Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CH1dxie2Pja_nC99Bn6uMbSMeHg.cer
File: CH1dxie2Pja_nC99Bn6uMbSMeHg.cer (raw, json)
Hash identifier: 0Uoqt7eo2QIK2WAZyZogGhI5ZXLuHia2X7GKDjXygQw=
Subject key identifier: 08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BD05
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Sep 2023 16:08:30 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 45.123.220.0/22
IP: 103.192.76.0/22
IP: 2404:3780::/32
Validation: Failed, certificate revoked on Tue 26 Mar 2024 18:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113925 (0x1bd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 12 16:08:30 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91AC75F/serialNumber=087D5DC627B63E36BF9C2F7D067EAE31B48C7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:4d:0a:f7:5d:16:c2:c8:ed:a3:77:c7:ca:
ee:c6:78:48:b5:90:8b:03:e4:d4:8d:a4:78:4c:73:
45:bf:7e:46:7a:0f:44:de:26:dc:67:0d:49:b4:3b:
b4:a0:52:97:64:fb:42:57:78:a8:dc:e4:f6:e4:9d:
1c:84:32:49:9a:1b:6f:08:41:4d:ed:3e:97:a7:41:
71:74:82:ad:8c:a8:a7:c3:b4:d6:6d:81:6b:5c:c9:
81:b5:a1:ae:69:e5:ba:35:8b:b9:e4:51:cb:1b:32:
e0:46:05:ab:73:59:dd:4b:fa:6f:8b:3c:d4:e6:6d:
27:87:39:44:48:c6:b0:e2:02:48:4b:bb:65:f4:df:
d1:09:67:a0:f4:29:b8:23:69:03:9c:69:e3:77:fe:
99:aa:0c:7f:21:ae:35:fb:6f:0b:64:e3:b4:13:a8:
08:83:66:35:fb:5d:7c:1f:d5:a3:df:96:52:e5:16:
6c:0e:e5:54:21:41:fe:f0:09:f1:e0:48:93:62:aa:
1e:97:2a:c8:b8:b8:40:43:36:e1:a3:8c:ad:d1:d8:
0f:ae:e6:67:e9:5a:19:7e:92:b6:f2:fc:75:02:9a:
65:aa:3a:b2:d8:b3:e6:4c:53:51:53:f3:8b:10:24:
57:5f:70:92:c4:31:ea:c6:54:02:81:ed:4e:af:7d:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.220.0/22
103.192.76.0/22
IPv6:
2404:3780::/32
Signature Algorithm: sha256WithRSAEncryption
73:69:f8:62:3f:b3:76:9d:44:00:52:87:96:f3:5d:65:12:59:
2e:9a:f9:d6:00:67:3d:fc:e2:a3:71:f8:6a:5d:a8:88:42:59:
fd:0a:9f:b9:7e:a6:29:57:df:a3:df:f5:50:41:03:71:11:16:
55:75:d1:c3:e5:bb:df:76:43:aa:06:19:fb:47:6f:bd:71:52:
89:cb:a4:d3:75:1f:d0:e4:8f:36:f9:cb:05:60:53:04:ae:14:
da:31:08:c2:12:db:3f:05:9d:6d:8e:7e:6b:a4:86:87:81:ef:
05:7e:f2:db:14:18:26:9e:c9:99:15:79:e7:c2:83:f6:c4:5e:
ac:d4:6f:8f:7a:c9:d2:9a:0f:78:f6:e7:05:42:ab:69:a3:16:
a5:62:e6:0b:91:8a:c8:54:d3:66:c4:10:29:4a:10:ec:cb:f3:
fe:16:22:b8:1e:73:8c:d2:3b:78:9f:1e:60:20:83:40:ed:63:
ec:67:2b:33:2d:5d:69:db:fd:41:65:1f:40:d7:4f:1b:e1:8d:
eb:3b:39:f5:f3:90:f3:3e:12:03:9b:03:4c:6f:f1:56:db:07:
6e:16:91:a0:be:05:62:33:c5:09:8d:eb:e2:78:1c:ff:f2:9a:
ca:b3:06:ca:1e:ba:b3:83:da:34:f5:37:48:14:6d:8b:ff:b5:
13:e1:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org