Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
File: ggaoxZpO7k5UPU72kQicMGdgr5w.cer (raw, json)
Hash identifier: Yq8wy5cl9Q1Kb/pIxBJ7uzROdxFDWwgZAxEYLjbHBSo=
Subject key identifier: 82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C3AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Thu 12 Oct 2023 13:36:48 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 151849
IP: 202.134.56.0/23
Validation: Failed, certificate revoked on Tue 02 Apr 2024 04:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115629 (0x1c3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 12 13:36:48 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:73:66:32:a8:c5:8b:8b:c9:e4:e3:b1:b4:
e0:47:75:3d:35:f2:81:ad:19:37:cb:ac:6b:5e:1c:
bc:14:d0:b3:b6:d8:ff:8f:d7:8a:9b:39:4e:99:2d:
8d:e9:3f:2d:e5:70:da:1a:42:f3:8f:61:af:29:53:
69:57:b5:59:a6:3b:89:94:fd:fc:ed:e9:83:ab:1b:
d3:82:ac:32:d3:7d:bb:a8:78:32:19:d3:e8:61:78:
cb:47:c0:b6:c3:97:1a:04:4b:a7:ee:14:7f:a6:b4:
e0:1a:98:62:91:a9:2a:88:6b:a0:29:ae:52:67:b6:
95:2a:3b:24:1c:9f:83:fb:4c:18:70:73:df:77:f9:
6b:a7:82:24:32:57:f5:4f:5c:74:9b:77:fd:a8:63:
75:2c:8b:1d:c0:ca:0b:25:42:f6:94:aa:81:1f:28:
38:1f:b5:4d:e3:68:b9:c9:30:78:7b:87:62:77:06:
97:ab:aa:0a:aa:59:e1:e0:8b:07:0a:cb:d7:bf:ac:
31:7a:66:5a:01:01:b6:24:0f:f5:53:1f:f8:bd:9f:
35:5e:49:4b:df:16:b2:db:6d:db:9c:f4:cc:e5:48:
83:93:3d:07:d1:d2:f5:31:4f:9f:2a:df:09:28:ef:
e5:a0:f1:4e:33:3d:c8:dd:e2:0e:b5:3b:59:37:2b:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151849
sbgp-ipAddrBlock: critical
IPv4:
202.134.56.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8d:96:9b:41:96:7d:32:8f:b2:33:bb:73:5c:9e:f6:60:8c:
2e:80:03:96:a9:04:9e:6d:32:31:8d:f3:b0:c7:3c:b1:28:43:
cc:9c:a2:06:a4:04:2f:eb:96:d5:22:93:d6:70:7c:11:e1:ff:
e8:60:73:2f:05:22:11:b9:cc:7d:38:ee:1c:81:f0:5a:8c:d3:
cf:ec:c0:86:ef:c9:54:31:3f:a4:8c:e3:93:a8:2e:dd:79:fe:
1d:0c:a0:e4:69:c5:70:ea:57:64:01:62:57:08:70:80:95:06:
df:77:40:c5:26:57:ba:45:33:de:85:2a:54:f2:e6:34:fd:aa:
68:79:6f:88:58:28:6a:49:59:e7:6f:38:b4:cd:49:30:e6:83:
55:15:af:ee:17:f4:91:6c:16:f1:ec:17:3d:9d:0d:83:37:7d:
e9:7f:5f:a9:fc:e6:c3:da:37:2a:1c:fb:93:e8:b1:6d:e8:82:
4a:66:8e:ab:44:d0:b1:b9:d1:3d:44:05:e1:69:62:0a:4d:9d:
0c:fa:ca:f2:03:d9:98:7f:0e:22:c7:b6:51:52:e0:a6:ea:98:
29:51:74:47:39:2f:50:02:f9:31:10:dc:17:6b:35:49:39:a1:
9e:e2:29:81:cf:ef:92:4f:0b:fa:52:e6:96:02:ff:19:47:dc:
c8:84:91:f2
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIDAcOtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAxMjEzMzY0OFoXDTI1MDEzMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxRkE2Q0EwMDAwMTEwLwYDVQQFEyg4MjA2QThDNTlBNEVFRTRFNTQz
RDRFRjY5MTA4OUMzMDY3NjBBRjlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoz5zZjKoxYuLyeTjsbTgR3U9NfKBrRk3y6xrXhy8FNCzttj/j9eKmzlO
mS2N6T8t5XDaGkLzj2GvKVNpV7VZpjuJlP387emDqxvTgqwy0327qHgyGdPoYXjL
R8C2w5caBEun7hR/prTgGphikakqiGugKa5SZ7aVKjskHJ+D+0wYcHPfd/lrp4Ik
Mlf1T1x0m3f9qGN1LIsdwMoLJUL2lKqBHyg4H7VN42i5yTB4e4didwaXq6oKqlnh
4IsHCsvXv6wxemZaAQG2JA/1Ux/4vZ81XklL3xay223bnPTM5UiDkz0H0dL1MU+f
Kt8JKO/loPFOMz3I3eIOtTtZNyt+7wIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFIIG
qMWaTu5OVD1O9pEInDBnYK+cMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFG
QTZDQTAwMDAvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxRkE2Q0EwMDAwLzAvODIwNkE4QzU5QTRFRUU0RTU0
M0Q0RUY2OTEwODlDMzA2NzYwQUY5Qy5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAlEpMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByoY4
MA0GCSqGSIb3DQEBCwUAA4IBAQCQjZabQZZ9Mo+yM7tzXJ72YIwugAOWqQSebTIx
jfOwxzyxKEPMnKIGpAQv65bVIpPWcHwR4f/oYHMvBSIRucx9OO4cgfBajNPP7MCG
78lUMT+kjOOTqC7def4dDKDkacVw6ldkAWJXCHCAlQbfd0DFJle6RTPehSpU8uY0
/apoeW+IWChqSVnnbzi0zUkw5oNVFa/uF/SRbBbx7Bc9nQ2DN33pf1+p/ObD2jcq
HPuT6LFt6IJKZo6rRNCxudE9RAXhaWIKTZ0M+sryA9mYfw4ix7ZRUuCm6pgpUXRH
OS9QAvkxENwXazVJOaGe4imBz++STwv6UuaWAv8ZR9zIhJHy
-----END CERTIFICATE-----
Generated at Tue Apr 2 05:11:07 2024 by rpki-client on console-fra.rpki-client.org