Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer
File: 5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer (raw, json)
Hash identifier: 8ZBujkd4owU/bmrbz3XCrvd76NwnxfRgLUy97dbm8NI=
Subject key identifier: E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FDBD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 14:14:36 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 137854
IP: 103.115.167.0/24
IP: 103.125.25.0 -- 103.125.27.255
IP: 2001:df5:3100::/48
Validation: Failed, certificate revoked on Fri 09 Aug 2024 13:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130493 (0x1fdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 14:14:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91395A9/serialNumber=E630C213FB3FB160607CBBE5C06907C0BEC4C5F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:95:e1:e5:9a:88:ad:c6:c6:56:73:a6:9d:
5c:4a:1e:7d:d2:49:22:49:d0:c2:89:90:ab:bc:b7:
a9:de:90:84:74:44:34:44:82:64:dd:00:98:ee:5b:
cb:26:71:25:22:4c:e0:11:c1:aa:8b:5d:1b:19:81:
f3:8c:b3:a3:72:a1:2b:57:cb:2a:ea:7d:12:f0:91:
ee:df:2c:3d:ef:ea:bf:ca:d3:6e:40:1f:77:b5:16:
72:09:84:cd:88:a9:a9:2f:97:b9:c6:b3:a7:fb:32:
78:45:94:cd:24:5d:9d:cf:cd:eb:e0:e3:8d:0c:53:
4f:ea:56:43:fe:a7:a1:a0:b2:46:b1:74:07:00:29:
11:e7:7b:02:83:ec:5d:ff:e8:0f:be:fb:ab:ee:78:
c3:5d:36:23:4a:b7:4e:b1:1c:05:ee:46:ff:26:0e:
d6:49:44:07:13:cf:bb:53:21:83:ae:3a:88:7e:96:
0d:1b:ab:43:74:71:0d:f8:b0:89:d5:21:87:41:b0:
72:cc:d9:44:07:c8:29:1e:f0:9d:40:a7:4b:66:c0:
dd:31:ab:99:10:29:35:fe:92:88:ae:80:f4:f2:a9:
bd:67:52:e2:5e:ca:0a:3e:8c:6f:1a:a5:35:46:2e:
2b:31:e2:84:c7:ec:01:06:14:2b:49:e0:40:f0:b5:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137854
sbgp-ipAddrBlock: critical
IPv4:
103.115.167.0/24
103.125.25.0-103.125.27.255
IPv6:
2001:df5:3100::/48
Signature Algorithm: sha256WithRSAEncryption
89:1a:dd:df:61:a5:3b:51:21:8d:13:39:40:e9:b1:16:e8:61:
9d:b6:9d:d7:84:d9:90:49:1d:67:c0:91:f0:fa:3d:88:d3:13:
bb:f6:13:97:98:f5:ba:d2:b9:5b:73:d3:e5:a9:34:1f:c9:e5:
94:ce:dd:12:58:dd:60:f0:a6:8f:98:4a:1c:93:32:d3:66:30:
f3:90:8f:50:fc:42:93:85:e8:bf:6e:b7:0f:74:39:fd:7b:e8:
97:41:ce:c6:d6:13:d1:95:6e:2c:58:d7:d5:f5:a6:c0:e3:72:
b8:97:6f:a1:31:af:de:8e:60:ed:36:47:a1:b3:6a:8e:bf:a9:
94:d6:c9:01:d4:4a:59:67:3d:97:ae:01:56:41:ee:00:2e:8b:
84:b4:10:2b:ab:9a:d9:68:a0:dd:4f:55:87:5a:4c:3b:ff:75:
47:0e:5f:e3:cc:0b:0e:00:15:93:2d:95:d6:5d:d0:5b:1d:2d:
be:81:bc:6b:48:62:2f:3e:1d:6c:54:31:04:cf:1e:26:0e:35:
c9:ee:fa:f0:63:fa:cb:00:8c:77:16:72:20:9a:c9:13:6b:73:
d0:bd:3b:d1:17:b1:db:ab:02:85:a1:13:aa:5b:fc:2e:34:bb:
1d:35:c1:d7:30:67:86:bc:48:54:79:a2:d7:ce:2a:9e:d1:dc:
5a:a2:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 16:17:44 2024 by rpki-client on console-fra.rpki-client.org