Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
File: ewWczGC6qvz28UEhbv3WjocMJVE.cer (raw, json)
Hash identifier: W4aOJYGtvzPONl5yd/C740pI6SM8oZHButFRZ5l19CQ=
Subject key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B28E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Jul 2023 19:06:42 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 43.255.80.0/22
IP: 103.238.128.0/22
IP: 2401:4e80::/32
Validation: Failed, certificate revoked on Sun 17 Dec 2023 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111246 (0x1b28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 27 19:06:42 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:a8:ab:83:20:55:d1:94:a7:c9:b2:31:71:
ae:5b:5f:0c:7a:96:28:83:91:1e:f9:16:17:b7:e0:
fb:2c:db:1e:4a:bd:9b:8d:9c:f9:fb:c4:42:fd:70:
2e:fe:bc:91:c5:49:6e:f0:0e:5f:8a:d3:cb:a4:8b:
60:cc:fb:14:7a:30:da:cc:61:7a:cf:76:79:49:91:
4c:28:62:97:c8:13:48:3e:28:89:73:9a:12:b4:f2:
24:62:c3:48:18:9f:4d:6b:58:db:18:f1:36:f4:06:
cc:3e:d8:1a:2b:f7:ad:70:04:93:4c:88:a0:53:aa:
c0:7f:5f:48:d7:5c:ef:48:c4:8f:dd:5e:87:a1:75:
82:93:7f:32:72:24:d1:c5:f7:f6:bc:67:4a:2a:46:
ec:1b:6e:e8:e1:d0:7e:5f:a1:2f:8a:69:78:6d:e3:
d2:b3:b3:ed:13:f9:82:cf:f6:fa:c4:76:db:b2:9d:
01:15:92:e0:f9:d7:65:8f:19:df:93:be:b6:0b:30:
da:de:4a:48:d8:88:4b:16:cd:9b:04:00:58:c0:78:
07:23:16:3a:76:29:66:39:bf:5f:75:2d:2e:86:a5:
db:54:2d:e5:c8:f6:11:c9:df:b9:01:10:7c:22:79:
af:a7:da:a3:3a:b7:5b:eb:73:ec:30:cd:a6:51:5a:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.80.0/22
103.238.128.0/22
IPv6:
2401:4e80::/32
Signature Algorithm: sha256WithRSAEncryption
70:16:31:11:3b:fe:c9:4d:62:28:89:4d:b6:6a:3b:ad:44:fd:
f7:43:33:b1:c9:78:98:8b:bf:56:07:b1:99:bf:4c:a1:3f:74:
5e:1b:2d:7b:70:3a:41:67:0f:3c:0e:02:90:22:79:55:3b:40:
37:9f:4e:0a:e0:70:29:68:6c:25:e5:a0:a1:b6:90:51:6a:6b:
25:56:30:ed:0b:27:8a:88:55:c9:27:99:35:e0:79:a2:07:90:
2b:14:42:de:9c:5f:d0:b1:f9:67:31:2d:b9:0a:e2:15:46:37:
b7:ae:89:26:31:d7:09:69:97:ff:6f:ad:1f:da:fc:da:95:4d:
5c:6d:05:b6:08:b0:d3:f0:26:9d:92:cc:39:69:bd:b5:82:d3:
06:64:ed:f5:16:06:61:b3:a9:75:59:f3:b2:10:66:23:d0:f8:
01:53:28:2b:16:27:f4:59:dc:48:02:54:cf:cc:c6:46:86:77:
1a:09:47:5d:b2:d9:0c:30:41:df:5d:43:5c:3f:6b:13:06:f9:
72:7e:93:a3:95:f1:8b:65:d7:f0:5c:80:b1:91:c5:4d:b2:f9:
cb:57:84:8a:c8:20:73:2f:de:73:c1:05:4e:f2:1f:a3:d5:f3:
76:c4:7a:2c:a0:89:49:cb:a1:14:ee:23:1c:5a:36:a6:5b:54:
2d:82:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org