Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cWFjnAAmU2cdHAjAWtoFONTkIH8.cer
File: cWFjnAAmU2cdHAjAWtoFONTkIH8.cer (raw, json)
Hash identifier: wH7O/qT0HtZ5T72aKMJs1Cn2wxkJAmDhqABtynyj06M=
Subject key identifier: 71:61:63:9C:00:26:53:67:1D:1C:08:C0:5A:DA:05:38:D4:E4:20:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CE33
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C774/71FCBEB276EA11EA8470C05EC4F9AE02/cWFjnAAmU2cdHAjAWtoFONTkIH8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C774/71FCBEB276EA11EA8470C05EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Nov 2023 17:58:46 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 133480
IP: 43.245.160.0/22
IP: 103.76.164.0/23
IP: 103.77.232.0/22
IP: 103.192.173.0/24
IP: 103.231.88.0/22
IP: 116.206.228.0/22
IP: 2400:fa80::/32
IP: 2407:a080::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118323 (0x1ce33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 30 17:58:46 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A914C774/serialNumber=7161639C002653671D1C08C05ADA0538D4E4207F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:36:db:98:4c:5e:2f:72:fd:45:2e:50:01:
13:ec:03:1e:a3:66:24:d8:24:c5:98:2a:73:b9:d9:
24:fd:51:61:ea:86:77:e2:54:60:0e:d8:6f:73:e9:
75:5e:3a:32:da:61:b1:00:70:8a:d7:f6:e1:95:18:
4f:ae:15:46:07:82:16:af:79:79:e9:da:88:b2:f0:
4b:a7:b3:8d:d3:b4:a5:77:9d:f6:c6:7b:77:09:53:
d3:bf:fd:e6:5e:39:29:60:09:dc:52:c1:42:63:a8:
cb:bf:cc:16:03:d9:c4:cd:93:15:10:05:24:e2:2c:
e6:66:a4:bc:e3:b1:01:08:79:18:a0:67:81:50:d4:
39:a4:3e:76:f3:6b:7e:c1:65:9d:93:17:a3:f0:05:
d4:18:e2:9d:26:d9:86:62:d2:28:61:7d:d8:10:ab:
75:9e:cd:c7:2b:d4:c6:c6:46:13:5c:13:c9:22:fc:
6b:eb:16:6b:85:11:ef:6c:98:5d:42:3f:4e:f5:b0:
2b:5b:68:2c:dc:b7:88:2e:8b:99:d7:71:0f:aa:1c:
44:c8:b4:44:fd:1a:cb:33:c5:15:2f:21:99:a7:2c:
26:d0:2e:69:19:8a:bb:eb:2b:5b:41:98:d1:52:a9:
ea:79:49:72:cf:97:5f:d5:d7:47:ce:a5:51:3c:8b:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:63:9C:00:26:53:67:1D:1C:08:C0:5A:DA:05:38:D4:E4:20:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C774/71FCBEB276EA11EA8470C05EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C774/71FCBEB276EA11EA8470C05EC4F9AE02/cWFjnAAmU2cdHAjAWtoFONTkIH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133480
sbgp-ipAddrBlock: critical
IPv4:
43.245.160.0/22
103.76.164.0/23
103.77.232.0/22
103.192.173.0/24
103.231.88.0/22
116.206.228.0/22
IPv6:
2400:fa80::/32
2407:a080::/32
Signature Algorithm: sha256WithRSAEncryption
1f:1a:04:f0:bf:53:d7:4c:01:a2:02:d5:f2:34:05:4a:c3:f9:
47:43:72:84:0b:7f:a8:33:18:00:86:ed:9a:0f:af:5a:27:3f:
66:b2:7a:8d:d1:e6:d8:12:e0:e8:00:5e:d2:98:4f:83:af:0e:
72:e7:62:79:b1:23:db:fa:d4:d6:df:25:46:99:6e:2a:06:87:
18:c4:f3:3c:bd:a4:6d:5d:d7:82:30:70:4f:3c:2a:fb:82:9d:
d8:84:f9:8b:3c:67:bd:36:b9:0b:88:c8:15:65:15:90:bb:b1:
ae:08:61:dd:cf:3c:e3:0b:ea:55:a0:37:65:ea:37:79:9f:6c:
b7:ef:39:18:3f:4f:38:74:84:d0:0c:c6:1a:1f:12:be:3a:44:
44:c1:31:a7:fd:b2:74:db:bb:2c:db:d9:ed:2e:f3:4b:2a:16:
f7:60:79:5f:67:28:05:96:81:3c:d1:3b:d1:74:3e:b0:21:b8:
dc:a6:89:a1:15:ca:2b:e4:60:d8:7b:8b:bc:f0:8f:de:9e:ff:
d7:b8:ee:5a:4c:ae:09:fa:b5:d9:ba:53:df:52:20:44:e8:48:
2a:f8:c3:e2:ed:fc:c8:06:af:82:bc:41:8a:cf:72:03:4c:3f:
48:a3:e1:9f:b5:43:77:6b:81:73:3c:a9:3a:9b:88:81:32:b8:
f4:7a:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 18:57:27 2023 by rpki-client on console-fra.rpki-client.org