Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer
File: 2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer (raw, json)
Hash identifier: p7P2QsFuv28bWfk6enSke17c2Ro7z6P6xJSq15OErcc=
Subject key identifier: DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F62E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Jun 2024 00:13:42 +0000
Certificate not after: Tue 01 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 151209
IP: 103.134.32.0/23
IP: 2400:fb20::/32
Validation: Failed, certificate revoked on Tue 23 Jul 2024 20:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128558 (0x1f62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 00:13:42 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=A91C7DFB/serialNumber=DA137F01D70BB1D3E7512E1DE941730225D39570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:ff:76:93:c0:f2:c4:02:ec:a3:05:34:38:
9d:d5:ea:40:88:44:4f:bb:24:25:3d:70:ad:f5:63:
46:c6:e5:55:4a:71:5b:69:33:ce:81:28:7e:b1:ab:
eb:02:98:77:4d:fb:87:2d:3a:1f:49:75:0a:ab:1f:
c8:cc:9c:43:6a:9a:d3:9d:22:41:66:60:3e:8f:9b:
20:66:6b:72:84:82:7b:28:f1:19:c3:4f:01:e4:d1:
4f:aa:e1:56:e0:1d:44:82:7e:4c:10:5a:4f:f0:72:
df:3c:04:5e:44:88:5a:4c:c6:5a:29:48:88:d8:39:
6c:0f:c0:2f:5a:4e:57:e9:1a:bc:fc:cb:c2:ab:3a:
c7:42:8d:c7:30:bf:ae:85:b1:cb:94:e8:48:a7:cf:
64:79:c8:ba:bd:68:e6:fc:4b:64:4f:08:66:ce:58:
ff:8b:77:be:87:14:04:5e:4b:a7:01:b3:ab:11:d8:
0e:39:5e:d4:c7:1f:81:ea:9a:55:46:93:f1:2e:d8:
9e:1b:19:35:76:0f:77:d1:ec:d1:84:d0:0e:4f:95:
34:7e:b4:f9:d2:60:32:4e:e4:52:bd:76:f9:7c:83:
83:30:34:24:2f:b8:44:ef:66:17:ad:a0:9a:98:88:
f9:85:1d:22:74:a4:2c:4c:28:18:95:ba:00:01:6f:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151209
sbgp-ipAddrBlock: critical
IPv4:
103.134.32.0/23
IPv6:
2400:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
65:f2:ae:5a:b0:3a:74:a8:0f:90:c1:4a:aa:c6:fc:e2:1d:4b:
d8:28:42:2f:01:89:1a:48:08:fd:af:a2:74:f6:52:d7:5c:97:
b7:6b:ea:e5:f7:b6:41:a3:1c:28:40:aa:75:ad:1b:91:de:f5:
6b:aa:80:bd:76:1f:30:9e:ea:2f:22:a1:a0:bb:f8:4c:09:39:
30:b0:b6:18:aa:49:b1:23:cc:0f:4c:cc:1c:32:df:6c:5f:ae:
32:e4:31:4d:5c:51:49:b4:87:5e:2c:7b:a9:7b:d6:f1:b9:2f:
ba:ff:6a:90:42:77:da:22:83:f0:12:37:ff:07:4b:e9:a8:25:
50:f2:68:24:05:dd:d3:a9:3f:8a:1f:2c:10:a8:28:57:fa:d2:
47:ce:38:62:ee:21:76:5b:f6:2c:5e:c9:d8:49:84:a1:15:ff:
67:8f:52:c8:6e:8b:63:cd:1f:56:a8:99:f8:22:b1:1c:2f:5d:
94:42:c3:d5:19:4c:d1:8e:dc:da:b6:ad:08:35:07:2f:23:eb:
94:c2:03:32:d8:73:cc:8d:cf:df:79:98:f2:da:4e:df:9f:d9:
e2:3d:42:f6:74:ab:09:e5:ee:7c:6c:53:9f:77:5a:42:f4:fa:
e7:ed:7f:8b:3e:69:c3:25:05:73:a1:91:0e:d6:e2:25:f0:ae:
07:7a:a6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 22:49:39 2024 by rpki-client on console-ams.rpki-client.org