Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
File: ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer (raw, json)
Hash identifier: FKNNCzw4rJvGaxKOGBOI3k6HepUrwq2hBt1SCSc+eMc=
Subject key identifier: 02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C1DE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Oct 2023 01:00:15 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 9663
AS: 151188
IP: 103.224.92.0/24
IP: 103.244.163.0/24
IP: 2001:df2:45c0::/47
Validation: Failed, certificate revoked on Sun 08 Oct 2023 22:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115166 (0x1c1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 01:00:15 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:4a:9e:07:dc:40:ff:3e:f9:28:27:71:ea:
42:44:95:19:68:9e:fb:f4:e7:f1:ab:cf:d1:ac:e3:
f2:d1:3f:87:d7:96:1b:be:b1:8e:d1:f6:f2:39:eb:
9e:e4:24:9b:63:df:e7:10:a4:51:11:21:68:04:b8:
56:70:9e:7a:1e:cf:53:71:2b:ae:77:0f:7e:af:5f:
36:cb:74:8c:81:f5:2f:fa:d7:ae:a7:8d:f6:8f:e5:
2a:57:fb:56:23:b1:b2:9f:24:95:bd:57:67:c9:e0:
37:b0:bd:51:c3:f9:d8:47:51:e0:e8:43:8c:15:ce:
05:63:5c:71:f9:41:fa:5a:29:11:59:0f:ce:d8:cb:
a9:35:cb:d3:c7:ae:07:80:6e:1c:65:cb:d3:0c:bb:
bf:f7:10:5a:bb:03:3f:6d:39:8e:d2:04:bc:39:25:
8b:fc:8c:51:c2:9c:f8:ef:25:dc:38:c5:77:91:ed:
41:f3:7f:bd:93:6c:80:81:1c:21:0b:be:c0:83:ef:
12:54:5f:6b:f6:2e:90:16:82:8d:1e:ab:ef:d9:a5:
f7:16:da:b3:56:7d:a8:55:c5:17:8a:95:c3:6a:42:
83:29:7d:ea:f9:58:e2:7b:80:29:00:87:56:f8:fd:
c9:34:10:a9:b5:8f:f1:5d:4e:e7:60:62:4f:12:02:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9663
151188
sbgp-ipAddrBlock: critical
IPv4:
103.224.92.0/24
103.244.163.0/24
IPv6:
2001:df2:45c0::/47
Signature Algorithm: sha256WithRSAEncryption
cd:54:c8:8a:72:99:4c:d4:93:1d:e9:2b:f4:87:4c:da:6a:c6:
79:b6:28:7f:49:09:85:90:2c:52:92:e9:3b:ae:e9:77:73:1e:
30:d5:f9:21:0d:fb:af:33:cc:1c:91:51:c5:a6:49:49:a9:ab:
ec:3d:75:80:9b:a1:98:eb:39:7d:af:9b:c8:f5:ac:6e:4b:a9:
6f:18:02:03:cc:45:3c:2a:c1:a9:34:b9:59:71:ff:16:28:d2:
db:96:a2:1d:7d:49:ed:f5:d3:7e:4a:2b:b1:9a:1f:67:27:10:
04:d3:2f:36:3f:bb:50:c8:17:68:4a:d9:35:85:bd:a1:ae:79:
4e:1d:bc:9f:b0:2f:c9:8c:43:74:24:05:4a:75:02:c8:d9:cb:
65:f5:2b:22:9e:13:20:58:91:a4:8f:3e:fe:01:d5:7f:32:8c:
64:19:4d:df:f9:2c:da:2c:6a:a4:05:f7:57:01:08:5a:38:3e:
72:fc:e9:50:8e:38:ac:e3:ea:76:6a:f6:7e:b2:95:60:ba:7a:
25:58:a1:30:6d:9c:c8:93:fb:3b:d7:37:bc:38:67:0a:d2:f2:
18:f7:79:4f:42:c4:cb:4f:06:bf:17:cf:f4:c4:82:2a:8d:0d:
ea:1e:f6:29:69:cf:f5:2e:40:8b:0a:6d:57:6d:67:6b:87:e0:
72:11:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org