Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NVrIP6p119p6yGHbIAf2JgC6QpI.cer
File: NVrIP6p119p6yGHbIAf2JgC6QpI.cer (raw, json)
Hash identifier: uUYvaVCGnYDGDi9OqhFI2jP7xvBF+mnc1EKLZxOSf7w=
Subject key identifier: 35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C5FE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/NVrIP6p119p6yGHbIAf2JgC6QpI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 10:15:46 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: AS: 45163
AS: 55471
AS: 131211
IP: 203.176.189.0/24
IP: 2001:df0:90::/48
IP: 2401:4600::/32
IP: 2401:e640::/32
Validation: Failed, certificate revoked on Fri 19 Apr 2024 01:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116222 (0x1c5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 10:15:46 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C287/serialNumber=355AC83FAA75D7DA7AC861DB2007F62600BA4292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:be:ff:a4:f5:e4:16:83:6b:64:04:8c:7a:
79:48:c3:7a:d1:da:81:03:a2:c6:f1:1e:78:83:8d:
2c:1e:82:7f:b3:20:3c:b8:2e:0f:27:e9:a9:d9:d7:
52:44:99:bc:1f:fd:3c:45:e8:88:0d:b9:4d:1b:b5:
a5:5e:a4:d3:af:a2:14:b2:e8:4b:cf:f2:72:b1:fd:
57:b3:68:bf:74:79:5c:41:28:e2:79:93:13:15:0a:
e9:44:20:6e:b0:44:d3:ea:bc:0b:46:06:76:01:1f:
cb:8f:18:01:dc:4b:d6:a4:f8:9e:5e:23:61:ad:40:
c6:9e:93:5f:12:55:61:9c:11:66:2c:52:d6:0c:ed:
f3:e1:89:0a:57:ad:67:d1:e4:b8:3e:13:74:22:5c:
0a:6f:c9:3f:ab:47:73:4f:83:a8:ec:aa:6a:20:ed:
21:8c:0f:c4:18:7c:fa:0d:e6:76:8b:f1:98:f7:4b:
84:83:a9:c8:b7:e7:f7:f5:f2:d0:99:5f:0c:f6:1b:
c1:be:0f:08:da:2d:97:1f:2b:2c:82:48:cc:c9:2a:
9d:29:95:25:91:54:fa:11:e0:1c:6b:a8:3e:d3:65:
9a:e2:a7:90:e1:f1:bf:ac:5b:15:8a:a6:53:92:72:
6f:14:f0:da:a8:74:e7:85:ae:0b:52:4a:b2:25:a6:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/NVrIP6p119p6yGHbIAf2JgC6QpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45163
55471
131211
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
IPv6:
2001:df0:90::/48
2401:4600::/32
2401:e640::/32
Signature Algorithm: sha256WithRSAEncryption
0b:87:db:ec:97:06:45:9d:68:99:76:81:c0:1a:c0:96:dd:82:
8a:b2:a4:4e:7b:5c:ce:5d:d9:87:9e:b3:d9:a5:f0:52:5b:93:
86:d4:32:2a:59:a1:5a:09:6e:85:14:36:9c:ec:cc:fb:81:57:
2d:41:0e:61:1d:b0:e4:98:3f:03:a2:aa:1d:f3:0e:c6:11:40:
cc:c2:fa:17:e4:d6:0c:27:7b:4f:be:a9:f2:49:d9:8a:cf:61:
1b:7e:6a:cb:5c:5a:10:c8:9d:cd:50:47:eb:99:5f:9b:96:75:
30:05:77:70:22:b6:98:c7:d2:f8:bc:c3:bc:b4:d9:d8:0f:4c:
17:c7:bb:61:71:d7:b7:a9:44:f8:bb:97:cb:32:56:71:94:a8:
9e:b6:b1:bf:b3:c4:29:3a:43:23:af:db:d1:90:4f:16:e5:68:
9a:73:c1:a0:7e:c7:ed:96:7d:ac:76:77:ab:0a:6e:4a:18:e1:
f7:a0:cc:6c:51:ac:fb:62:a3:86:49:0d:29:c5:58:be:2b:6b:
a1:d8:f8:25:cb:eb:b6:17:8f:09:31:30:7f:fd:41:ef:c5:2a:
55:40:6c:70:11:61:fc:6b:a2:c5:e2:a4:8f:7e:07:5d:59:ae:
2e:a9:5d:bb:97:00:59:82:60:98:c6:ac:27:a5:fe:5f:2e:82:
32:92:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:50:16 2024 by rpki-client on console-ams.rpki-client.org