Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ixvUE2gKBT3YB7n_yoeKoX0opo.cer
File: 2ixvUE2gKBT3YB7n_yoeKoX0opo.cer (raw, json)
Hash identifier: 22i5R0uqca9C9eFzvdUrg2AoTn/MxmGzmJcGaVq/mKM=
Subject key identifier: DA:2C:6F:50:4D:A0:28:14:F7:60:1E:E7:FF:2A:1E:2A:85:F4:A2:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F8A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://2fd8be73b140/rpki/srg/2ixvUE2gKBT3YB7n_yoeKoX0opo.mft
caRepository: rsync://2fd8be73b140/rpki/srg/
Notify URL: https://2fd8be73b140/rrdp/notify.xml
Certificate not before: Wed 12 Jun 2024 12:04:14 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: AS: 45163
AS: 55471
AS: 131211
IP: 203.176.189.0/24
IP: 2001:df0:90::/48
IP: 2401:4600::/32
IP: 2401:e640::/32
Validation: Failed, certificate revoked on Sun 16 Jun 2024 11:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129191 (0x1f8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 12 12:04:14 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C2870005/serialNumber=DA2C6F504DA02814F7601EE7FF2A1E2A85F4A29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:c2:cc:0e:a1:1f:64:b6:e1:55:99:33:d7:
ed:79:1a:ab:ed:4c:f8:c0:45:58:b1:24:20:86:29:
c3:2e:4a:3c:27:0e:8e:36:ed:f7:f0:22:ac:29:3e:
f4:3f:c2:8f:79:e9:78:2d:95:d5:a8:39:46:25:f2:
30:03:0d:3f:fa:22:21:8a:6d:b4:5e:3d:e7:27:54:
2d:08:c1:0b:42:20:09:60:8c:8e:b5:dc:91:08:02:
29:db:06:06:49:fc:b2:19:c9:b7:eb:bd:5d:70:54:
9f:76:1a:bd:44:42:cf:fe:8d:3a:84:0d:fe:d4:e4:
5a:a6:d4:dc:8c:94:4b:0b:8c:36:c0:a7:38:87:a1:
e9:5e:4b:bd:76:7c:b5:2f:63:0d:f5:6d:d4:c5:0c:
91:0e:20:1d:a2:73:c1:d2:64:8f:c9:0a:00:66:45:
a2:45:d0:7c:e0:30:5e:37:89:d0:e6:17:fc:42:e4:
b3:d3:91:41:23:7e:11:6d:7f:a9:c3:36:a6:cd:29:
ce:40:60:cc:bc:ed:3b:8b:1e:34:12:f3:7b:68:a1:
2f:49:04:d1:6f:8f:2d:48:cf:84:19:21:1f:44:42:
1b:8b:f0:73:d2:30:39:2a:59:38:5e:c2:23:1e:6e:
26:c8:47:15:aa:3c:7e:7f:a2:95:ec:9c:cd:ba:d0:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:6F:50:4D:A0:28:14:F7:60:1E:E7:FF:2A:1E:2A:85:F4:A2:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://2fd8be73b140/rpki/srg/
RPKI Manifest - URI:rsync://2fd8be73b140/rpki/srg/2ixvUE2gKBT3YB7n_yoeKoX0opo.mft
RPKI Notify - URI:https://2fd8be73b140/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45163
55471
131211
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
IPv6:
2001:df0:90::/48
2401:4600::/32
2401:e640::/32
Signature Algorithm: sha256WithRSAEncryption
20:fe:a5:df:b7:d5:44:87:23:82:9f:68:af:29:9f:41:41:0b:
b7:45:38:c9:df:ec:ac:c2:35:6d:2d:81:62:2f:ff:a2:d0:74:
e1:f6:a1:90:e2:97:68:f4:e1:0a:0a:a2:23:82:ae:e3:0f:c2:
23:37:6a:45:f1:10:42:61:6e:58:78:40:a8:91:1f:a3:bf:b6:
dd:1c:93:5a:88:f6:c2:ac:12:d2:46:bd:3c:fb:f0:2e:78:82:
be:22:17:9b:50:9a:fc:e7:58:b7:3b:7e:72:35:39:dd:86:1f:
5b:dd:8d:a2:7e:cf:82:b4:c3:b1:99:a3:09:1e:66:90:1b:26:
83:18:68:41:2e:c0:0a:e5:5e:ab:37:b7:8e:21:f2:18:9e:e1:
36:1d:fc:d6:fe:fb:72:c2:7f:a5:61:86:cd:d4:84:76:01:ee:
41:ae:40:47:6e:c4:e4:bf:a6:b1:68:1e:f6:c4:f0:a7:8f:e3:
9a:e9:33:50:4e:ec:3c:c4:dd:05:02:6b:d7:73:c1:bd:56:59:
7e:77:a6:71:fa:ac:6d:c2:57:f3:6b:35:35:1e:87:4f:4d:72:
20:62:fa:f2:a1:48:fd:e2:48:0a:58:45:1f:a0:a5:cc:14:46:
c2:d8:bc:f2:b9:5a:62:e9:37:b7:99:f9:ca:5d:4a:ce:97:9f:
64:5c:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org