Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.cer
File: a4fGlPeh3cQ3Z_WJ6yd650_tO3s.cer (raw, json)
Hash identifier: WkXYKaKMz9AYOjyqUKkgQbOfuEZJRR+PTCnlTP+3lqs=
Subject key identifier: 6B:87:C6:94:F7:A1:DD:C4:37:67:F5:89:EB:27:7A:E7:4F:ED:3B:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 016CA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 Sep 2022 05:34:53 +0000
Certificate not after: Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources: AS: 132087
IP: 45.112.120.0/22
IP: 103.70.20.0/22
IP: 2406:680::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93346 (0x16ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 6 05:34:53 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=A911CED9/serialNumber=6B87C694F7A1DDC43767F589EB277AE74FED3B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:ad:1a:c0:36:40:19:75:fa:d4:31:bb:5d:
75:d8:68:af:db:ec:e3:e2:07:2f:7b:8c:b4:1f:fe:
d0:fa:05:3f:64:1e:40:7b:a2:47:50:ba:78:0f:b1:
a7:a0:eb:3d:1b:c4:4e:23:eb:cb:7d:b0:a1:23:35:
10:a0:7a:8b:dc:a4:e5:75:37:11:c2:08:90:5a:f2:
f5:15:39:86:25:12:8d:31:50:3e:7f:5f:4a:9f:0f:
02:00:3d:91:0d:36:dd:30:50:53:b1:02:a9:f2:9d:
35:8b:e3:6c:08:49:09:22:57:ab:f8:e6:44:1a:3f:
71:90:a5:6e:5b:7d:68:8f:3d:f5:f3:72:d7:a9:65:
51:0f:2c:6f:96:72:1a:26:70:d4:12:e5:0f:a2:aa:
b7:0e:43:9e:f0:4a:c1:36:93:91:34:06:5b:34:0d:
44:2c:f8:50:98:be:be:f9:ee:0f:1a:2c:3a:f1:ca:
fd:1c:55:8d:7b:2a:3b:b6:d9:f2:78:c6:d2:2b:5e:
85:97:ec:9c:e6:3a:11:6c:f0:b4:d0:3f:91:33:f4:
67:a1:ec:be:fb:d9:03:70:49:44:f9:f0:86:85:bc:
04:d9:f1:c1:40:fe:77:88:fe:7f:f5:53:0c:02:7f:
75:9f:8c:b3:03:ac:20:68:f1:07:35:42:a8:cb:43:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:C6:94:F7:A1:DD:C4:37:67:F5:89:EB:27:7A:E7:4F:ED:3B:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CED9/0C253A4A22E611EA950A1886C4F9AE02/a4fGlPeh3cQ3Z_WJ6yd650_tO3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132087
sbgp-ipAddrBlock: critical
IPv4:
45.112.120.0/22
103.70.20.0/22
IPv6:
2406:680::/32
Signature Algorithm: sha256WithRSAEncryption
08:3d:12:0e:54:ee:d1:16:67:ce:94:cb:ea:8b:c6:59:fe:da:
5d:fe:e0:53:2c:a4:cb:7c:3b:e4:8b:a8:4b:66:c1:3a:0f:07:
7c:e0:ba:06:5d:8f:9e:05:df:37:68:aa:63:07:ca:f6:26:34:
21:28:c5:36:61:38:63:98:e0:8b:71:71:f9:dd:c4:d8:2a:0f:
4e:8f:4c:bc:ba:9a:53:06:73:90:b4:a9:0e:56:05:82:4e:ad:
53:93:f7:0a:e1:04:7b:cb:5c:7f:e0:54:e7:44:e0:5d:1c:8a:
45:35:fa:46:14:32:b3:44:40:37:17:ac:8b:63:eb:af:4e:b5:
4b:ac:da:b2:6a:ed:d0:6c:92:14:54:a0:f7:2c:41:6b:c9:b8:
90:ff:41:e1:6b:89:a6:6e:6c:b7:62:1e:0b:69:f8:b6:25:16:
4f:be:42:9d:fa:7d:43:9d:a6:c1:fc:db:67:d5:37:a3:92:f1:
d3:8d:88:80:02:64:f4:9c:21:f3:ba:29:06:55:96:08:af:86:
cb:1a:7f:03:73:00:82:3d:d7:18:03:b1:6b:cc:31:5d:0a:1f:
d8:5e:e2:fd:48:08:d9:2a:33:a7:38:0a:fa:8d:f9:e9:fc:7a:
ea:44:37:f6:c6:0c:64:4c:d8:2c:e0:45:ec:1d:6f:76:3f:30:
b8:cd:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 13:44:27 2023 by rpki-client on console-fra.rpki-client.org