Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
File: CxmNO40c0q9b_OS8NtCGjWdAtJE.cer (raw, json)
Hash identifier: gIyjqa6sfDT3rz5iqDiakwXoHNkIP2vAtIhzV4aDpw8=
Subject key identifier: 0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0168B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Aug 2022 16:04:51 +0000
Certificate not after: Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources: IP: 43.255.36.0/22
IP: 103.239.28.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92343 (0x168b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 16 16:04:51 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:79:8a:8a:e1:fd:4f:12:96:ca:cc:f5:75:
c2:25:24:3a:f0:51:a9:e7:06:88:8e:d9:2b:c0:8b:
61:90:f6:81:e6:a9:d7:03:b0:a9:65:07:f1:81:ac:
eb:0a:db:8e:ba:5c:4f:f5:ab:bb:28:41:59:ec:10:
01:47:c8:db:d2:0c:7b:81:8d:a9:7a:ba:a2:6f:d3:
7a:16:f3:42:88:33:8f:44:a8:c5:63:ba:4c:78:4e:
76:27:b5:b6:b8:c6:8b:dd:f9:29:c6:77:26:22:f8:
54:be:c6:be:77:df:24:20:76:01:8e:14:14:8f:67:
eb:35:3e:be:ec:4f:9f:ec:92:5d:7f:1a:ae:db:74:
f4:32:e0:b7:1b:ba:cd:8e:6e:29:57:86:46:0d:8f:
6b:ba:67:02:24:ba:47:be:d4:ac:a1:b7:56:fd:42:
3c:ec:d5:a0:9a:b1:98:e4:97:cd:7c:c9:ac:a4:3d:
60:0e:20:a1:8c:02:62:ba:df:c8:31:08:fc:7e:d1:
70:84:0c:e3:ee:4d:08:80:5a:12:ad:88:88:03:4f:
36:5f:9e:fe:50:e8:0a:0b:35:d7:ea:05:2c:80:69:
f1:ca:b9:2c:7d:c2:87:92:ca:b4:f1:4b:c3:f1:18:
b7:87:92:aa:fc:2b:25:0c:eb:cc:25:8a:79:ea:7b:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.36.0/22
103.239.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:7a:d2:74:d9:1f:ea:fd:d6:60:ec:3a:9c:5a:ad:41:59:48:
ed:bf:f1:4f:b3:08:4c:c5:73:a3:31:e6:79:53:a8:44:02:2a:
0b:d0:c9:93:5e:7e:8e:91:a5:ec:ad:06:ec:55:4d:9c:46:b3:
f3:5c:68:0a:81:68:99:c6:21:0a:5a:a6:6b:f3:4c:fb:88:93:
85:f4:3c:6c:ec:8a:41:a6:22:08:3e:20:c4:0e:ad:ce:f4:8a:
02:a6:4e:80:a9:26:14:9c:ac:1f:66:eb:e6:51:87:06:29:55:
32:f1:26:c0:0c:26:f8:e7:d0:07:2c:55:a2:6b:df:0b:c3:b7:
e6:9e:8a:77:39:c0:6e:40:a9:75:81:14:e8:b2:ab:39:43:9e:
4e:d3:17:fe:3f:9e:ab:39:99:68:db:42:ec:35:d0:9a:06:78:
55:30:46:f7:4e:15:f9:72:74:56:18:d0:96:8e:a2:73:3d:c9:
de:b1:d6:2a:cf:40:0c:84:5e:7d:16:58:c6:30:a8:3d:fc:00:
5a:31:22:73:27:59:a5:be:19:d9:bc:8e:df:fb:9b:6a:24:0b:
23:29:93:fa:c0:3a:d3:6b:e3:7c:4b:01:f8:db:73:17:22:2d:
1d:4b:c3:50:47:21:53:79:aa:67:dd:e4:1f:56:04:af:d3:7f:
aa:52:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org