Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5icn8ZirjyLPOPTQP2o98mbugPI.cer
File: 5icn8ZirjyLPOPTQP2o98mbugPI.cer (raw, json)
Hash identifier: wXjloiGoCEOWLNKVBwFqcYiU6/DBovWdXW4YNU2mYJY=
Subject key identifier: E6:27:27:F1:98:AB:8F:22:CF:38:F4:D0:3F:6A:3D:F2:66:EE:80:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0177C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Nov 2022 03:14:07 +0000
Certificate not after: Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources: AS: 45504
IP: 43.254.60.0/22
IP: 103.22.156.0/22
IP: 103.253.184.0/22
IP: 123.255.224.0/21
IP: 203.148.92.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96197 (0x177c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 03:14:07 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=A91E7AC7/serialNumber=E62727F198AB8F22CF38F4D03F6A3DF266EE80F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:9e:03:32:0a:7c:b1:b2:df:fd:49:70:ff:
e0:45:67:47:1a:bd:41:b7:85:a5:6b:64:ab:e9:fb:
5e:64:cc:6c:de:43:3f:72:9e:a9:61:ee:77:96:1b:
9e:e1:97:90:92:b6:2f:fc:8a:d5:7f:58:3d:8d:7e:
0b:6d:04:e3:1c:3d:c6:4c:97:3b:dc:be:e7:c9:2d:
0c:47:84:31:10:a6:41:7f:b1:f0:97:4b:6c:a8:67:
13:7c:e2:22:58:69:b2:92:f3:53:3c:61:e6:29:42:
11:6a:2c:e2:b8:cf:4c:4f:f4:4c:e7:5a:ea:ef:2d:
e3:d6:7c:5b:5f:fe:73:d2:d1:7d:b6:5d:fa:bb:9f:
b8:5b:75:2a:9e:2e:98:29:6e:81:ea:bf:d8:e3:fd:
a9:f4:06:42:80:f8:b7:f2:c5:cc:1c:98:34:c6:e3:
64:a3:31:9d:75:03:3a:12:e9:8a:f2:46:92:9c:4a:
c9:be:6d:a6:10:b9:b3:38:29:1b:d6:80:f3:38:7b:
d0:f6:9e:25:1a:96:a5:42:68:b2:25:be:a1:aa:eb:
34:a6:40:8c:ca:45:f5:10:03:d4:13:c9:0b:d9:77:
cb:f0:03:12:46:c8:be:26:1d:bd:ff:e7:23:d9:f0:
d9:83:46:f5:06:f1:d8:4f:53:fc:63:e5:ea:16:4a:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:27:F1:98:AB:8F:22:CF:38:F4:D0:3F:6A:3D:F2:66:EE:80:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45504
sbgp-ipAddrBlock: critical
IPv4:
43.254.60.0/22
103.22.156.0/22
103.253.184.0/22
123.255.224.0/21
203.148.92.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:53:5a:b9:16:3b:db:55:6f:01:f6:02:9f:00:2d:e8:d5:29:
f4:cd:d8:94:6b:b3:1c:4c:67:bf:51:90:4b:7f:53:dd:a6:8e:
33:8c:22:fd:f3:4d:54:9a:e5:a5:e3:23:af:e7:ed:3c:95:d0:
63:81:56:42:6b:f8:03:70:7a:53:40:cf:97:c3:2a:ef:12:47:
17:9e:e9:f0:1c:03:9c:2a:7f:fd:26:f3:04:1a:16:65:db:55:
00:7e:4a:73:f0:b3:b4:54:3c:10:37:f4:b7:44:ea:9c:51:74:
25:3a:48:23:d5:e5:55:8b:58:df:c1:b9:3a:83:05:92:cb:35:
ce:2c:3d:4f:ba:a3:81:82:71:96:d4:b3:a6:58:37:f6:d2:1f:
27:90:40:bb:3b:78:37:58:c9:3e:dc:72:03:45:79:62:39:a4:
6a:86:85:dd:9a:03:42:fc:50:2c:9e:87:e1:bb:1a:51:25:df:
65:27:ee:e3:a3:ea:d5:9b:86:d4:c7:4b:b4:20:83:d0:6c:3b:
af:34:af:b1:92:6d:f1:46:13:99:51:0b:9c:a6:27:d6:2c:67:
c1:d8:03:83:72:8d:3d:b1:13:1d:71:ab:f8:fd:46:87:0e:64:
07:18:b8:37:d2:b6:90:31:00:7c:bc:46:be:0f:8b:a9:4b:9e:
bb:94:f9:0e
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgIDAXfFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTEwMzAzMTQwN1oXDTI0MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTdBQzcxMTAvBgNVBAUTKEU2MjcyN0YxOThBQjhGMjJDRjM4RjRE
MDNGNkEzREYyNjZFRTgwRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVY54DMgp8sbLf/Ulw/+BFZ0cavUG3haVrZKvp+15kzGzeQz9ynqlh7neWG57h
l5CSti/8itV/WD2NfgttBOMcPcZMlzvcvufJLQxHhDEQpkF/sfCXS2yoZxN84iJY
abKS81M8YeYpQhFqLOK4z0xP9EznWurvLePWfFtf/nPS0X22Xfq7n7hbdSqeLpgp
boHqv9jj/an0BkKA+LfyxcwcmDTG42SjMZ11AzoS6YryRpKcSsm+baYQubM4KRvW
gPM4e9D2niUalqVCaLIlvqGq6zSmQIzKRfUQA9QTyQvZd8vwAxJGyL4mHb3/5yPZ
8NmDRvUG8dhPU/xj5eoWSlRrAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQU5icn8Zir
jyLPOPTQP2o98mbugPIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU3QUM3L0Y0MTNENzA4QTY0OTExRUFCM0RCMEM2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFN0FDNy9GNDEzRDcwOEE2NDkxMUVBQjNEQjBDNkVDNEY5QUUwMi81aWNuOFpp
cmp5TFBPUFRRUDJvOThtYnVnUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALHAMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCK/48AwQCZxac
AwQCZ/24AwQDe//gAwQAy5RcMA0GCSqGSIb3DQEBCwUAA4IBAQC9U1q5FjvbVW8B
9gKfAC3o1Sn0zdiUa7McTGe/UZBLf1Pdpo4zjCL9801UmuWl4yOv5+08ldBjgVZC
a/gDcHpTQM+XwyrvEkcXnunwHAOcKn/9JvMEGhZl21UAfkpz8LO0VDwQN/S3ROqc
UXQlOkgj1eVVi1jfwbk6gwWSyzXOLD1PuqOBgnGW1LOmWDf20h8nkEC7O3g3WMk+
3HIDRXliOaRqhoXdmgNC/FAsnofhuxpRJd9lJ+7jo+rVm4bUx0u0IIPQbDuvNK+x
km3xRhOZUQucpifWLGfB2AODco09sRMdcav4/UaHDmQHGLg30raQMQB8vEa+D4up
S567lPkO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-ams.rpki-client.org