Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
File: 4R_pNwBqJdfGBaXkO0krKGxkmYw.cer (raw, json)
Hash identifier: N/l8OoFntcQLOfvumkQ7hDTbl4PG57d8EWTEUri7D8w=
Subject key identifier: E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 016A43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 28 Aug 2022 13:09:22 +0000
Certificate not after: Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources: AS: 4610
AS: 9503
AS: 9790
AS: 9889
AS: 17474
AS: 17656
AS: 17746
AS: 18203
AS: 18352
AS: 18406
AS: 23684
AS: 23973
AS: 24025
AS: 24484
AS: 38003
AS: 38052
AS: 38243
AS: 45792
AS: 55454
AS: 56102
AS: 58600
AS: 131174
AS: 132736
IP: 43.243.60.0/22
IP: 60.234.0.0/16
IP: 101.98.0.0/16
IP: 103.9.40.0/22
IP: 103.38.164.0/22
IP: 103.224.128.0/22
IP: 110.44.16.0/22
IP: 116.199.208.0/20
IP: 119.224.0.0 -- 119.224.143.255
IP: 121.98.0.0/15
IP: 123.100.64.0/18
IP: 124.197.0.0/18
IP: 124.198.128.0/17
IP: 163.47.104.0/22
IP: 182.23.176.0/21
IP: 202.49.82.0/24
IP: 202.49.244.0/22
IP: 202.50.170.0/24
IP: 202.50.246.0/24
IP: 202.53.176.0/20
IP: 202.89.32.0/19
IP: 202.89.128.0/19
IP: 202.127.8.0/22
IP: 202.150.96.0/19
IP: 202.180.64.0/18
IP: 202.189.160.0/20
IP: 202.191.32.0/20
IP: 203.89.160.0/19
IP: 203.100.208.0/20
IP: 203.160.112.0/20
IP: 203.184.0.0/18
IP: 2400:4800::/32
IP: 2401:5c00::/32
IP: 2402:6000::/32
IP: 2402:8200::/32
IP: 2403:c900::/32
IP: 2404:1c00::/32
IP: 2404:4400::/28
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92739 (0x16a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 13:09:22 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:d8:59:55:e8:dc:40:be:8c:5a:99:14:53:
88:64:49:da:62:f3:6e:26:e0:01:68:ec:47:ed:0d:
52:ac:8c:8a:80:02:aa:d3:2c:ef:fd:07:94:63:6f:
1f:ee:f4:85:71:6e:97:0f:eb:d0:11:dc:53:a2:3d:
2b:27:c7:4d:b6:d4:e4:81:ea:f8:e0:02:5c:20:30:
a4:ae:c5:5a:a8:c7:cb:2e:cc:66:73:3e:6f:e2:9c:
4b:5c:91:82:9a:42:c4:6b:44:2b:60:f4:96:98:4b:
df:68:fb:fd:4f:80:dd:c0:2f:64:f6:84:e4:ff:45:
88:ae:e8:c7:ff:ab:99:b9:d5:13:6d:1e:78:27:56:
6b:e6:f6:85:84:38:ed:d7:a2:fc:11:0c:38:30:c6:
1e:3d:a1:36:d5:5c:90:2a:83:fc:63:32:ec:0d:01:
38:de:2e:3a:96:15:53:a9:63:74:2e:59:a8:49:4f:
35:ff:0a:0a:8f:ca:23:bc:81:b1:8d:f7:8d:20:d4:
7c:28:c0:12:8d:1e:af:96:21:3d:b9:c6:bc:9c:c7:
10:4d:b4:59:aa:f7:42:60:fb:03:9c:00:da:78:8f:
ce:cf:07:9a:66:e6:3a:bf:07:d4:08:6d:66:f8:6b:
87:32:64:6d:7b:73:eb:60:65:7f:a6:10:ef:14:c0:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4610
9503
9790
9889
17474
17656
17746
18203
18352
18406
23684
23973
24025
24484
38003
38052
38243
45792
55454
56102
58600
131174
132736
sbgp-ipAddrBlock: critical
IPv4:
43.243.60.0/22
60.234.0.0/16
101.98.0.0/16
103.9.40.0/22
103.38.164.0/22
103.224.128.0/22
110.44.16.0/22
116.199.208.0/20
119.224.0.0-119.224.143.255
121.98.0.0/15
123.100.64.0/18
124.197.0.0/18
124.198.128.0/17
163.47.104.0/22
182.23.176.0/21
202.49.82.0/24
202.49.244.0/22
202.50.170.0/24
202.50.246.0/24
202.53.176.0/20
202.89.32.0/19
202.89.128.0/19
202.127.8.0/22
202.150.96.0/19
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.89.160.0/19
203.100.208.0/20
203.160.112.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2401:5c00::/32
2402:6000::/32
2402:8200::/32
2403:c900::/32
2404:1c00::/32
2404:4400::/28
Signature Algorithm: sha256WithRSAEncryption
65:19:64:48:0a:e9:1e:ad:e9:7e:a8:b6:7c:7e:a5:fc:7d:d4:
0a:03:39:b6:1a:55:db:80:1f:f4:89:de:c6:00:f5:fa:b5:d8:
2e:70:40:6b:ab:39:3d:08:b6:36:7a:c9:38:96:04:fa:85:c9:
8a:a8:a4:b7:8b:bf:d4:19:9a:75:4d:39:c5:d2:b3:93:51:69:
8f:21:fe:e1:1d:a1:38:2a:e1:08:de:79:8b:20:f5:0e:aa:a5:
ce:61:fb:c2:87:73:73:d6:63:4e:a1:23:35:cf:d0:05:cb:26:
c1:ee:07:af:b8:f3:12:6d:9c:d7:f6:6d:39:4c:b6:61:88:ac:
22:35:e8:21:a7:65:60:0d:57:2d:fd:c8:96:e9:54:7b:3c:a8:
6d:6f:25:c4:3a:97:fc:bb:6d:cd:5d:a2:23:0c:9c:5d:8e:8e:
cf:46:8c:6d:1c:47:d8:a4:5d:f6:f7:d9:15:9a:99:92:9a:6b:
09:91:8f:99:6d:c4:28:bf:77:6e:a9:ae:6f:49:86:31:c4:3c:
e9:06:d9:9f:47:ad:27:b1:76:fb:5d:fb:3e:47:85:57:b0:14:
3f:cb:b3:fa:f9:0b:97:ad:ad:ac:ed:87:2c:f8:70:b6:0a:d7:
ca:aa:00:36:31:08:75:ad:a1:70:e5:ac:d7:fc:32:36:8b:d0:
bb:c3:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-fra.rpki-client.org