Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PhOKkPiiVQwiCK346pppiRBcFN0.cer
File: PhOKkPiiVQwiCK346pppiRBcFN0.cer (raw, json)
Hash identifier: pUFuRlVcv5hgwdKGXCejC2twsLDXGmsC9+1Vm+XLdZ0=
Subject key identifier: 3E:13:8A:90:F8:A2:55:0C:22:08:AD:F8:EA:9A:69:89:10:5C:14:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 013E36
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/PhOKkPiiVQwiCK346pppiRBcFN0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Jan 2022 16:14:24 +0000
Certificate not after: Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources: IP: 203.31.23.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81462 (0x13e36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 5 16:14:24 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=A91448A5/serialNumber=3E138A90F8A2550C2208ADF8EA9A6989105C14DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:70:04:5c:42:aa:1b:89:e8:8d:5f:71:b4:
8e:a2:b9:84:af:ef:b0:7f:09:99:d7:06:31:16:41:
3c:2b:c1:7f:1b:30:32:92:1e:eb:17:06:22:a9:74:
97:6d:07:92:2b:d8:a1:2e:79:ca:4d:e5:34:bb:01:
ac:b6:7d:c9:3c:b8:21:19:a3:dc:0a:6c:e5:7e:d8:
1c:e2:bf:19:f6:4f:01:86:d3:d7:43:23:10:a7:1f:
2d:d7:50:5e:a9:54:de:fe:b2:f9:25:3d:9a:b7:5d:
60:f9:4e:16:4b:3c:b0:d2:93:6d:f2:b5:4e:e0:47:
9e:51:4c:8a:57:f8:96:b3:31:1d:7a:2c:57:49:3d:
14:93:0d:2a:76:6f:89:9a:30:d1:26:74:50:d0:fc:
59:fb:35:5d:5b:7f:04:3d:1b:a1:3e:85:db:0f:f9:
ab:f8:80:8b:96:b5:88:f5:87:5b:39:c6:fe:4a:63:
b6:62:d8:51:3c:c5:16:7e:41:bb:03:55:b4:92:c0:
50:d7:eb:da:2d:1f:80:8c:c6:35:ac:a5:73:33:6a:
5e:3d:d5:6b:a1:9f:0a:70:b7:2a:61:74:ed:98:20:
bd:6a:bb:56:07:cd:c9:b1:b3:01:32:7e:14:51:46:
be:db:62:75:da:6f:22:54:fa:f2:95:8d:19:e3:8b:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:8A:90:F8:A2:55:0C:22:08:AD:F8:EA:9A:69:89:10:5C:14:DD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91448A5/30F12D74532811EC8597F643C4F9AE02/PhOKkPiiVQwiCK346pppiRBcFN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.31.23.0/24
Signature Algorithm: sha256WithRSAEncryption
50:50:ba:bf:b5:ce:e9:ba:24:46:48:40:14:9c:f6:6e:05:c3:
30:c7:73:ca:4a:a8:d7:d6:a7:ca:13:5a:62:b1:cb:28:ae:a5:
43:bb:4e:ee:bd:0d:bc:81:52:df:d9:49:e5:ed:7b:17:fa:47:
88:93:4c:ef:dd:e8:b5:cc:ac:ed:a1:e8:f6:4a:fc:e6:8c:fe:
56:75:b7:99:c4:d2:8c:67:21:b5:dc:d0:39:52:81:3b:55:33:
a4:9d:9b:90:b3:60:85:e8:1c:1e:31:41:9e:cd:ca:1c:df:ea:
54:46:58:ad:6b:92:b1:f4:d0:82:e1:c8:27:2f:43:72:1d:a7:
ee:79:2b:3d:40:3d:df:c7:3d:76:a2:4e:a9:a8:38:dc:43:d1:
a1:46:38:07:9f:55:75:99:a6:f5:bd:80:58:b2:ca:36:df:d5:
20:15:1e:43:e4:7b:1a:a8:6b:ad:d7:14:be:4b:a2:71:58:a3:
33:f2:0d:59:ca:bc:18:4f:8b:65:29:b6:ac:0c:82:7f:fe:ad:
e9:4b:f3:d4:67:46:7a:a7:87:1a:ad:30:b8:32:7b:a1:95:3d:
f7:42:01:fc:4f:e7:33:ae:c4:40:4e:52:1e:a9:f1:a9:6e:9b:
c5:fb:23:ea:f7:3a:09:32:e9:6e:3a:b7:10:47:5b:12:f5:22:
8a:02:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org