Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70rQjyVg25AvCF1hRHO6BICLhKQ.cer
File: 70rQjyVg25AvCF1hRHO6BICLhKQ.cer (raw, json)
Hash identifier: gR4VILjhvJweH5X1ccNrKmkWhiK0jYqf9qbS0zVNvms=
Subject key identifier: EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E43A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Mar 2024 04:39:35 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 103.103.104.0/22
Validation: Failed, certificate revoked on Thu 14 Mar 2024 19:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123962 (0x1e43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 04:39:35 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91C5A5C/serialNumber=EF4AD08F2560DB902F085D614473BA04808B84A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:35:26:b8:83:72:31:ab:fb:43:37:4e:4a:
3a:2a:84:a2:8f:92:c9:d2:15:a1:a6:0a:4c:78:d4:
04:11:9d:25:38:dc:ed:20:a7:82:67:a1:a7:a9:d4:
2f:4c:71:52:1d:c8:91:b6:c9:37:aa:e7:2b:22:8b:
f7:ce:4a:62:93:3d:33:6f:eb:90:17:f7:19:64:81:
7f:b1:f2:0f:3f:e7:da:5d:bb:01:29:8e:5d:21:e3:
8c:6a:c3:94:17:8c:2d:fa:df:64:dc:8f:26:37:ea:
10:4f:23:00:1d:03:d6:88:3d:5c:51:0f:1f:01:2a:
7f:60:e4:e3:d8:3b:6b:93:63:b6:dd:99:b6:37:71:
c0:f2:7c:7f:96:5c:73:f0:7f:fc:14:78:1d:2d:d8:
a6:b3:7e:94:f8:c2:1b:9f:22:38:5d:f4:9c:f4:9a:
fc:f2:64:f4:f7:13:d4:87:8c:64:4c:32:e8:35:fa:
d1:69:6c:22:44:78:1d:26:49:fe:e3:f4:db:29:7e:
0e:eb:ef:d7:b9:59:f0:2a:d9:0e:d1:4b:86:7d:50:
d7:b8:a1:51:7d:72:a9:48:7c:1e:41:c1:0d:bf:09:
08:79:d0:3d:81:02:55:7b:6d:71:ca:fd:fd:73:9b:
cc:44:21:86:6e:b7:f5:ca:ee:01:6d:cc:ab:70:9f:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:cf:73:53:58:52:dd:4f:3d:65:0f:2a:bf:25:53:c3:ad:4b:
7f:e0:10:c4:55:5a:28:0c:40:e4:a4:2d:82:63:4e:0a:cd:81:
ca:44:48:4a:38:9e:99:f4:cb:a9:0f:56:cb:05:cd:aa:bf:16:
cf:97:05:ea:ab:b0:2d:6a:e8:a8:9f:b9:10:0e:31:ed:89:8e:
4b:80:2e:b0:69:4e:58:a5:d9:f9:02:1b:85:d3:89:b2:13:ba:
8d:e4:1d:aa:5f:d7:66:6f:47:7e:32:34:ae:e8:ab:6c:b5:aa:
f8:7c:f9:dc:49:3f:c8:cb:4e:f5:d4:1b:29:60:14:56:29:d8:
3a:f9:d4:ea:f8:08:c7:0e:95:fa:4b:22:39:e8:87:e0:26:77:
eb:c4:f2:aa:03:9c:4b:b3:b6:58:ee:de:cf:82:15:34:75:15:
2e:d5:4c:87:5e:14:f3:76:28:f0:1f:bb:60:c2:a0:ac:33:d5:
17:28:b6:ec:d3:22:a5:13:e1:db:47:9c:ed:f0:c6:a8:69:68:
0c:1d:4a:81:35:c5:1a:94:13:00:6a:8d:f2:24:6b:f5:fe:87:
21:c9:ff:4d:2e:21:a3:f1:15:d6:eb:16:64:4d:d6:4a:f0:39:
d5:23:f7:75:56:14:24:3b:9f:29:fa:e5:ed:cc:68:a0:93:b8:
9e:47:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 21:21:07 2024 by rpki-client on console-ams.rpki-client.org