Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
File: LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer (raw, json)
Hash identifier: 9YldePvsZaBBpuV8iXAfABxB1CxVso0GKYgnE92CzVc=
Subject key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AAE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Tue 20 Jun 2023 13:55:57 +0000
Certificate not after: Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources: AS: 148800 -- 148810
IP: 36.50.36.0/24
IP: 240a:ee00::/28
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109287 (0x1aae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 20 13:55:57 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:41:44:ec:f3:be:27:f6:65:50:33:b1:ff:
d5:03:69:71:24:66:d7:ba:13:18:04:a8:bd:38:50:
6d:67:12:99:04:68:45:ab:6e:83:0f:93:24:93:b7:
fb:58:13:23:a3:5d:41:13:f9:79:bd:26:3f:d9:86:
ca:32:81:ce:1b:bd:8e:38:8a:60:01:13:48:0f:91:
07:9d:72:8a:15:79:98:74:d8:9f:8a:07:19:3a:ff:
eb:24:b6:3d:78:3a:f5:16:d8:c4:60:45:23:ad:12:
15:87:29:af:a1:a2:f7:91:e6:56:15:24:b4:57:3f:
0e:aa:b3:11:62:bf:b1:3c:16:5c:8f:c2:50:73:ab:
f4:88:cf:dd:3e:10:f8:27:af:6d:be:81:13:a9:bc:
f4:48:b7:84:31:ee:f2:fb:57:c6:01:94:66:c5:2a:
2d:1f:06:cf:c8:ed:78:5c:6b:6c:67:d8:05:5f:42:
8a:7c:b3:45:99:0a:46:05:24:f5:10:48:7c:23:02:
21:c8:f4:78:63:5e:1b:20:be:96:b0:82:02:e6:ce:
81:75:67:86:69:fa:e7:44:43:84:d1:61:ce:e7:b0:
f1:20:4d:92:c6:aa:5d:b9:05:79:f2:0b:2a:12:36:
74:3b:9b:c4:01:01:31:e1:88:ed:d1:b1:0d:64:bf:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148800-148810
sbgp-ipAddrBlock: critical
IPv4:
36.50.36.0/24
IPv6:
240a:ee00::/28
Signature Algorithm: sha256WithRSAEncryption
d6:93:60:87:60:c4:c0:0e:25:d7:2a:40:e0:48:94:07:4d:a5:
31:37:9e:15:9a:e9:8a:a1:65:27:d3:fc:da:20:62:b5:f9:d1:
c9:b3:1a:40:56:f4:5a:86:87:78:14:8b:0a:6d:1f:5d:c1:59:
1c:b0:ce:43:13:1b:27:6e:de:6c:43:66:9d:02:f4:61:a7:d9:
53:bd:dc:e4:c1:7f:4d:f9:41:7c:3e:28:77:7d:67:d7:0c:4f:
3a:6a:d6:26:32:1d:61:b0:94:df:d7:64:65:64:09:79:7f:fd:
69:9e:0d:cb:6c:a0:c7:da:e7:9d:e9:14:80:02:82:10:37:62:
06:58:01:bc:55:eb:06:37:74:d6:ea:1c:3b:d2:12:6d:05:4b:
22:a7:fe:52:e3:19:81:51:21:05:f2:fa:3e:fc:f2:b3:6b:50:
fd:da:45:4d:8c:70:7b:8d:e4:4c:e7:ff:24:66:9c:86:81:8e:
43:9d:0f:8d:a2:a0:a3:a9:a7:77:d3:71:95:2f:f1:9b:43:a8:
3e:fb:c6:b9:ab:e4:e8:e1:fd:af:72:59:33:a8:f2:01:89:a6:
5b:72:01:46:50:42:e0:31:ec:38:b4:ed:6d:6d:1e:48:8f:94:
85:bf:66:3b:bb:02:57:76:d5:fe:48:70:8d:f4:5e:6c:6d:32:
50:65:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 23:44:30 2024 by rpki-client on console-fra.rpki-client.org