Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FSovfNTcbDE-zSeKQnaWd_RSoA.cer
File: 0FSovfNTcbDE-zSeKQnaWd_RSoA.cer (raw, json)
Hash identifier: M6zY2Onoom8ZJFl84eBDsM5DuqWIbqrCTA0hHbyJ2b8=
Subject key identifier: D0:54:A8:BD:F3:53:71:B0:C4:FB:34:9E:29:09:DA:59:DF:D1:4A:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FFEA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B503/4746702641D111EFB19CEA14C4F9AE02/0FSovfNTcbDE-zSeKQnaWd_RSoA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B503/4746702641D111EFB19CEA14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Jul 2024 07:51:35 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 136146
IP: 45.114.124.0/22
IP: 103.81.168.0/22
IP: 2400:7ac0::/32
Validation: Failed, certificate revoked on Tue 16 Jul 2024 00:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131050 (0x1ffea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 07:51:35 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A917B503/serialNumber=D054A8BDF35371B0C4FB349E2909DA59DFD14A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:7d:fa:05:55:81:2f:8c:61:40:b9:b3:ea:
7b:52:60:96:11:7b:0a:9e:0d:c4:c9:b4:80:3c:32:
35:22:b8:ae:7a:7a:30:dd:08:8a:c0:99:9d:2f:81:
20:37:ce:9a:c0:21:be:68:3b:c7:c3:56:3b:7d:ba:
56:be:a6:00:e2:54:65:43:a4:47:f5:c1:82:88:15:
54:82:e6:97:cf:77:56:b8:03:cd:85:fa:75:21:2f:
6b:a5:72:f1:b4:e2:e7:e1:9b:23:1a:f1:c5:d4:53:
ce:c4:a4:b4:09:8c:49:11:2d:d0:76:68:09:2c:27:
59:dd:a3:1b:33:24:7b:5c:df:8e:55:d9:0f:b5:32:
6b:b7:07:d5:6f:67:bf:19:53:2e:da:73:ad:0f:56:
e1:c4:ed:7e:49:58:3f:a6:d2:79:a0:83:9d:89:9e:
e0:a1:a4:ad:f3:e0:0f:83:26:f2:53:8c:8e:f5:3e:
13:21:3e:9b:fd:ba:cd:d7:ae:03:cd:73:de:0f:d5:
67:54:ef:a3:af:c1:95:ca:57:3e:9d:bd:52:1d:be:
5e:6f:04:67:41:9e:ec:f7:b6:2e:61:27:3d:7a:79:
58:eb:d7:be:93:fc:65:9e:71:ad:f4:50:32:4c:72:
4f:47:dd:73:4b:27:05:a2:d7:54:75:c5:6d:8d:93:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:A8:BD:F3:53:71:B0:C4:FB:34:9E:29:09:DA:59:DF:D1:4A:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B503/4746702641D111EFB19CEA14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B503/4746702641D111EFB19CEA14C4F9AE02/0FSovfNTcbDE-zSeKQnaWd_RSoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136146
sbgp-ipAddrBlock: critical
IPv4:
45.114.124.0/22
103.81.168.0/22
IPv6:
2400:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:ae:db:3f:e5:a6:9f:49:71:6a:46:6c:0e:8c:d0:00:76:29:
07:4e:5f:c5:9d:10:9e:24:4c:97:c2:08:25:e8:db:0b:72:51:
4a:4d:de:76:65:7c:c7:07:30:5e:ae:e3:aa:4a:46:cc:79:87:
2d:84:46:b5:63:08:cf:b2:52:a9:51:e8:0a:36:1a:c5:58:29:
97:a6:8d:c1:8c:e9:36:2c:93:ab:d0:57:6a:8a:05:49:0e:d5:
2c:75:4f:e1:e4:33:48:f8:65:fa:3d:09:8b:37:2b:97:0b:62:
eb:55:c3:db:5b:75:60:fc:62:85:8a:51:84:d9:d7:09:8e:69:
bd:7c:84:60:3e:ee:99:44:04:52:42:02:9b:8a:8b:29:cc:0f:
9e:b3:a2:e3:4a:1a:03:75:cc:47:84:c3:5b:e8:fa:f6:46:f9:
2b:09:fd:3e:ce:e5:9e:8f:18:52:0a:88:00:db:73:4c:fe:3c:
8d:69:e3:5f:77:78:68:00:40:b5:dd:ca:d8:9a:a6:96:a1:cb:
0c:b5:dc:6c:af:da:e7:27:19:82:0c:e8:22:31:24:d3:aa:0d:
f1:c9:70:10:6d:88:34:10:a3:b6:43:eb:ad:63:80:be:22:95:
0e:f9:ef:85:2c:5f:6d:0d:00:de:44:5a:de:50:c2:0f:fb:9d:
aa:a3:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 03:10:36 2024 by rpki-client on console-fra.rpki-client.org