Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTUoIF5OBqxjgxf2AQiABrCMTQI.cer
File: GTUoIF5OBqxjgxf2AQiABrCMTQI.cer (raw, json)
Hash identifier: 2NZlGzr+D1aIND0se3UqHNN6U9V87Gcs2H884b8rAN4=
Subject key identifier: 19:35:28:20:5E:4E:06:AC:63:83:17:F6:01:08:80:06:B0:8C:4D:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E876
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0DE8/6DE951229D1C11ED866D7F25C4F9AE02/GTUoIF5OBqxjgxf2AQiABrCMTQI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0DE8/6DE951229D1C11ED866D7F25C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Apr 2024 00:40:45 +0000
Certificate not after: Thu 01 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 203.26.236.0/24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125046 (0x1e876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 00:40:45 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=A91B0DE8/serialNumber=193528205E4E06AC638317F601088006B08C4D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:e3:af:50:df:a5:8b:6e:6e:b9:f1:32:58:
91:b8:c1:1f:1d:7b:d1:3f:05:25:88:b1:17:b0:3d:
54:1e:3f:f6:34:cc:ac:72:ab:c7:b7:86:35:7d:e7:
10:ba:2d:8d:9b:fd:e8:16:d7:42:67:f1:f5:29:37:
1e:89:ca:c4:c5:1b:31:6e:69:e1:88:e0:68:f1:88:
e4:6d:cb:a2:57:83:d3:84:e4:a1:d3:fb:e2:62:4a:
16:7e:75:69:3d:8c:d8:53:04:09:17:ed:5d:76:90:
4a:5f:e4:fe:e1:8d:25:7e:4e:8f:ba:07:b4:90:4d:
ca:e4:dd:97:0d:91:fc:35:b9:f0:1c:c6:e5:0c:c7:
29:87:73:c1:b7:62:c5:1d:31:b2:0b:17:c7:49:ec:
21:cb:a0:69:4b:87:12:d9:50:af:be:58:1e:55:e3:
76:4e:60:16:55:30:11:66:c4:44:7b:79:63:e5:f1:
d4:12:a1:42:47:96:46:dc:8e:0e:16:60:7d:3d:bc:
ed:31:ca:0b:1f:99:82:0d:07:45:37:e6:59:07:8b:
04:3c:4c:76:96:e6:0d:11:0b:e3:32:33:88:bf:f7:
e9:10:3d:d0:73:a6:c6:c7:a3:f7:9b:45:22:b2:c1:
3c:ca:9e:58:43:36:a7:ce:90:12:c6:d1:da:8b:d0:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:28:20:5E:4E:06:AC:63:83:17:F6:01:08:80:06:B0:8C:4D:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0DE8/6DE951229D1C11ED866D7F25C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0DE8/6DE951229D1C11ED866D7F25C4F9AE02/GTUoIF5OBqxjgxf2AQiABrCMTQI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.26.236.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8f:18:63:61:a6:3a:e2:e7:49:cb:f7:8d:b1:c1:46:99:c7:
1a:18:49:22:a2:69:1f:e0:a7:7e:0f:a7:88:b1:49:fc:1f:68:
0d:91:9f:b6:03:2c:14:08:bc:83:4b:6f:57:4a:e9:bc:a7:19:
35:88:f5:92:03:29:bb:d2:75:d6:08:a1:d8:f4:88:10:76:a5:
55:27:0d:68:29:d6:00:bb:ef:a4:f8:40:0f:c5:b5:08:f4:d4:
24:bd:78:11:aa:f3:8e:d7:27:7a:97:1c:ba:e2:5b:00:49:3b:
67:54:e8:30:49:a8:a7:86:0e:f9:5f:df:7d:4d:ce:c2:d2:b4:
b7:64:6b:fb:d1:bb:36:27:93:c1:ec:d9:e8:91:7d:ba:62:cd:
3e:ec:32:ff:b3:0b:b0:94:39:b9:57:fe:3f:4d:1c:2b:02:42:
3d:ec:ae:59:78:1f:9b:bf:d2:5a:c2:39:ff:83:31:e6:6f:44:
7e:6d:17:29:19:5f:e3:aa:ab:4e:20:24:f8:9b:a9:79:58:c7:
28:8e:06:ed:cd:15:85:36:46:48:1b:45:d1:f8:a6:ed:c5:17:
e3:0a:9a:a4:ac:bd:e9:58:4c:ee:96:0a:2a:5d:a1:e3:e1:09:
c0:52:cf:b2:53:3f:d3:93:d8:ae:da:9a:5b:bf:3c:72:b4:80:
87:d3:dc:95
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAeh2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQwMjAwNDA0NVoXDTI0MDgwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjBERTgxMTAvBgNVBAUTKDE5MzUyODIwNUU0RTA2QUM2MzgzMTdG
NjAxMDg4MDA2QjA4QzREMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6zOOvUN+li25uufEyWJG4wR8de9E/BSWIsRewPVQeP/Y0zKxyq8e3hjV95xC6
LY2b/egW10Jn8fUpNx6JysTFGzFuaeGI4GjxiORty6JXg9OE5KHT++JiShZ+dWk9
jNhTBAkX7V12kEpf5P7hjSV+To+6B7SQTcrk3ZcNkfw1ufAcxuUMxymHc8G3YsUd
MbILF8dJ7CHLoGlLhxLZUK++WB5V43ZOYBZVMBFmxER7eWPl8dQSoUJHlkbcjg4W
YH09vO0xygsfmYINB0U35lkHiwQ8THaW5g0RC+MyM4i/9+kQPdBzpsbHo/ebRSKy
wTzKnlhDNqfOkBLG0dqL0J93AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUGTUoIF5O
Bqxjgxf2AQiABrCMTQIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwREU4LzZERTk1MTIyOUQxQzExRUQ4NjZEN0YyNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMERFOC82REU5NTEyMjlEMUMxMUVEODY2RDdGMjVDNEY5QUUwMi9HVFVvSUY1
T0JxeGpneGYyQVFpQUJyQ01UUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADLGuwwDQYJKoZIhvcNAQELBQADggEBAGOPGGNhpjri50nL942x
wUaZxxoYSSKiaR/gp34Pp4ixSfwfaA2Rn7YDLBQIvINLb1dK6bynGTWI9ZIDKbvS
ddYIodj0iBB2pVUnDWgp1gC776T4QA/FtQj01CS9eBGq847XJ3qXHLriWwBJO2dU
6DBJqKeGDvlf331NzsLStLdka/vRuzYnk8Hs2eiRfbpizT7sMv+zC7CUOblX/j9N
HCsCQj3srll4H5u/0lrCOf+DMeZvRH5tFykZX+Oqq04gJPibqXlYxyiOBu3NFYU2
RkgbRdH4pu3FF+MKmqSsvelYTO6WCipdoePhCcBSz7JTP9OT2K7amlu/PHK0gIfT
3JU=
-----END CERTIFICATE-----
Generated at Tue Apr 23 21:00:43 2024 by rpki-client on console-fra.rpki-client.org