.50.222.0/24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 22:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135838 (0x2129e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 7 20:51:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A919F525/serialNumber=D3EB20457334D1C59F647288BB6C1825E684245D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:d4:58:dd:97:e3:e3:36:41:3e:53:4f:84:
0b:12:5f:22:f3:78:e3:bb:81:9e:d3:b3:2d:2f:58:
b3:f9:d0:6d:31:cc:61:e7:cb:e7:fa:bc:5f:b5:9d:
7b:68:e3:0f:7b:1f:45:18:9e:d4:1d:db:b0:7b:15:
e0:da:e0:7d:b1:86:de:67:d1:22:05:e6:6a:1a:bc:
83:46:50:83:c4:53:91:37:b3:1b:0b:75:88:ff:30:
d6:63:09:4c:eb:f2:26:e2:27:f0:bf:f0:90:0a:69:
3f:4f:b1:7b:cc:76:04:f5:23:04:48:97:32:95:c9:
d9:90:54:f7:0e:f0:2f:6d:a0:42:db:72:8b:1e:12:
4e:9d:0c:8b:43:5a:1f:49:70:fd:f9:09:5c:4a:2b:
97:28:fb:59:99:db:23:3f:cc:9e:2e:d4:30:de:a4:
aa:98:0a:76:6f:e1:33:b1:e3:c3:b0:54:45:9a:29:
5c:48:6a:c7:45:c5:e8:ea:fa:7a:dc:12:6d:1a:12:
b5:dc:b2:ef:1b:70:c9:9c:09:aa:f4:22:df:c9:0e:
b8:23:a1:9e:0c:45:db:59:a2:20:fa:ae:2b:11:49:
6e:d3:ac:51:e4:39:47:46:54:ee:00:f9:1e:83:9d:
d6:98:d6:4d:dd:5a:10:b8:4e:8f:a0:eb:be:99:78:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:20:45:73:34:D1:C5:9F:64:72:88:BB:6C:18:25:E6:84:24:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/0-sgRXM00cWfZHKIu2wYJeaEJF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17542
sbgp-ipAddrBlock: critical
IPv4:
202.36.134.0/23
202.50.206.0/23
202.50.220.0/24
202.50.222.0/24
Signature Algorithm: sha256WithRSAEncryption
16:23:c3:87:9a:57:0c:f4:f8:cd:69:0f:d6:cd:a8:98:7b:a4:
ee:21:6c:e7:8e:ea:68:d1:7f:79:68:17:fd:d9:81:45:a5:d3:
c6:b0:b0:3a:12:a3:cb:32:6a:cb:26:51:b8:4b:02:79:c2:2a:
aa:6b:5f:9f:47:d2:a4:ab:7f:74:80:09:28:08:bc:5a:96:ff:
12:c0:7e:12:c6:c0:03:a1:72:d8:c2:75:11:94:22:16:10:90:
80:1d:1b:4e:a6:8d:ea:1f:75:38:80:df:85:71:d2:96:1a:77:
06:62:88:fe:dc:c3:c7:af:6c:6d:99:11:5e:94:18:9f:77:22:
80:ed:ac:8d:b3:f0:e9:bb:85:3d:ba:76:49:92:0f:69:f3:a0:
79:ec:3d:19:dc:c9:3e:1f:9b:20:cc:b2:70:ab:9d:69:c7:7e:
58:5b:a9:24:44:ca:61:7e:65:9b:da:5d:0d:07:d1:f5:c3:64:
c7:df:4b:04:88:b7:e4:8b:8a:33:a6:08:7c:33:79:4e:a7:06:
f0:ed:84:54:11:32:f8:5e:a7:89:7e:79:ca:7f:ae:9a:b7:ea:
44:bb:fd:e0:90:bd:f0:71:85:99:d8:aa:4a:1e:11:01:d3:ba:
af:76:53:84:89:c2:27:77:83:99:5f:58:73:14:26:51:4a:d5:
60:8b:d6:75
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAhKeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwNzIwNTEzMFoXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUY1MjUxMTAvBgNVBAUTKEQzRUIyMDQ1NzMzNEQxQzU5RjY0NzI4
OEJCNkMxODI1RTY4NDI0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDapdRY3Zfj4zZBPlNPhAsSXyLzeOO7gZ7Tsy0vWLP50G0xzGHny+f6vF+1nXto
4w97H0UYntQd27B7FeDa4H2xht5n0SIF5moavINGUIPEU5E3sxsLdYj/MNZjCUzr
8ibiJ/C/8JAKaT9PsXvMdgT1IwRIlzKVydmQVPcO8C9toELbcoseEk6dDItDWh9J
cP35CVxKK5co+1mZ2yM/zJ4u1DDepKqYCnZv4TOx48OwVEWaKVxIasdFxejq+nrc
Em0aErXcsu8bcMmcCar0It/JDrgjoZ4MRdtZoiD6risRSW7TrFHkOUdGVO4A+R6D
ndaY1k3dWhC4To+g676ZeCA5AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU0+sgRXM0
0cWfZHKIu2wYJeaEJF0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGNTI1L0VBMDIzNDFDODRFRDExRUZCOUZGMkQ1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8wLXNnUlhN
MDBjV2ZaSEtJdTJ3WUplYUVKRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICRIYwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAHKJIYDBAHKMs4D
BADKMtwDBADKMt4wDQYJKoZIhvcNAQELBQADggEBABYjw4eaVwz0+M1pD9bNqJh7
pO4hbOeO6mjRf3loF/3ZgUWl08awsDoSo8syassmUbhLAnnCKqprX59H0qSrf3SA
CSgIvFqW/xLAfhLGwAOhctjCdRGUIhYQkIAdG06mjeofdTiA34Vx0pYadwZiiP7c
w8evbG2ZEV6UGJ93IoDtrI2z8Om7hT26dkmSD2nzoHnsPRncyT4fmyDMsnCrnWnH
flhbqSREymF+ZZvaXQ0H0fXDZMffSwSIt+SLijOmCHwzeU6nBvDthFQRMvhep4l+
ecp/rpq36kS7/eCQvfBxhZnYqkoeEQHTuq92U4SJwid3g5lfWHMUJlFK1WCL1nU=
-----END CERTIFICATE-----
Generated at Tue Oct 8 03:17:49 2024 by rpki-client on console-fra.rpki-client.org