Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uhxa-2AVPO00LNPCZ00xXkJFAio.cer
File: Uhxa-2AVPO00LNPCZ00xXkJFAio.cer (raw, json)
Hash identifier: YuAHLdjlbWPSSf1EOEK7hshMhoDNkW9sH6OjNwYrg2g=
Subject key identifier: 52:1C:5A:FB:60:15:3C:ED:34:2C:D3:C2:67:4D:31:5E:42:45:02:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 014230
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/Uhxa-2AVPO00LNPCZ00xXkJFAio.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Jan 2022 06:06:33 +0000
Certificate not after: Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources: AS: 17493
IP: 43.250.192.0/22
IP: 122.248.192.0/18
IP: 175.41.128.0/18
IP: 2400:6500::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82480 (0x14230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 31 06:06:33 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=A9160904/serialNumber=521C5AFB60153CED342CD3C2674D315E4245022A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:1b:17:b7:8e:94:f0:7a:95:17:46:fd:f0:
fe:91:e8:71:f6:7e:fd:31:e1:ea:ab:7c:66:8f:89:
24:35:43:b6:9d:15:e8:b0:e1:c6:6f:e1:cd:e7:18:
b7:a1:b4:9f:a5:69:c3:2b:05:85:96:da:f1:8e:37:
c2:77:0f:46:f3:97:35:d3:04:9d:6f:09:23:29:99:
e3:98:5b:14:a0:0c:90:a2:f8:09:81:ad:3c:71:08:
d7:07:a9:8b:5f:95:a0:17:c7:c6:0e:68:8d:ce:aa:
17:d2:8c:71:92:e1:6f:66:b6:57:86:07:a5:69:a2:
1b:28:01:87:c3:50:d5:de:7b:92:b6:ad:4d:0e:1c:
9f:17:2d:49:97:9d:39:8b:aa:db:21:33:93:22:a2:
14:32:c6:7e:1e:c5:de:6d:4e:97:7b:c0:e8:46:c3:
f0:81:47:8e:0a:1d:d3:55:65:c4:11:57:b3:14:65:
fc:7a:fa:ad:62:27:31:a0:40:24:30:7d:9b:6e:be:
f3:cd:5f:c8:48:a5:53:9b:32:61:a2:d6:ea:3e:3d:
1b:bd:22:84:0c:e6:8f:c5:a5:46:99:a2:f9:ad:ea:
54:89:ab:1a:47:4c:5c:bc:d1:ed:ea:99:f2:e7:36:
04:e1:db:3c:74:9c:20:43:ef:94:9d:e8:cf:f4:c1:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:5A:FB:60:15:3C:ED:34:2C:D3:C2:67:4D:31:5E:42:45:02:2A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160904/347274EC6F4911E8BEB6AE65C4F9AE02/Uhxa-2AVPO00LNPCZ00xXkJFAio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17493
sbgp-ipAddrBlock: critical
IPv4:
43.250.192.0/22
122.248.192.0/18
175.41.128.0/18
IPv6:
2400:6500::/32
Signature Algorithm: sha256WithRSAEncryption
91:90:ee:8f:9b:5e:f6:02:8c:41:5e:12:7c:f8:c5:54:f8:06:
e5:09:d7:03:39:eb:73:4d:6a:b3:d0:3b:c8:ec:0f:50:ee:53:
fe:11:a8:d8:98:e9:db:03:56:60:03:39:34:e4:5f:c9:c5:3b:
5a:21:8d:c0:dd:8c:1d:d1:25:9d:51:d2:3a:ac:69:5d:64:4c:
9a:1e:c7:4b:0a:6d:85:e8:ba:1e:d7:58:c3:48:79:94:35:07:
ba:e8:62:65:f2:4b:01:6f:bf:5d:b4:a2:bf:ec:9b:ec:27:1e:
f6:91:b9:47:2a:bd:9d:89:59:63:75:4d:c5:86:da:3f:a3:fe:
e5:c3:2c:c8:96:d2:c1:af:7c:da:6d:36:bd:bc:56:fb:57:0a:
b5:70:4f:ca:d4:2b:e9:dd:a5:ef:93:04:b1:36:58:4a:c0:ee:
41:45:dc:fc:3f:8a:47:fb:90:1f:de:32:95:71:7e:4a:b7:09:
66:51:db:78:e4:80:21:65:a8:ce:dd:fd:7e:ea:aa:28:94:5b:
ac:13:a2:b6:94:48:14:25:01:72:07:16:57:13:71:09:ff:08:
c0:ec:8f:ea:72:92:4d:93:b2:48:b1:c6:18:83:4a:e2:89:e7:
90:71:ff:c4:a1:de:b0:6d:0c:b9:24:0a:a9:d8:9f:88:f2:8f:
c0:34:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org