Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMSNGwt1g9PmGc7gcKedCdxpR6c.cer
File: iMSNGwt1g9PmGc7gcKedCdxpR6c.cer (raw, json)
Hash identifier: cWhiSsdbVpPxZWHabQm4Uei/O7P5ae3kPeo+t60fwqQ=
Subject key identifier: 88:C4:8D:1B:0B:75:83:D3:E6:19:CE:E0:70:A7:9D:09:DC:69:47:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01710B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/iMSNGwt1g9PmGc7gcKedCdxpR6c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Oct 2022 08:27:43 +0000
Certificate not after: Tue 31 Jan 2023 00:00:00 +0000
Subordinate resources: AS: 64081
IP: 27.116.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94475 (0x1710b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 08:27:43 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=A9130BAE/serialNumber=88C48D1B0B7583D3E619CEE070A79D09DC6947A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:98:88:d9:fb:72:0e:85:a0:b0:a0:a0:b8:
fd:42:ca:5f:d3:38:fa:6b:20:47:9a:07:cd:12:00:
2c:df:c8:63:98:78:5e:69:5e:9a:f2:38:43:f0:7e:
bd:dd:db:2c:db:8e:98:2b:7a:9d:56:d2:2c:79:9f:
24:ec:8e:8d:2c:22:e5:d6:c3:72:69:07:78:c3:9c:
22:c1:66:ad:81:f8:91:86:ad:c8:3d:de:41:41:d1:
c9:68:52:af:f3:b7:e6:9a:86:4e:26:24:a9:44:49:
16:d6:38:4d:77:36:14:79:8c:1d:d1:09:e3:7a:c5:
ff:3b:91:e7:24:ac:9f:c2:04:5d:e3:5e:cc:14:cf:
61:50:fd:cb:1e:fe:ac:55:70:55:90:eb:a3:68:74:
ab:6d:1d:6a:a5:4c:d8:bb:a0:6e:da:39:6c:0d:d1:
1a:68:3f:f7:3b:44:14:d6:4c:40:74:0a:d4:57:6b:
b2:65:4e:0d:84:82:0b:af:1e:00:ab:a3:f7:25:f8:
b0:db:04:e0:45:df:b6:ba:d3:59:7f:0d:8e:d1:95:
05:b7:be:88:51:09:91:41:c2:e6:4e:51:3d:38:6b:
fc:34:1c:c2:71:bc:fe:1b:66:ed:bf:c0:23:dd:30:
bc:71:90:42:26:30:9d:fb:d0:d0:aa:02:3a:43:ff:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:8D:1B:0B:75:83:D3:E6:19:CE:E0:70:A7:9D:09:DC:69:47:A7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/iMSNGwt1g9PmGc7gcKedCdxpR6c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64081
sbgp-ipAddrBlock: critical
IPv4:
27.116.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8f:ff:d5:2e:1b:d2:18:01:40:be:c8:f9:ce:e9:b1:70:23:
2d:e1:40:1d:b2:44:9c:2c:0d:91:8c:3e:08:1a:39:d4:6d:2a:
bb:9b:be:61:1a:79:e4:99:31:88:f7:ec:a1:c6:36:dc:09:36:
e9:67:c6:8c:88:f6:c4:b8:f6:e7:6d:7f:4d:5d:7f:73:49:cb:
ab:f2:c7:cb:9c:5a:66:d7:e0:02:ff:97:ac:5d:7a:77:f9:4c:
5f:73:98:99:ce:17:13:3c:6d:a4:35:7f:3f:c8:b5:4e:c0:1a:
b3:be:ae:6b:c1:a7:28:85:ea:fa:3a:20:5a:44:2c:a2:58:b8:
bf:e1:74:ac:74:c0:cd:f4:b7:a1:af:fc:61:62:7e:1e:4b:96:
12:c1:4b:e5:9c:cb:9c:10:77:e0:ff:40:91:0f:d6:2f:f1:b3:
5f:35:c0:0f:a4:d3:2f:be:30:5e:93:c7:56:62:2c:36:c6:f5:
b4:09:82:de:ea:44:e9:b5:b4:0f:4a:fa:62:89:33:fa:fb:0e:
a8:52:a8:9a:77:ae:50:7d:57:87:f5:e6:d2:aa:ba:0b:b3:08:
9a:af:84:84:2f:03:71:4f:cd:37:e3:53:80:21:e0:3b:86:b5:
2b:4c:2b:f9:7a:b6:5e:30:e1:84:7c:db:dc:99:71:d2:87:81:
82:5f:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org