Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o5xoH2Q-abVIbMBAFe2sxrf4tc.cer
File: 6o5xoH2Q-abVIbMBAFe2sxrf4tc.cer (raw, json)
Hash identifier: 5BpsJmtkW7m3pMOASfravkDBlU7gX4vcq+GkUustlhM=
Subject key identifier: EA:8E:71:A0:7D:90:F9:A6:D5:21:B3:01:00:57:B6:B3:1A:DF:E2:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 013F05
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/6o5xoH2Q-abVIbMBAFe2sxrf4tc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Jan 2022 05:38:00 +0000
Certificate not after: Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources: IP: 103.19.236.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81669 (0x13f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 12 05:38:00 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=A91D3906/serialNumber=EA8E71A07D90F9A6D521B3010057B6B31ADFE2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:1d:4f:88:26:64:13:38:6b:89:10:2e:7d:
91:eb:6e:22:29:3b:81:83:0c:9d:e4:96:44:d0:1a:
8a:fd:ee:0c:53:67:9e:87:a8:6a:5c:3b:fb:50:23:
4f:6f:e2:73:79:41:89:cf:ac:a0:fa:50:c5:02:0f:
f9:06:f2:3b:93:fd:2d:37:db:4f:87:72:96:15:55:
4f:34:70:b8:d8:17:ad:6d:83:3d:72:34:0e:9a:7d:
96:62:0b:78:23:ae:ff:d6:57:9c:14:70:d7:a3:84:
05:9e:83:10:d3:07:0b:6c:96:dd:56:d3:f8:a8:e6:
dc:da:82:0c:9e:cc:dc:89:2b:61:9d:4a:d5:53:92:
fe:5f:c2:db:cb:89:6c:83:68:35:76:9c:0e:61:df:
0d:2b:86:0d:77:7a:69:87:ce:85:77:5c:bb:9a:5c:
88:ae:d9:ff:fe:1d:2e:37:0c:1e:9f:33:68:6e:ac:
b3:95:1d:8c:42:de:f1:b6:03:50:1b:03:75:3b:71:
3b:44:22:4e:1d:1b:76:4d:ce:d9:eb:d4:32:e6:ac:
f7:c0:9c:12:2f:c9:9f:bc:ba:0b:04:23:77:d5:e9:
56:2f:cf:ee:06:5e:77:11:c7:e7:00:4f:e8:34:47:
25:83:e3:46:08:0a:62:f1:a0:1e:10:d9:6b:2b:bd:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:71:A0:7D:90:F9:A6:D5:21:B3:01:00:57:B6:B3:1A:DF:E2:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/6o5xoH2Q-abVIbMBAFe2sxrf4tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.236.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fd:0d:2f:18:d7:57:6c:82:b5:28:88:da:3b:df:70:7b:fe:
1f:75:70:fa:12:17:c5:c1:ce:4c:13:d1:15:a1:6d:31:9e:ca:
21:54:68:7d:51:f1:05:d8:d3:87:d1:be:c3:d4:c7:4f:4e:a6:
df:c0:9f:10:37:14:45:69:a4:2f:95:8d:28:16:8a:be:e4:96:
78:88:e2:fc:ac:c4:84:10:1f:ce:4a:e6:ad:01:5c:76:64:a9:
a7:fb:d1:22:5e:5c:bf:95:82:74:f4:d3:dd:4e:cc:1a:4c:96:
41:4d:c1:37:a6:a2:a2:e9:a1:d1:b5:17:7d:71:70:66:96:86:
ce:e7:5a:e5:6d:18:35:f8:50:b2:c6:62:d3:cc:1a:86:56:78:
f3:25:02:1a:6c:14:a7:66:ee:bf:36:12:61:53:e1:1a:71:eb:
de:bd:e8:c5:8c:07:ed:1d:7b:df:26:99:1a:4f:96:a8:46:27:
53:a3:18:bd:59:51:a5:0a:e7:b7:ff:70:db:29:e3:31:fe:67:
36:e0:00:3d:e6:bd:76:67:21:9d:78:8e:f4:92:23:f8:8e:a5:
e0:ad:77:08:f2:66:6e:33:7a:73:2f:fd:7c:e2:87:1a:53:c0:
8a:89:94:17:98:41:b1:96:dc:13:07:fe:fb:f5:0b:ad:50:0c:
de:46:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-fra.rpki-client.org