Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer
File: BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer (raw, json)
Hash identifier: o7h2q7OFCXA3wwhSRUgjwk9OLYaoxBUTXGX+1y1+H7U=
Subject key identifier: 04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 016DE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Sep 2022 07:12:59 +0000
Certificate not after: Mon 31 Oct 2022 00:00:00 +0000
Subordinate resources: IP: 43.245.244.0/22
IP: 103.240.248.0/22
IP: 221.120.96.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93666 (0x16de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 14 07:12:59 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=A91B4778/serialNumber=043A7D14B6168F93648F4C5A5733BFCF519A71A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:36:c2:8e:e6:46:c7:3f:11:7c:93:d0:64:
91:1b:4b:0a:78:46:07:98:39:a4:52:8b:60:04:bf:
e3:a0:99:66:23:98:ac:05:3c:14:5d:3a:5d:f2:27:
98:4d:99:e4:8a:87:f3:35:93:61:d3:05:b6:05:6a:
54:aa:39:7f:38:e4:62:d4:64:57:2a:3d:c3:63:c2:
57:bc:39:6c:86:01:da:dc:de:89:b0:f1:fa:76:7d:
52:53:f0:5b:ff:83:da:c1:9b:4e:1b:47:0e:2c:a1:
06:f0:1b:f8:b4:bc:dd:73:ab:74:44:41:db:2e:d9:
6d:a1:ed:fd:9d:4a:bb:38:78:35:c1:aa:55:e0:25:
ac:33:21:07:92:7b:92:7d:1d:58:ef:a5:3b:7e:24:
cb:5d:ef:10:33:41:c5:75:62:5f:ce:0b:23:a9:78:
55:9b:28:9b:d0:87:cf:2b:79:22:05:06:74:95:1d:
b3:6e:89:51:f7:92:ad:28:c8:4e:e7:ce:7e:f5:22:
c7:e4:ff:31:00:f1:07:10:67:a2:bf:4d:33:5b:ad:
7e:a2:4c:2e:4b:f2:ee:55:91:29:e6:d5:6e:aa:9b:
d9:f7:22:96:52:54:7c:51:34:22:00:b3:59:bb:24:
f8:52:ac:45:e4:4f:db:c9:65:06:66:33:88:b9:58:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.244.0/22
103.240.248.0/22
221.120.96.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:ff:fb:04:e3:31:cb:ec:ed:ae:1a:70:cd:5d:f0:ea:07:99:
a7:99:7a:96:83:f1:19:44:e8:dc:7f:49:78:0d:59:eb:19:98:
e6:e8:f4:e2:24:f6:28:7b:b0:73:95:83:e9:13:68:43:5d:94:
25:9d:10:7d:b6:39:fa:6b:bf:79:e1:fe:23:67:ba:95:80:4e:
53:ed:52:e9:33:71:d8:73:7e:5b:08:8e:89:7f:1f:78:b7:26:
13:f6:ae:13:37:3b:97:71:43:7f:50:c9:b7:52:e9:04:28:d8:
60:1f:ba:fb:9e:56:b0:7a:1f:99:18:b7:61:9e:58:90:c7:8d:
f0:9f:98:90:b3:48:05:91:76:b0:c8:92:97:7b:20:75:f8:b5:
fa:22:a0:78:71:6a:60:f1:69:6f:84:58:4e:0d:a8:cb:c8:69:
8c:24:41:7f:45:74:38:d7:90:81:c2:e9:3d:56:fe:dd:2e:53:
0b:ec:79:10:98:45:59:4e:d7:22:f3:28:bf:9f:f8:03:c7:da:
45:f2:84:dc:59:ae:08:20:0e:25:56:00:9d:99:6c:f5:cf:d9:
1c:a9:45:bd:17:c3:76:02:9e:ed:b1:f3:39:26:c1:96:79:ce:
80:1b:c5:4c:e5:bf:7e:6c:51:89:f7:a3:a7:9a:cf:5d:eb:19:
d8:a8:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org