Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
File: 8d-F-c-zXLMQww1ZzWAGNprGkBE.cer (raw, json)
Hash identifier: lgkvZXzLMwGHxNF5f2XBJ61zWwWM11gUbFvJYDO24fU=
Subject key identifier: F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C98B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 16:03:47 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 55880
IP: 45.113.232.0/22
IP: 103.6.252.0/22
IP: 115.146.80.0/20
IP: 2407:ae00::/32
Validation: Failed, certificate revoked on Fri 01 Dec 2023 18:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117131 (0x1c98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 7 16:03:47 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:0b:78:63:14:93:41:17:b4:20:86:eb:51:
84:ff:af:d0:5d:4a:99:bf:4b:c8:16:f9:27:66:25:
40:d3:2d:f1:fd:34:73:05:3e:1d:ac:2e:56:5e:76:
f2:bd:49:a6:38:65:dc:63:06:4b:20:28:9c:5b:3c:
5a:35:94:e1:c4:aa:93:7c:39:0e:35:a9:ba:e7:4f:
37:26:dd:ce:a8:9f:e7:c5:22:46:48:37:78:ec:86:
e5:2d:0f:9d:2c:ac:49:fb:7c:43:de:73:9e:d6:34:
d8:6f:39:17:d5:6f:58:d6:af:92:6a:2e:ea:16:49:
73:11:56:a9:15:dd:ce:c1:59:32:a4:49:cd:e4:fa:
62:a9:09:2b:2c:46:1e:c4:20:6a:99:6c:ae:d5:5b:
19:65:2e:7a:89:73:1b:67:62:9f:7a:3c:15:6e:14:
47:17:05:39:25:0f:c7:05:c7:84:61:88:27:93:40:
78:fd:33:87:0c:54:4b:ef:f9:20:59:27:97:54:ef:
e7:ae:0e:f4:ed:be:f5:48:fa:62:14:ef:a0:38:2c:
38:3a:71:93:f5:cc:29:25:e9:08:47:5b:fc:f0:b3:
9f:e8:42:db:6a:92:23:cd:4d:d1:be:23:a0:0a:94:
0a:f6:58:64:6a:4c:32:62:1e:f7:a8:2c:9c:1d:74:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55880
sbgp-ipAddrBlock: critical
IPv4:
45.113.232.0/22
103.6.252.0/22
115.146.80.0/20
IPv6:
2407:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
59:40:6d:56:6b:83:3b:79:98:2d:8d:8d:7d:1b:b4:99:62:d2:
a8:bd:44:11:54:cb:69:d8:9c:70:50:ce:2c:97:0f:dc:3b:0a:
ab:49:5a:1f:89:34:5c:e3:8a:79:36:f2:e5:96:c3:bf:c9:aa:
b5:b7:69:5f:65:46:ec:2d:4b:1d:ed:cf:7b:68:f8:68:6d:0b:
3b:54:75:4b:29:c4:1d:4d:44:bf:c9:8d:59:62:09:86:b9:9f:
da:2a:ed:a3:24:44:e8:7a:56:9e:ed:71:04:a2:92:08:bd:16:
83:b7:27:43:f1:53:ca:03:74:fa:35:3f:0f:33:e6:af:81:e3:
ff:30:47:e4:7b:6d:cd:12:ca:26:de:26:3f:34:42:e5:05:52:
69:d4:0f:a5:5b:97:8d:19:57:c6:c3:d9:66:95:29:08:39:4b:
31:e7:18:bc:f0:30:c7:95:4e:2f:cc:b0:9f:a2:a5:19:c4:8a:
60:b1:9e:36:36:ff:2a:ef:ec:f5:15:62:be:aa:b7:12:de:37:
25:50:d1:54:82:44:92:06:71:05:99:d9:65:e0:48:85:d1:33:
ef:47:02:87:4a:a2:c2:2f:cc:07:ca:84:63:ad:55:c8:68:59:
9d:37:62:59:9d:2c:f7:1f:ba:2a:fe:a9:fc:50:19:ba:c2:3a:
11:0d:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org