Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_gK57t0-gVLi5wjTZ0SB2Higl8.cer
File: K_gK57t0-gVLi5wjTZ0SB2Higl8.cer (raw, json)
Hash identifier: Q9n0lDGdFvQqU0mOorSGDcL0cvAVQuZ9k9CPbWRccXA=
Subject key identifier: 2B:F8:0A:E7:BB:74:FA:05:4B:8B:9C:23:4D:9D:12:07:61:E2:82:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B288
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Jul 2023 17:37:43 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 27.110.64.0/21
Validation: Failed, certificate revoked on Mon 05 Feb 2024 17:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111240 (0x1b288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 27 17:37:43 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9186755/serialNumber=2BF80AE7BB74FA054B8B9C234D9D120761E2825F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:75:24:0b:5b:54:52:8d:83:a3:52:39:73:
c2:f8:69:e4:6e:a5:3d:51:e8:0e:56:bc:e9:c8:e1:
3f:2a:07:eb:0d:fb:23:96:ff:62:a3:e4:59:b5:9e:
c6:85:74:f7:66:ed:34:da:72:ab:6a:76:60:f3:27:
91:8f:41:62:f9:cf:5c:f8:6e:54:90:72:56:78:60:
1f:30:71:be:54:51:5c:6b:07:07:3c:66:c9:a4:4d:
fa:3f:4c:87:a8:a5:d1:eb:64:a3:df:55:be:f6:58:
b1:23:12:c9:56:7e:ec:ba:e2:9b:3c:51:c0:81:78:
43:1d:96:e4:b6:74:35:9e:87:b9:a4:a3:59:9b:1e:
16:36:d2:53:d7:b9:d3:8d:30:95:57:ad:7b:50:7f:
c7:ef:e8:1a:72:7e:31:c2:be:7b:6c:2a:9a:cb:8f:
e1:3c:f3:ef:80:d6:16:85:d7:be:ad:6a:a5:c5:cd:
d7:f9:e4:a8:e0:51:03:cf:42:82:23:ca:d4:1a:46:
14:ff:7c:00:e4:02:64:e6:59:20:6d:14:53:6f:43:
87:38:30:14:fc:20:b8:92:c3:29:68:b4:eb:04:ce:
98:f5:24:5c:c4:3e:d3:18:4c:2e:b8:2d:13:c4:62:
b4:ba:0f:33:24:68:3e:19:24:c5:29:ea:a6:87:51:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:0A:E7:BB:74:FA:05:4B:8B:9C:23:4D:9D:12:07:61:E2:82:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186755/3B578B7E34DA11E98A0B6B59C4F9AE02/K_gK57t0-gVLi5wjTZ0SB2Higl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.64.0/21
Signature Algorithm: sha256WithRSAEncryption
72:5c:4b:14:4d:63:12:bc:ae:2c:27:14:43:90:b4:3e:d2:9a:
42:43:f7:48:02:7f:a6:4b:4f:26:30:2e:c5:be:30:c7:b5:13:
fa:15:c0:2e:c7:31:e9:db:84:d3:49:ad:27:59:9b:a5:be:28:
16:57:7a:af:ce:cc:a7:e4:27:bd:60:bf:ca:84:9f:e4:ea:ce:
4c:f8:85:b9:17:ad:51:4c:0c:a9:c2:ad:99:c1:a9:2a:f8:1f:
ea:27:97:11:e6:d3:2e:e9:2c:d9:60:ed:18:0c:1c:9f:ac:f5:
48:16:a0:f9:b7:65:53:c3:4b:2a:6f:fa:13:8e:c1:5b:58:b4:
74:be:be:fd:19:57:ae:5c:ac:9f:6d:b7:c8:03:c2:59:1c:b6:
fb:1b:5b:37:ce:b0:05:cf:5b:6b:a6:35:18:c3:bf:ad:8a:a9:
ec:fb:8a:51:9b:9b:42:4a:a9:45:f1:57:63:00:da:a7:66:c9:
b4:5e:a4:ea:37:ce:b5:72:f3:45:19:77:58:48:77:1e:7d:01:
05:85:08:fd:66:c6:61:9a:fa:91:80:a3:8b:9e:6d:8c:b9:74:
27:a7:1c:79:21:9c:bc:8e:1e:4c:d6:29:6b:59:2b:69:a3:66:
50:ec:a7:f8:b5:cd:e1:f4:cc:24:3f:0d:9e:87:7d:f5:a5:32:
a3:41:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 01:26:43 2024 by rpki-client on console-ams.rpki-client.org