Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
File: YgCxV626JWn6e4i32i-1rj_2o7Y.cer (raw, json)
Hash identifier: aTmmVlkdKrhkF04XDGKY0r2PwrLjGcjrNDbUaQrB4m4=
Subject key identifier: 62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020FBF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Sep 2024 16:58:14 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 23930
AS: 38491
AS: 38539
AS: 38581
AS: 132209
AS: 132301
AS: 132495
AS: 132913
AS: 133140
AS: 140708
IP: 43.243.124.0/22
IP: 103.38.212.0/22
IP: 116.93.0.0/17
IP: 121.127.0.0/19
IP: 203.99.232.0/21
IP: 203.208.24.0/21
IP: 2401:9800::/32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 15:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135103 (0x20fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 26 16:58:14 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:11:ad:70:0a:e1:82:27:5a:00:54:de:bf:
84:41:cc:b2:06:ba:9b:eb:dd:4f:fc:5a:4f:59:b5:
7a:f9:03:12:d1:95:08:da:38:8f:a1:e7:2d:7c:cd:
47:85:17:8b:25:67:8c:21:08:d7:a5:e3:ba:d4:f8:
bb:b8:bd:d5:f0:94:59:c9:6b:a1:19:b9:aa:11:f2:
d7:59:a0:60:9d:cb:ad:a9:0b:8e:06:fa:72:37:67:
1f:be:b8:1b:50:27:d5:12:c0:b6:80:c2:c0:96:cc:
57:64:3f:1a:3a:e9:88:dc:f8:ab:ca:c0:e8:de:3a:
b5:ad:05:ed:31:22:92:3e:e0:15:2a:f4:ed:4c:e5:
a8:cd:d5:da:eb:77:0b:9d:10:59:03:18:0e:22:4d:
b8:ec:b9:65:df:c8:31:75:f5:a2:4f:4a:79:f7:e7:
4f:ca:eb:c4:b4:30:c3:5d:23:19:36:13:d2:2a:d2:
64:12:2c:bd:6a:dc:a5:5e:3d:14:dd:c7:f3:d3:75:
2d:c3:41:53:7f:f8:5d:f7:f3:46:0e:a3:40:77:26:
4e:13:2f:a2:79:1f:fd:6a:0c:5c:74:64:3e:1a:5e:
64:1c:03:41:98:6e:ad:ea:41:e2:c6:6f:63:57:e6:
29:8d:28:f4:9b:f7:73:a2:44:e9:11:51:68:59:c1:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23930
38491
38539
38581
132209
132301
132495
132913
133140
140708
sbgp-ipAddrBlock: critical
IPv4:
43.243.124.0/22
103.38.212.0/22
116.93.0.0/17
121.127.0.0/19
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
1c:94:d9:5d:e7:b7:dc:14:e9:77:bb:8e:66:78:e2:56:36:a7:
91:21:b9:d4:fb:23:cc:ef:86:eb:9a:0d:a8:45:c8:a9:8c:7d:
81:10:2a:7a:84:85:60:71:44:4f:cc:33:af:0a:25:95:36:c7:
8b:25:7c:4e:6f:b4:d6:c1:b7:a9:11:e3:da:e0:23:95:ab:f1:
04:b5:00:e8:7d:92:8e:07:da:d7:4d:e6:57:d1:f6:cb:b3:3b:
1f:ae:d6:57:15:73:28:f4:e4:8d:69:ff:56:c5:a5:9a:88:27:
3a:62:06:21:f0:32:54:29:cf:a8:3d:b9:9a:2f:6c:6d:53:a9:
dd:d0:3f:e8:04:16:5b:f6:45:82:fe:c2:90:46:8f:c6:c5:6b:
f0:46:e9:f2:0a:91:d1:a6:59:b3:3c:fd:c6:0d:c4:e0:58:d3:
6f:1a:f0:83:1e:bd:4d:fc:19:21:4f:55:bf:94:64:3b:f9:8e:
0b:82:58:65:ef:cf:b4:75:3f:26:85:ca:7f:1f:46:76:93:d1:
60:87:45:39:28:90:89:96:f9:12:ba:15:eb:85:c3:e2:99:96:
2a:ce:ed:01:85:17:27:29:3d:a8:d4:b3:69:e1:34:77:5f:f1:
88:d3:d9:4e:ba:be:2f:91:cb:6f:49:46:f2:3e:0f:10:b2:9e:
e0:fd:43:60
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIDAg+/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkyNjE2NTgxNFoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODkwOTkxMTAvBgNVBAUTKDYyMDBCMTU3QURCQTI1NjlGQTdCODhC
N0RBMkZCNUFFM0ZGNkEzQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxgBGtcArhgidaAFTev4RBzLIGupvr3U/8Wk9ZtXr5AxLRlQjaOI+h5y18zUeF
F4slZ4whCNel47rU+Lu4vdXwlFnJa6EZuaoR8tdZoGCdy62pC44G+nI3Zx++uBtQ
J9USwLaAwsCWzFdkPxo66Yjc+KvKwOjeOrWtBe0xIpI+4BUq9O1M5ajN1drrdwud
EFkDGA4iTbjsuWXfyDF19aJPSnn350/K68S0MMNdIxk2E9Iq0mQSLL1q3KVePRTd
x/PTdS3DQVN/+F3380YOo0B3Jk4TL6J5H/1qDFx0ZD4aXmQcA0GYbq3qQeLGb2NX
5imNKPSb93OiROkRUWhZwRmJAgMBAAGjggNoMIIDZDAdBgNVHQ4EFgQUYgCxV626
JWn6e4i32i+1rj/2o7YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg5MDk5LzhBRUZCMUQyNUYwRjExRUI4RDhCMjYxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4OTA5OS84QUVGQjFEMjVGMEYxMUVCOEQ4QjI2MTZDNEY5QUUwMi9ZZ0N4VjYy
NkpXbjZlNGkzMmktMXJqXzJvN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQgBAf8ENzA1
oDMwMQICXXoCAwCWWwIDAJaLAgMAlrUCAwIEcQIDAgTNAgMCBY8CAwIHMQIDAggU
AgMCJaQwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAIr83wDBAJnJtQDBAd0
XQADBAV5fwADBAPLY+gDBAPL0BgwDQQCAAIwBwMFACQBmAAwDQYJKoZIhvcNAQEL
BQADggEBAByU2V3nt9wU6Xe7jmZ44lY2p5EhudT7I8zvhuuaDahFyKmMfYEQKnqE
hWBxRE/MM68KJZU2x4slfE5vtNbBt6kR49rgI5Wr8QS1AOh9ko4H2tdN5lfR9suz
Ox+u1lcVcyj05I1p/1bFpZqIJzpiBiHwMlQpz6g9uZovbG1Tqd3QP+gEFlv2RYL+
wpBGj8bFa/BG6fIKkdGmWbM8/cYNxOBY028a8IMevU38GSFPVb+UZDv5jguCWGXv
z7R1PyaFyn8fRnaT0WCHRTkokImW+RK6FeuFw+KZlirO7QGFFycpPajUs2nhNHdf
8YjT2U66vi+Ry29JRvI+DxCynuD9Q2A=
-----END CERTIFICATE-----
Generated at Wed Oct 16 18:47:22 2024 by rpki-client on console-ams.rpki-client.org