Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4t1isb0lDbYjLmTxJnHQNItsaHY.cer
File:                     4t1isb0lDbYjLmTxJnHQNItsaHY.cer (raw, json)
Hash identifier:          ccRvI0kQzL2AiUHpoA17GoR2yAVf8+I6v5q1z4blbEg=
Subject key identifier:   E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01665C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Aug 2022 14:20:48 +0000
Certificate not after:    Sat 30 Sep 2023 00:00:00 +0000
Subordinate resources:    AS: 140729
                          IP: 103.152.58.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91740 (0x1665c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  3 14:20:48 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=A91D930D/serialNumber=E2DD62B1BD250DB6232E64F12671D0348B6C6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:33:21:53:c0:cf:0e:78:c8:33:e0:de:9e:
                    65:e0:cc:2a:68:1a:9e:b4:3f:5e:67:cd:7f:e6:88:
                    23:b3:6c:c2:53:57:2a:31:e0:75:29:3f:e0:ab:25:
                    9d:93:25:1e:3e:ab:f5:38:ef:ec:d7:9c:b6:4c:94:
                    fc:d3:74:b1:5a:71:44:d2:61:5e:45:b6:3d:a0:e4:
                    c9:8a:b8:14:34:a9:d7:03:c7:dd:b6:a6:c5:6c:f3:
                    74:90:9f:61:21:5f:5d:1f:d7:e9:de:74:a4:45:47:
                    9c:ce:f7:2e:2f:19:24:7c:58:5a:f4:e5:f2:59:b4:
                    d5:9e:29:16:98:fd:b1:11:dc:4b:0e:f1:82:d6:97:
                    eb:37:58:df:52:0a:e5:a6:24:8b:82:b3:d1:3f:00:
                    99:b9:8e:d5:20:99:92:26:0b:48:55:3a:c3:b2:b4:
                    57:8b:38:f1:bf:af:59:8f:5b:a4:ef:1d:66:51:79:
                    f0:d5:fb:81:cb:be:ac:2b:da:6a:52:8e:1a:be:3b:
                    81:02:72:b4:0c:e6:23:dc:4f:de:63:27:92:da:41:
                    1e:b7:59:73:08:56:57:e1:54:d2:b5:84:3e:77:59:
                    cc:fd:34:5e:60:ea:f5:0a:e4:ef:73:cb:04:52:c5:
                    ef:0d:67:ac:03:0b:9e:6c:1b:8c:53:7d:a4:33:cf:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140729

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:6e:5c:ca:a9:d6:21:11:85:cd:53:04:44:9f:5e:b6:ac:13:
         a5:8d:39:6a:eb:00:c9:41:92:ca:c2:45:dd:65:ec:9e:93:1c:
         9a:b2:44:69:d2:63:ac:34:03:ee:ce:d4:2c:f1:f1:4b:30:09:
         f1:e4:2f:38:60:b0:d2:78:41:6f:17:ce:51:53:4d:ab:a3:29:
         bc:c5:e3:08:5c:e1:a4:ed:db:40:cb:80:73:65:3c:85:50:76:
         43:fd:f0:e8:a7:e0:30:07:56:a1:ec:ed:37:19:8c:b8:92:13:
         7e:b4:66:6f:18:3f:62:1b:05:9c:68:1f:63:98:9e:33:a6:8d:
         40:e4:dc:18:a3:1e:b8:6a:0e:f0:5e:b3:b0:24:90:c8:d2:34:
         92:a9:d1:31:ff:3a:f9:1b:f3:cd:9c:93:42:63:a4:62:c3:95:
         29:86:0c:a4:36:7d:64:1d:63:60:83:bb:7a:27:fe:66:bb:f7:
         e8:87:63:a8:1e:8f:d8:53:f0:40:e6:f9:38:fb:2d:8a:81:b2:
         7c:90:59:ce:62:16:8a:9e:23:19:36:48:ae:bb:57:69:bb:7f:
         1b:39:80:5b:64:c3:81:99:fc:74:f5:02:0f:35:d5:d1:bd:df:
         97:48:10:58:53:2d:33:6d:0a:10:6a:b8:60:b7:ef:c9:3c:c4:
         63:ee:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:41 2024 by rpki-client on console-ams.rpki-client.org