Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0WplWEQcY2GPzerPKFmcfuDVD4.cer
File: C0WplWEQcY2GPzerPKFmcfuDVD4.cer (raw, json)
Hash identifier: fP9r5zs+i/l/j0wA6OxD8qaFgzZjE3fCGphX7W2yuFw=
Subject key identifier: 0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D543
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/C0WplWEQcY2GPzerPKFmcfuDVD4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 31 Dec 2023 14:52:10 +0000
Certificate not after: Wed 01 May 2024 00:00:00 +0000
Subordinate resources: AS: 133637
IP: 2401:9940::/32
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120131 (0x1d543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 31 14:52:10 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=A9150F1C/serialNumber=0B45A9956110718D863F37AB3CA16671FB83543E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:f1:d4:81:c1:86:45:3d:0f:38:03:85:ae:
f5:9a:ff:80:f3:68:b3:53:df:92:41:6e:0c:b0:59:
d9:83:ad:86:59:57:27:db:58:eb:2e:b9:d5:ac:f8:
29:9c:aa:23:18:76:77:b0:b0:94:0e:fc:42:01:8d:
86:3a:0b:9d:00:dc:77:27:27:fb:e1:47:e2:10:bf:
7b:1d:2a:70:46:ce:15:34:67:aa:66:c9:f0:3c:b8:
3c:65:10:fd:65:33:ca:f3:d8:04:af:36:aa:f8:65:
71:a9:59:f9:96:10:cc:b6:2b:bd:3f:0c:1d:55:60:
6c:c1:3d:36:9d:36:6f:c5:8b:6a:c5:d7:d9:15:ba:
db:39:14:c0:ce:ff:ca:1a:3b:51:06:dd:28:f8:1a:
bc:99:2f:ae:aa:94:d2:c9:b3:c1:4e:c7:9e:23:66:
21:f5:67:8d:90:7e:e5:85:8a:34:9c:d3:90:2c:e3:
d2:24:ce:74:82:11:a5:17:b5:38:ad:2c:9e:0e:65:
32:d5:bc:43:6d:c1:b0:f7:b8:3c:d4:a6:6c:59:10:
2f:0b:92:e2:6c:d6:12:04:07:36:14:68:d2:92:d9:
9a:08:d1:49:54:24:0c:f7:c7:bc:26:8a:50:c6:34:
10:a5:15:95:36:41:59:0c:35:1b:6f:56:b6:8f:4e:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/C0WplWEQcY2GPzerPKFmcfuDVD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133637
sbgp-ipAddrBlock: critical
IPv6:
2401:9940::/32
Signature Algorithm: sha256WithRSAEncryption
5d:f5:64:63:ae:83:65:d9:96:5d:49:38:8c:d3:37:56:dc:06:
79:cc:4d:34:ba:e5:01:e9:8a:33:1b:d9:cf:53:cb:d4:6c:00:
d5:24:2d:93:19:b1:75:55:d6:c3:95:f9:d8:54:02:a8:1f:93:
83:b4:e0:86:fa:b2:9e:cb:d2:23:3b:de:27:d9:ec:b3:95:47:
49:20:2a:1e:30:17:b0:8d:38:f7:f5:97:d9:62:cf:ee:11:8c:
88:18:d8:fa:f3:a9:b7:ee:42:28:38:4b:9a:87:17:06:b3:ef:
86:71:f8:4d:fb:cd:14:18:4e:b7:b3:83:9b:2c:9d:86:60:a4:
46:ef:bf:48:57:fe:8a:b1:ac:6c:ef:20:76:84:05:0e:b9:23:
58:a6:a7:69:2e:57:de:35:41:31:31:57:a7:f2:ba:40:e1:ec:
21:1c:ab:94:25:c9:b4:f2:1b:90:11:6e:17:c2:a1:b0:69:dc:
14:44:14:44:01:e0:83:f3:6b:39:58:47:13:3b:08:3a:23:27:
e5:fe:f4:24:70:38:9b:15:e8:2b:cd:fc:63:66:1d:51:2c:3d:
f9:4c:a5:be:29:08:c8:7f:44:ad:66:5b:e8:aa:60:5c:06:4f:
c9:b7:03:2c:ee:f6:a3:cc:a1:15:0c:56:84:a8:7f:dd:c0:72:
68:f5:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 20:33:38 2024 by rpki-client on console-fra.rpki-client.org