Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer
File: TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer (raw, json)
Hash identifier: I6M5zaoRduz6oLOi9bwu0KLSgc8HNJaHQ2KFRnePqvE=
Subject key identifier: 4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02107F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Sep 2024 16:43:55 +0000
Certificate not after: Thu 30 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 136597
IP: 103.93.148.0/23
Validation: Failed, certificate revoked on Thu 24 Oct 2024 16:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135295 (0x2107f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 16:43:55 2024 GMT
Not After : Jan 30 00:00:00 2025 GMT
Subject: CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:d9:6b:97:ec:db:3c:a7:70:cd:b4:3f:63:
72:c4:ef:61:f3:a1:0c:42:7f:ea:06:ab:28:21:48:
73:b5:94:96:99:c9:58:dd:bf:bb:2d:19:18:87:9f:
a6:97:6d:71:93:57:eb:5c:aa:5a:38:ba:e6:bb:05:
7d:72:71:f5:fa:aa:e2:10:db:96:31:1a:af:fd:e7:
a9:c3:95:2f:bc:1b:be:bf:04:38:c0:46:0d:05:a3:
b1:3c:d5:22:8b:76:8b:65:17:82:a2:f5:1d:ca:88:
c4:15:5a:69:1f:f4:40:ed:ff:f9:5d:ce:7d:90:6d:
41:1e:3f:c9:df:f9:c0:06:76:ff:b7:d1:24:b0:0c:
ee:90:c0:24:b0:35:16:ff:64:78:33:23:49:ee:83:
35:68:15:2b:72:5c:a8:b9:59:c7:a5:d9:71:d4:3f:
64:f9:b7:0a:ee:12:ba:ce:b0:48:81:65:8b:d1:27:
b0:3e:e0:3b:28:71:b1:54:12:ed:cd:6a:cd:af:0e:
ca:3f:f6:06:31:b2:85:a2:7b:fa:6f:e9:3e:8f:3c:
cc:26:91:d1:1a:36:66:cb:85:ab:c3:ee:e5:ad:71:
97:96:3b:0d:0b:76:56:66:b4:b0:ba:06:55:f7:79:
7f:ab:e3:6f:9c:08:28:96:dc:95:49:20:fd:b1:5a:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136597
sbgp-ipAddrBlock: critical
IPv4:
103.93.148.0/23
Signature Algorithm: sha256WithRSAEncryption
72:4d:f4:0f:7d:b5:30:49:fa:73:84:33:84:3b:92:15:a6:72:
30:d3:c4:5e:1f:e3:a9:ff:79:9d:de:6b:87:f3:5b:d3:88:aa:
ee:4f:b3:06:fe:df:02:23:53:14:38:0d:d2:85:b1:45:1b:92:
c0:e5:1d:39:2a:4f:c4:82:88:49:b7:8e:85:af:07:79:03:29:
17:6e:77:38:1b:4e:e0:6c:e8:e3:c8:74:0e:51:81:fc:ea:10:
46:39:b2:7c:e7:06:27:f2:b9:4c:82:61:f1:a3:e1:46:26:c3:
af:01:9a:12:44:6e:23:7a:83:a7:0d:c9:7a:51:a1:09:bc:1e:
f3:14:10:74:7e:b6:78:32:e4:0e:b6:5b:33:e4:79:79:76:61:
47:d0:3f:74:b5:16:36:50:ff:b7:4e:72:23:e0:6f:ee:30:9e:
96:8e:6d:92:b8:24:fb:3e:0e:93:08:93:7b:27:21:67:a6:de:
ee:4a:ab:1c:00:5a:77:a8:ab:85:03:d8:a9:b9:48:5b:22:a3:
c8:4a:53:ee:ad:56:47:b8:eb:7a:b0:6b:1f:d8:5b:20:3b:f7:
53:b0:b8:39:b5:bc:2a:83:3c:b3:9e:cf:28:69:08:9d:ab:e7:
a8:56:21:ce:bb:06:52:ea:2a:2d:15:75:3b:ef:d0:da:99:35:
64:d9:41:e3
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAhB/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkzMDE2NDM1NVoXDTI1MDEzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjdDQUUxMTAvBgNVBAUTKDRFNDQ1M0IyQjY2QTg2OTVBMDNFRUEz
QTlCRTFGODVBOTIxQTJEMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1idlrl+zbPKdwzbQ/Y3LE72HzoQxCf+oGqyghSHO1lJaZyVjdv7stGRiHn6aX
bXGTV+tcqlo4uua7BX1ycfX6quIQ25YxGq/956nDlS+8G76/BDjARg0Fo7E81SKL
dotlF4Ki9R3KiMQVWmkf9EDt//ldzn2QbUEeP8nf+cAGdv+30SSwDO6QwCSwNRb/
ZHgzI0nugzVoFStyXKi5Wcel2XHUP2T5twruErrOsEiBZYvRJ7A+4DsocbFUEu3N
as2vDso/9gYxsoWie/pv6T6PPMwmkdEaNmbLhavD7uWtcZeWOw0LdlZmtLC6BlX3
eX+r42+cCCiW3JVJIP2xWpTxAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUTkRTsrZq
hpWgPuo6m+H4WpIaLQkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY3Q0FFLzA1N0EyNUVFOTUzNDExRUM5MEU5Nzc1NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2N0NBRS8wNTdBMjVFRTk1MzQxMUVDOTBFOTc3NTVDNEY5QUUwMi9Ua1JUc3Ja
cWhwV2dQdW82bS1INFdwSWFMUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhWVMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ12UMA0GCSqG
SIb3DQEBCwUAA4IBAQByTfQPfbUwSfpzhDOEO5IVpnIw08ReH+Op/3md3muH81vT
iKruT7MG/t8CI1MUOA3ShbFFG5LA5R05Kk/EgohJt46Frwd5AykXbnc4G07gbOjj
yHQOUYH86hBGObJ85wYn8rlMgmHxo+FGJsOvAZoSRG4jeoOnDcl6UaEJvB7zFBB0
frZ4MuQOtlsz5Hl5dmFH0D90tRY2UP+3TnIj4G/uMJ6Wjm2SuCT7Pg6TCJN7JyFn
pt7uSqscAFp3qKuFA9ipuUhbIqPISlPurVZHuOt6sGsf2FsgO/dTsLg5tbwqgzyz
ns8oaQidq+eoViHOuwZS6iotFXU779DamTVk2UHj
-----END CERTIFICATE-----
Generated at Thu Oct 24 19:10:32 2024 by rpki-client on console-fra.rpki-client.org