Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1B9x6rfjQke9Xe68fANg0eI91A.cer
File: J1B9x6rfjQke9Xe68fANg0eI91A.cer (raw, json)
Hash identifier: mfQ+eb8cH0KYlQFGq6innWlufRWACvBJGBXAhzWizj0=
Subject key identifier: 27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C7DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Nov 2023 03:27:49 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 103.101.28.0/22
Validation: Failed, certificate revoked on Wed 20 Mar 2024 00:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116700 (0x1c7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 03:27:49 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91F3B59/serialNumber=27507DC7AADF8D091EF577BAF1F00D834788F750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:44:ee:0e:c7:50:5c:0b:a2:72:1c:a7:19:
45:ec:37:1e:55:6a:de:18:2a:e2:05:65:d8:46:f0:
83:14:59:b5:5e:a3:4c:6d:7c:48:57:08:98:6c:26:
24:83:a1:a2:6f:25:9a:6b:99:60:33:6a:b1:02:ea:
4e:dc:42:8f:66:d5:a9:4d:4a:36:50:c2:c3:df:99:
f4:65:55:c1:88:b9:4c:51:52:d8:0d:15:c3:97:4f:
2f:e8:3c:a9:37:d2:71:d1:57:bb:a2:bb:03:aa:2f:
74:e2:5f:dd:45:ff:79:03:2d:3b:e4:ea:e4:0d:14:
1d:ad:21:32:0a:ca:8a:bc:28:b9:16:56:16:a4:11:
fa:13:47:82:48:f0:a9:fa:15:12:d1:4f:77:94:b2:
38:b3:41:0a:09:65:2e:7f:9c:e8:32:b7:f7:9e:a6:
89:46:31:62:da:cb:8c:a6:0d:72:78:03:dd:8e:fa:
f5:2c:39:a9:00:b1:8a:b0:dd:67:a1:06:3d:e1:f0:
91:0f:a5:f5:a1:d5:65:10:e3:2d:99:29:ab:65:c7:
06:0a:ea:9a:3a:a3:63:44:6b:8e:90:ba:eb:f1:b8:
05:7f:2b:dc:64:a7:89:88:ef:d3:3f:8d:35:5a:ba:
91:a4:8d:1d:9b:2a:51:47:3f:f7:b3:45:47:bc:60:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:05:9c:a6:33:79:d4:2b:85:f1:61:6e:ae:e3:f0:2d:1f:c0:
23:76:46:86:09:b8:5c:6d:5e:f0:a1:ff:77:a2:e3:b8:33:cc:
14:d2:f5:47:87:38:08:67:bf:e6:2a:57:21:93:76:57:b4:cf:
64:a7:0a:88:90:22:a0:fd:15:50:57:cc:8c:68:2f:d3:db:2f:
fc:15:04:32:f9:60:7e:34:44:d4:8f:72:cf:55:97:77:f8:e8:
58:87:83:ba:39:b7:64:b0:dd:a3:83:7b:13:cb:66:5f:1d:0c:
b2:84:61:5d:78:45:f8:b5:90:5c:3f:27:7d:34:d2:de:2e:ea:
d5:76:d4:12:f7:ae:5a:59:12:24:fc:85:5f:3d:65:05:af:1c:
63:a3:3c:63:9e:eb:70:ce:a1:38:6a:f3:da:d1:83:bb:07:fa:
0f:44:4c:32:ad:46:ae:03:e6:f1:c5:6a:1f:79:91:63:52:f5:
4e:6c:eb:f2:61:6a:e8:dd:6e:ea:01:ef:55:cb:46:6e:87:a8:
e3:ad:26:91:20:9a:d6:68:80:48:fb:8c:19:25:f3:79:97:7c:
1e:e9:8c:a3:ab:6e:13:57:a6:47:63:45:ff:9a:01:d9:de:f8:
1f:ba:43:04:99:ce:fe:b6:31:b6:28:e8:9e:9f:c8:05:19:53:
5f:20:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 03:44:25 2024 by rpki-client on console-fra.rpki-client.org