Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T6QbxWMdXWDqNoKbVbekaugFNo.cer
File: 8T6QbxWMdXWDqNoKbVbekaugFNo.cer (raw, json)
Hash identifier: zVIfuEBmlI0wRxduAjgr3hbgIdipqzAnVx3HnGkqVbI=
Subject key identifier: F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018AE9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Feb 2023 02:07:06 +0000
Certificate not after: Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources: AS: 18395
AS: 23672
AS: 23866
AS: 23928
IP: 203.78.165.0/24
IP: 2407:d400::/32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 01:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101097 (0x18ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 9 02:07:06 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=A91CA5DD/serialNumber=F13E906F158C757583A8DA0A6D56DE91ABA014DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:40:5e:ba:f1:f7:53:29:e2:78:1f:06:37:
6b:26:a2:4a:93:f7:90:17:e7:04:7a:52:79:72:3e:
be:f8:98:9d:89:be:01:34:96:28:0b:a7:18:36:64:
32:37:5a:b0:01:fb:fd:63:05:4b:44:d1:1a:7b:ec:
0d:2f:e7:7c:0a:5c:61:69:74:75:f7:8e:a1:be:33:
01:b1:bb:c7:d7:eb:b0:a3:f7:26:c1:9e:d9:bb:9f:
4f:8d:5b:e1:fb:4d:65:f8:36:33:20:eb:a8:47:24:
60:d1:ed:31:f6:8a:e4:1b:c0:de:fe:48:92:c7:fe:
84:7e:4c:20:03:bf:fb:59:30:c8:fa:bd:01:9a:03:
4f:e5:61:c5:ce:85:05:14:6c:4d:fb:ee:3a:32:b7:
14:c3:e5:4e:cb:f5:b2:ab:5a:fa:11:c0:58:a3:f6:
05:5e:41:52:68:95:10:0f:c1:a6:9d:a6:55:84:33:
bd:9c:1a:79:56:b7:96:d7:9a:62:d9:ee:78:3b:37:
16:f6:40:a5:6e:16:3d:ec:4c:72:95:70:df:e4:7b:
fe:ca:ae:61:fa:ef:8d:19:88:df:49:f3:45:bf:12:
8e:cc:ea:41:45:12:ae:b3:46:67:8d:cb:d6:5f:66:
32:b1:ff:af:ea:1b:03:2e:13:3f:6a:cd:ca:97:09:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18395
23672
23866
23928
sbgp-ipAddrBlock: critical
IPv4:
203.78.165.0/24
IPv6:
2407:d400::/32
Signature Algorithm: sha256WithRSAEncryption
23:a5:b4:ed:f1:fe:31:ee:27:07:07:14:7f:22:df:05:41:27:
de:d0:86:fb:ad:c1:c6:b3:3e:c6:9e:18:37:02:7f:16:d0:5a:
26:91:43:63:96:35:84:fe:b7:ee:a6:4e:d9:0e:89:87:bf:51:
6c:03:06:3f:70:ae:b9:a0:06:0b:ce:66:ac:c2:54:a0:bf:09:
98:ad:c9:8d:3f:f0:5d:95:66:ca:75:77:c8:a0:e2:53:66:47:
20:9d:0d:45:ef:b2:67:a4:dd:86:63:04:3a:8c:2f:b3:a8:62:
d8:15:8a:96:ec:37:0d:49:aa:c8:13:d4:b4:fe:21:cc:0c:84:
46:92:24:63:2f:3e:0d:71:0b:ba:12:57:2d:0f:eb:6f:22:93:
56:22:c3:36:cf:f3:18:08:bc:3f:d6:48:14:6c:f8:64:c5:1a:
70:83:df:67:3f:c3:7a:76:19:cc:2e:db:04:43:05:94:55:aa:
b9:e4:d7:bb:ff:26:e3:a9:f9:f0:51:64:b0:80:fd:5b:a7:da:
e9:21:72:e5:f6:b6:b4:4d:7a:83:3c:79:64:83:a7:91:83:12:
51:e1:e9:03:f6:79:aa:ee:45:0c:d6:b8:c5:0a:72:86:85:a1:
17:96:06:9a:bd:4a:9d:7d:bd:88:cb:39:ff:8f:a5:32:7c:1f:
76:20:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 04:14:19 2024 by rpki-client on console-fra.rpki-client.org