Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIqCj-qTb8d05F3xFLTgcCUSTbQ.cer
File: JIqCj-qTb8d05F3xFLTgcCUSTbQ.cer (raw, json)
Hash identifier: ZTha58VC7jFOFp/K9tkii/HdQ1d8Yz+sMS7owNjmuFM=
Subject key identifier: 24:8A:82:8F:EA:93:6F:C7:74:E4:5D:F1:14:B4:E0:70:25:12:4D:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F204
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/JIqCj-qTb8d05F3xFLTgcCUSTbQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 May 2024 09:10:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 135658
IP: 103.155.58.0/23
IP: 2001:df3:ccc0::/48
Validation: Failed, certificate revoked on Wed 15 May 2024 12:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127492 (0x1f204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 15 09:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91BC3F1/serialNumber=248A828FEA936FC774E45DF114B4E07025124DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:82:10:92:83:25:90:80:29:6b:c9:31:4b:
45:0a:8b:49:99:6c:3e:9a:ea:d7:99:eb:c0:f4:fe:
5e:d5:80:2d:4e:58:99:ed:4e:a6:0e:c1:60:9a:e6:
f8:12:d2:f6:51:eb:a1:02:74:5e:ba:a1:c4:92:a8:
41:4f:46:8f:68:e8:b2:88:d2:f9:81:9f:e6:6b:ca:
3e:5d:57:a4:22:76:01:dd:46:0d:56:c5:89:08:3d:
88:bc:b6:65:d5:a7:e5:ec:53:8f:3b:3e:fa:e6:c1:
f3:e7:e7:2d:0e:e8:a6:54:58:0e:49:2e:33:d3:c4:
07:c1:10:67:aa:da:7a:62:d0:c0:4f:5f:89:44:6b:
5b:9a:ad:e0:5b:4a:24:2f:73:08:b9:28:8e:15:b2:
12:a5:10:43:fd:5f:ab:a8:6a:6c:b4:8d:e5:68:5e:
c2:1b:31:65:b9:43:8e:6f:dd:2a:1b:14:33:2d:99:
7c:f3:3b:2b:7b:98:e5:49:98:ac:a0:e8:43:50:79:
9b:c7:7f:09:c6:ea:dd:f4:28:68:d2:12:5a:6e:dc:
3a:b8:f6:4b:54:4c:53:1f:e9:56:6a:60:04:4b:b0:
aa:ca:5b:86:1a:b0:24:37:b1:b6:c4:cc:8a:e6:65:
0b:e8:e0:ce:f0:76:a7:d8:64:3e:6a:79:18:ef:a8:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:82:8F:EA:93:6F:C7:74:E4:5D:F1:14:B4:E0:70:25:12:4D:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/JIqCj-qTb8d05F3xFLTgcCUSTbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135658
sbgp-ipAddrBlock: critical
IPv4:
103.155.58.0/23
IPv6:
2001:df3:ccc0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a5:ee:7e:e1:aa:50:86:33:84:8f:c4:2c:76:74:55:79:94:
c1:c4:44:d4:7b:4c:f6:b9:b9:8f:dd:90:32:78:08:b9:76:e5:
d5:c5:a3:85:17:f3:b9:f1:6f:09:31:3d:0b:86:97:61:fa:8c:
b8:36:32:b1:01:ab:f6:ad:6c:1a:59:8d:d5:5d:f8:c8:ce:85:
a4:1d:3a:67:55:84:2e:5f:20:48:fa:0e:e5:2f:62:70:97:93:
91:15:b0:2f:30:e1:a7:91:5d:95:07:0a:0b:3f:df:19:d3:6d:
45:5c:8d:22:a9:35:cc:42:88:93:c7:4c:70:d8:56:b5:04:90:
d2:ce:6a:ff:9d:01:24:4b:d3:a4:2d:cf:2b:32:5c:1d:f7:06:
2b:16:24:4f:f7:02:af:6b:92:23:ba:57:f7:f8:85:17:c7:af:
50:67:63:0f:57:5c:be:2a:58:ac:72:a3:05:1a:a8:8c:79:b3:
09:2f:de:bd:ca:7d:2f:71:11:4e:9f:70:09:5c:9e:4d:31:96:
24:00:68:f7:3d:57:87:47:fd:f9:49:3e:ee:08:dd:f0:55:2f:
31:63:36:9f:32:77:d6:1e:e3:df:c1:fa:b0:2a:8c:c9:77:e8:
2f:82:a3:4d:11:fd:bf:50:71:09:93:f3:87:82:dc:b7:25:07:
cf:b2:ac:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:42 2024 by rpki-client on console-ams.rpki-client.org