Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
File: QjkReiVYLQBn3k0M7aWrpcx-NWk.cer (raw, json)
Hash identifier: Wz2D64MZ/MZ0/j2F5ROgE9HKXB+DNVc3l5yBckTd6io=
Subject key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021DDB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 05:16:29 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: AS: 45163
AS: 55471
AS: 131211
IP: 203.176.189.0/24
IP: 2001:df0:90::/48
IP: 2401:4600::/32
IP: 2401:e640::/32
Validation: Failed, certificate revoked on Fri 06 Dec 2024 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138715 (0x21ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 05:16:29 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:f5:ef:dd:86:34:f5:73:99:e9:6b:73:a0:
62:3f:de:63:5b:a9:7c:6b:70:1c:dc:b2:0a:63:fc:
82:88:e4:d8:6e:55:d9:88:01:39:97:b9:09:00:ce:
52:8c:3a:bd:06:5e:3f:a1:c6:3b:42:a2:35:72:3b:
4f:de:da:ba:38:3a:6a:51:df:40:66:f2:ee:6f:40:
a1:1b:15:2d:f9:6d:16:99:0c:f6:7b:57:39:b9:6f:
03:3a:7d:c8:be:7c:83:18:f9:42:9b:5a:02:13:fa:
51:fd:dc:b9:75:18:21:f9:df:02:6e:b4:62:1b:8f:
ad:34:40:4d:40:45:72:46:ae:15:c6:87:50:a0:4a:
0a:fa:ce:6c:c0:32:c0:dc:c9:58:0d:2a:4c:3c:d1:
30:2a:7f:05:04:ce:1e:98:7e:95:0d:a6:71:22:39:
b8:ef:02:b9:bc:5b:7f:b4:a9:44:5d:9b:3f:87:06:
04:02:29:42:6c:51:38:a4:94:9e:03:5f:93:93:7e:
88:da:5c:17:96:08:d2:2c:33:1f:5d:55:a2:31:ca:
d8:4a:ef:06:d5:a1:35:94:e8:9d:8c:74:b5:84:86:
67:af:9e:83:cb:13:43:c4:f2:7d:58:96:d8:27:70:
55:75:fa:52:43:cf:25:a1:df:28:68:a7:75:5c:c3:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45163
55471
131211
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
IPv6:
2001:df0:90::/48
2401:4600::/32
2401:e640::/32
Signature Algorithm: sha256WithRSAEncryption
d5:b1:00:08:39:85:0b:fa:fe:3d:55:54:83:c6:fb:a8:93:2c:
09:8a:65:47:c9:46:c4:f3:09:fc:2d:39:c7:80:0d:cf:b1:8b:
32:9d:fa:dd:bc:db:75:69:65:8d:bb:aa:32:12:d8:d6:eb:bf:
0d:cf:8e:0a:2c:8c:46:76:8a:75:f9:9b:ea:68:d3:5f:31:96:
73:d7:4f:4c:a2:f3:c4:11:d4:0e:2c:1a:5c:7e:3e:f3:88:df:
ae:d0:ff:d0:74:0e:3f:9a:f1:0e:2a:9f:d4:a1:a2:15:e3:6a:
f9:55:24:42:b2:e2:3f:bf:c3:a1:5b:7f:e6:78:c6:f5:84:1b:
21:02:97:6d:60:b7:02:3e:49:bf:ea:27:cd:35:56:a6:4c:e2:
30:49:b4:b9:9b:51:8c:d7:4a:eb:de:16:2f:d2:88:2d:24:87:
38:80:7b:4c:19:9b:93:92:6a:ad:e9:d7:ac:1d:43:12:83:f5:
be:32:57:35:7f:1d:5a:15:f5:f3:eb:8d:c9:e5:53:a2:49:4d:
83:7b:5d:01:d1:12:4a:40:af:9f:5a:28:85:23:d9:77:6c:24:
f8:b7:ea:d5:78:6e:4f:75:78:7d:96:b3:db:f5:c0:17:f2:01:
7b:88:00:de:80:0d:c3:6a:9b:85:cf:90:fb:cc:45:a6:fc:e4:
0d:31:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:18 2025 by rpki-client