Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
File: UCKd4DW3JXL04AJ0cutoJv3-lK4.cer (raw, json)
Hash identifier: Cp+YWRS1e5e7xXw2p0NpXTU/cBkYid5kQKwFkmpb/HE=
Subject key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 015A8D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Jun 2022 00:04:59 +0000
Certificate not after: Sun 28 May 2023 00:00:00 +0000
Subordinate resources: AS: 132282
IP: 27.0.232.0/22
IP: 103.68.108.0/22
IP: 103.208.84.0/22
IP: 103.214.68.0/22
IP: 103.230.140.0/22
IP: 144.48.80.0/22
IP: 2404:3d80::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88717 (0x15a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 00:04:59 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:5c:b3:23:76:b9:ec:77:77:fe:40:75:d1:
34:57:71:ae:64:e4:21:1b:62:98:7f:34:f0:6d:86:
2b:28:2e:e7:8e:52:a4:c8:11:05:d5:49:7d:07:a6:
c9:78:47:5e:3a:18:a9:ae:c9:23:39:b3:22:5f:a1:
1f:8c:ef:ed:ac:a6:dd:c7:98:07:1d:b5:20:7d:c9:
02:06:43:dc:bd:4d:55:a7:bb:67:b6:d4:74:0e:69:
c1:25:a8:3c:97:67:d4:71:f2:92:c7:af:8e:92:29:
50:61:05:ed:2e:97:10:0f:8f:40:95:8e:be:eb:3c:
ac:39:6e:9a:2f:b3:05:43:56:cb:98:b5:63:89:08:
20:c2:cc:b5:6b:d8:6c:2a:28:a5:e8:b1:6e:99:4e:
d3:ae:8e:93:b6:af:34:29:9e:29:c5:ea:81:88:ca:
88:e4:a1:b8:21:51:e4:81:b0:04:b9:78:32:f0:fc:
18:07:49:cd:83:2a:4c:21:6b:63:d3:49:b6:a9:69:
9a:b7:67:3c:38:a1:6a:9e:3b:aa:2f:b9:57:ab:66:
80:de:07:2a:c5:a7:69:ba:ef:60:a8:84:27:f5:aa:
f2:f9:81:23:82:dd:f6:c1:b6:9e:20:5c:27:62:19:
64:8f:c7:14:a6:10:d3:4d:e2:7a:3c:de:25:1a:67:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132282
sbgp-ipAddrBlock: critical
IPv4:
27.0.232.0/22
103.68.108.0/22
103.208.84.0/22
103.214.68.0/22
103.230.140.0/22
144.48.80.0/22
IPv6:
2404:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
73:76:ad:1d:2e:6e:f3:7f:ed:eb:e0:c2:ae:13:a9:ba:dd:29:
20:27:e5:c5:ee:f7:93:e7:6b:7b:35:dd:c1:02:a2:95:05:6b:
b3:8d:86:14:3f:3b:1e:d9:a5:31:0a:db:68:05:df:95:0a:82:
ee:2d:5a:8f:69:b7:d4:f0:6c:ed:6c:38:f5:9f:f6:c7:79:8a:
21:a1:51:34:52:fc:b6:24:8b:36:e7:5a:57:34:60:e8:b7:6a:
10:ff:f7:97:11:1b:53:65:19:06:f2:37:6a:e2:d5:24:e2:d6:
de:b6:3f:10:bc:19:e6:d3:8f:6a:6c:83:c1:b6:0e:8e:94:01:
50:3f:9b:81:72:79:b0:b1:81:ea:af:23:6a:6a:47:cd:75:fe:
15:86:10:12:90:47:85:d1:10:71:ee:d1:e3:65:80:0c:45:64:
6f:19:ee:0a:61:72:fb:a1:0e:97:1a:af:ca:7b:df:35:0f:bc:
c6:97:9a:5a:32:31:8f:e6:12:ed:04:3d:73:85:6c:35:d2:48:
89:cf:19:85:6d:5a:31:71:62:bb:a9:18:75:7e:6c:eb:30:c8:
a1:fe:db:d2:0b:85:75:d9:95:a9:71:1b:7a:3c:b3:72:e7:b2:
91:f6:82:f6:63:fc:b7:00:87:81:56:e1:05:a1:0e:e3:4d:af:
f9:ae:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-fra.rpki-client.org