Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X6DOcAYeSbc8N48cNvaVlkGSWu0.cer
File: X6DOcAYeSbc8N48cNvaVlkGSWu0.cer (raw, json)
Hash identifier: wMu/SmUH3skL7MM4xyx6WVZ1XgVt5tAtvckNLGvxjdU=
Subject key identifier: 5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BB6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/X6DOcAYeSbc8N48cNvaVlkGSWu0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Sep 2023 19:31:59 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 133029
IP: 103.251.172.0/22
Validation: Failed, certificate revoked on Fri 15 Dec 2023 19:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113514 (0x1bb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 4 19:31:59 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91D1EDC/serialNumber=5FA0CE70061E49B73C378F1C36F6959641925AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:f8:b5:f7:20:c7:9d:e3:0d:6c:6f:1a:6b:
f7:b8:bc:28:48:de:d3:75:81:06:65:c8:4e:cc:44:
7d:1f:e0:4c:9d:52:99:30:19:61:5c:b7:6a:84:83:
8d:f2:aa:ed:e0:c9:9b:21:09:1e:04:55:ec:99:56:
1a:27:3a:fc:0e:d0:6b:3a:8d:23:3c:46:42:bc:00:
1f:05:10:18:6a:2b:7f:a8:60:78:c5:98:5b:82:f4:
83:2f:72:49:b7:da:b5:54:0b:41:e8:c6:6d:f7:26:
44:30:c8:37:0e:8b:20:82:0f:1f:ab:4e:63:05:4a:
10:b4:03:0b:95:f5:3c:e5:76:c7:12:0a:db:47:4b:
18:b8:1d:3d:c6:9a:d4:1d:7e:29:f9:64:bf:2b:cb:
91:a8:0f:bc:92:ab:69:cd:a1:73:42:d9:02:e6:fb:
df:d4:9a:f4:e1:c8:a6:bc:c8:97:30:00:ea:d6:63:
ee:d5:e5:50:20:b5:9e:0f:ff:aa:21:7e:da:c2:9f:
fd:26:6c:8a:23:72:08:4b:31:14:c7:3e:a7:4d:2f:
59:90:84:1e:30:0c:bf:fe:de:7d:d0:f8:1b:5d:a7:
8b:a4:f8:10:30:91:44:c6:ca:6a:26:a5:76:8c:08:
29:c4:3b:75:ad:0b:10:2b:8d:f4:c0:3f:88:07:33:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/X6DOcAYeSbc8N48cNvaVlkGSWu0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133029
sbgp-ipAddrBlock: critical
IPv4:
103.251.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:f9:83:2a:16:96:be:3d:0f:22:07:f2:8d:78:20:5a:4a:30:
c0:af:5c:02:96:a0:c2:45:9e:2b:5b:a5:5e:28:45:cd:e1:d8:
3f:ad:e4:5a:01:de:dc:2f:77:22:90:c5:8f:df:64:61:7d:e1:
e7:1e:97:a7:09:99:df:9a:47:a9:a9:58:c2:9d:d9:4b:2e:e6:
39:42:58:3e:95:be:b5:dd:3f:a0:9a:32:79:d6:5f:20:b8:d0:
44:30:da:14:fd:2c:69:21:88:eb:91:67:07:32:29:ec:43:a7:
b1:1c:eb:33:60:80:f7:7f:37:af:dc:1f:6b:a4:ae:c0:e2:47:
1f:4a:6e:60:2a:51:a2:5d:4e:f4:bb:74:cd:0a:d4:b2:48:eb:
d2:cb:17:d5:ce:d2:94:42:fd:8d:4d:76:e1:04:e3:8d:f4:00:
f2:f2:40:c8:74:47:a2:c0:f5:2c:3d:d7:6e:81:ea:47:bf:93:
46:38:0a:51:e6:a7:68:9e:fc:dc:ac:52:53:e7:c7:34:19:02:
ab:f9:7f:a0:63:21:04:71:c6:8f:ac:03:b8:67:4e:81:e8:61:
67:55:f2:3f:5c:80:59:0c:48:23:65:c7:67:63:1a:7d:0b:3f:
e9:4f:c5:7a:9a:dd:06:1b:45:c4:7a:1f:35:89:12:7c:54:b1:
bf:a8:27:b0
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAbtqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDkwNDE5MzE1OVoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDFFREMxMTAvBgNVBAUTKDVGQTBDRTcwMDYxRTQ5QjczQzM3OEYx
QzM2RjY5NTk2NDE5MjVBRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCe3vi19yDHneMNbG8aa/e4vChI3tN1gQZlyE7MRH0f4EydUpkwGWFct2qEg43y
qu3gyZshCR4EVeyZVhonOvwO0Gs6jSM8RkK8AB8FEBhqK3+oYHjFmFuC9IMvckm3
2rVUC0Hoxm33JkQwyDcOiyCCDx+rTmMFShC0AwuV9TzldscSCttHSxi4HT3GmtQd
fin5ZL8ry5GoD7ySq2nNoXNC2QLm+9/UmvThyKa8yJcwAOrWY+7V5VAgtZ4P/6oh
ftrCn/0mbIojcghLMRTHPqdNL1mQhB4wDL/+3n3Q+Btdp4uk+BAwkUTGymompXaM
CCnEO3WtCxArjfTAP4gHM7GpAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUX6DOcAYe
Sbc8N48cNvaVlkGSWu0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQxRURDLzU0NDA0MzkwRDA2MjExRUFBMTlBMzQxMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMUVEQy81NDQwNDM5MEQwNjIxMUVBQTE5QTM0MTFDNEY5QUUwMi9YNkRPY0FZ
ZVNiYzhONDhjTnZhVmxrR1NXdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgelMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/usMA0GCSqG
SIb3DQEBCwUAA4IBAQCk+YMqFpa+PQ8iB/KNeCBaSjDAr1wClqDCRZ4rW6VeKEXN
4dg/reRaAd7cL3cikMWP32RhfeHnHpenCZnfmkepqVjCndlLLuY5Qlg+lb613T+g
mjJ51l8guNBEMNoU/SxpIYjrkWcHMinsQ6exHOszYID3fzev3B9rpK7A4kcfSm5g
KlGiXU70u3TNCtSySOvSyxfVztKUQv2NTXbhBOON9ADy8kDIdEeiwPUsPddugepH
v5NGOApR5qdonvzcrFJT58c0GQKr+X+gYyEEccaPrAO4Z06B6GFnVfI/XIBZDEgj
ZcdnYxp9Cz/pT8V6mt0GG0XEeh81iRJ8VLG/qCew
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:43 2024 by rpki-client on console-ams.rpki-client.org