Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
File: IuAdQ344bTh5KdcsUSIo01ARz4w.cer (raw, json)
Hash identifier: onqNyAvHSni4jEQBih5Q4CjRapaFhYCzDmZ67aF0hdo=
Subject key identifier: 22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C946
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Nov 2023 21:13:50 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 24245
IP: 111.221.56.0/22
IP: 202.58.136.0/21
IP: 2406:3800::/32
Validation: Failed, certificate revoked on Mon 25 Mar 2024 22:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117062 (0x1c946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 21:13:50 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:8b:a5:66:b5:b1:72:00:ec:44:a6:a1:fc:
29:9b:22:5e:0f:be:9b:e7:f2:f4:71:8e:b9:d7:1a:
cf:6b:88:27:e5:96:74:73:3d:4f:43:6f:e1:84:1c:
ca:9b:04:8c:7d:24:1d:4e:e6:b6:d8:12:92:8a:7b:
7c:2e:b7:9a:48:7d:8a:37:1c:88:98:cd:81:46:4e:
2e:d2:00:93:cf:8a:f0:d9:18:5a:0c:45:dd:7a:02:
d7:5f:e4:d6:b1:e7:93:6b:de:b1:cf:1a:d7:19:1e:
c4:55:36:e7:48:eb:d7:2b:cc:d5:3a:c7:f3:7a:de:
cf:e4:07:e5:a1:d1:90:f5:6f:57:9e:a5:8e:da:55:
d1:39:32:ff:1e:42:f4:ad:e7:54:12:7b:9d:dd:91:
20:a2:d6:41:0e:b9:68:aa:cc:a6:fd:fe:4f:21:93:
3e:b5:ba:e0:e5:94:2e:f7:29:4e:2e:87:fc:7f:64:
ff:b2:76:24:a9:31:df:29:3a:79:81:40:e8:18:b5:
7e:a6:04:ac:b7:63:53:50:f1:84:53:a2:40:75:b8:
00:3f:d1:90:70:33:31:e4:c1:42:df:27:65:b6:50:
a5:45:f5:00:2c:7e:8b:70:f1:02:06:56:fc:d2:96:
96:3f:11:73:59:41:5b:87:53:05:67:43:12:f4:8d:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24245
sbgp-ipAddrBlock: critical
IPv4:
111.221.56.0/22
202.58.136.0/21
IPv6:
2406:3800::/32
Signature Algorithm: sha256WithRSAEncryption
ac:d5:09:9f:cb:55:11:8c:28:be:ef:7f:af:35:18:f1:c2:d7:
82:87:74:ed:99:7e:88:25:a1:bf:eb:d7:7e:2b:ec:ae:a6:6c:
74:35:0a:af:92:43:9b:1d:08:00:7f:02:b4:aa:ba:52:28:93:
96:98:f1:70:b4:3f:56:35:a0:33:54:a9:14:b7:46:ba:74:07:
60:12:ba:d8:9a:b4:38:93:72:8d:6d:91:01:f7:6a:aa:76:36:
87:89:dd:df:16:e7:fa:46:6b:0f:4a:5b:74:e1:9a:44:97:e4:
00:73:6c:8a:84:ea:b2:77:18:f2:35:38:3f:df:5e:fd:ea:c6:
6b:1b:b8:9d:05:0d:2c:b8:6b:92:7c:0f:25:9f:f3:58:4c:58:
b2:63:66:13:c8:49:bb:fc:fe:0a:de:b6:76:39:61:a6:36:a8:
0c:44:06:79:91:af:3a:8d:b8:3f:3d:42:72:d1:44:1f:dd:53:
2d:62:87:db:b0:f8:00:9b:59:bc:94:73:4f:82:d2:c3:c4:13:
02:70:bb:6d:0b:36:58:76:ff:49:46:f1:99:0d:17:15:95:dd:
da:1a:30:2b:93:71:18:bf:95:43:8f:43:d0:bb:84:d9:9a:48:
63:ed:d7:99:21:7e:52:78:2b:a9:83:5b:0e:3e:01:a4:0f:d6:
39:36:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:42 2024 by rpki-client on console-ams.rpki-client.org