Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i4aPIm_ndHl_dqKbWE7OqN6af6M.cer
File: i4aPIm_ndHl_dqKbWE7OqN6af6M.cer (raw, json)
Hash identifier: 7YYAemgG2T7GzNhEsc9j0t0agF/H/sNcFMvefk4AJSQ=
Subject key identifier: 8B:86:8F:22:6F:E7:74:79:7F:76:A2:9B:58:4E:CE:A8:DE:9A:7F:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E8CB/5703919C0B8511EA86A52A53C4F9AE02/i4aPIm_ndHl_dqKbWE7OqN6af6M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E8CB/5703919C0B8511EA86A52A53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 14:00:25 +0000
Certificate not after: Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources: IP: 2402:1cc0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117767 (0x1cc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 14:00:25 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=A913E8CB/serialNumber=8B868F226FE774797F76A29B584ECEA8DE9A7FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:b3:e7:69:70:76:c5:ea:5e:df:3b:cb:1b:
5a:05:2a:f6:64:d7:28:7b:ca:e4:fb:e7:dc:93:6e:
d6:4e:5e:42:d9:0f:81:34:a6:0c:08:37:34:e4:04:
16:d8:68:40:eb:f7:60:a5:3a:98:53:b9:eb:fa:8b:
3a:52:e3:d4:14:c2:db:07:b8:27:cf:d3:5d:b5:21:
bd:17:62:fd:50:ee:89:0b:10:a9:f6:02:17:a6:6f:
14:a2:f2:ec:df:17:96:cf:26:73:7f:43:9d:35:00:
fb:13:74:c9:3c:d7:f5:aa:47:51:f0:92:a1:36:18:
21:ec:2f:64:3a:81:cb:ac:ee:dc:bc:e9:a4:e3:52:
28:bf:4e:da:db:af:13:f1:c1:b2:63:2e:f5:a9:b0:
48:73:6f:c2:0a:90:2c:03:00:4c:cb:81:1f:09:9a:
23:a5:13:d4:de:a5:9a:3c:19:2e:26:a9:08:8c:53:
23:1c:b2:40:8f:a5:b8:46:fc:9f:de:c8:9a:97:0f:
9f:6b:c3:c1:01:63:f3:8b:09:db:52:e0:55:ed:90:
09:38:4d:d9:ae:dd:4b:26:e6:5a:7e:82:03:17:c7:
f3:ec:44:72:b2:06:59:c9:37:37:eb:53:52:a9:e3:
30:0f:06:f6:ce:ab:67:d0:5e:ed:3d:af:e6:f8:b2:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:8F:22:6F:E7:74:79:7F:76:A2:9B:58:4E:CE:A8:DE:9A:7F:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8CB/5703919C0B8511EA86A52A53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8CB/5703919C0B8511EA86A52A53C4F9AE02/i4aPIm_ndHl_dqKbWE7OqN6af6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:7c:e8:18:26:7f:61:6a:0d:8c:2b:9b:ff:d9:e1:44:1b:50:
83:f6:3a:36:08:b9:9b:82:0a:57:5c:08:d2:11:c3:ff:ba:62:
df:63:ce:61:4c:ae:6f:9b:e0:89:3d:55:58:5b:35:29:71:63:
48:2a:e7:3c:6a:2c:6c:05:90:d3:2a:49:2a:1f:9d:5a:f8:b8:
9c:67:8b:97:e9:87:66:64:66:6a:64:2b:25:1e:2d:29:5f:a9:
81:fb:fa:d6:6d:cc:5e:9a:93:0a:1a:bb:67:b6:77:04:f1:d0:
a1:db:62:bc:ee:4d:bd:7f:07:23:4c:f3:84:8c:55:71:f6:f3:
f3:9b:53:34:5b:61:81:0a:8a:03:55:32:0b:86:46:75:a9:c1:
ec:d2:d7:eb:81:c5:20:e6:5e:95:89:61:4c:4a:d2:f0:52:b6:
4b:7b:4d:69:04:b7:36:4c:e2:1d:c6:75:53:09:3d:2b:28:32:
ec:3d:2a:bf:36:0f:49:7f:e7:8f:d1:0f:f7:67:c8:cc:92:12:
25:07:3d:1a:9e:29:e9:a4:c4:f6:a3:13:73:cc:38:66:10:40:
fd:7b:ae:d3:47:42:cd:c1:6c:22:41:2f:1f:a2:2b:6a:f4:57:
ba:da:01:3f:b5:86:4b:6e:8a:45:e6:ad:89:97:b9:60:0a:5e:
b2:37:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org