Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
File: m1QzlZKSF-PscIr1Tlji-TjLHME.cer (raw, json)
Hash identifier: v1VcMLW6oQlvBTsolEl2nGN4s1dR7f0vGU8XLvq9g6s=
Subject key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01816F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 23 Dec 2022 00:07:37 +0000
Certificate not after: Sun 28 May 2023 00:00:00 +0000
Subordinate resources: AS: 132282
AS: 140704
IP: 27.0.232.0/22
IP: 103.68.108.0/22
IP: 103.208.84.0/22
IP: 103.214.68.0/22
IP: 103.230.140.0/22
IP: 144.48.80.0/22
IP: 2404:3d80::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98671 (0x1816f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 23 00:07:37 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:94:58:69:51:ea:c3:37:71:65:55:34:a4:
61:f8:27:1f:07:f9:0d:94:39:7e:bf:8b:67:a9:12:
11:b7:ed:2b:7d:be:00:97:1d:a3:fc:6e:b3:a1:ae:
c4:e2:06:f7:4e:f4:f0:da:b5:e2:08:26:80:d6:83:
c4:c9:4a:ee:fe:f5:85:be:cf:d3:fb:4c:52:7e:81:
df:6a:21:0a:ec:b2:68:23:ac:5b:6d:14:0a:28:fb:
af:82:14:31:a4:14:2c:01:3d:1a:57:2b:0c:18:9b:
0f:9d:54:0e:d3:39:84:30:8e:57:3d:25:bf:aa:aa:
74:0b:0e:c5:8e:c4:13:c1:1c:8e:cb:b2:03:05:be:
53:ec:8d:74:c6:81:aa:92:d8:66:85:a5:a1:a1:37:
3b:d8:cd:97:12:a6:85:5a:a8:03:63:40:fa:1c:ac:
cf:75:38:60:06:06:99:92:42:62:9c:0c:91:61:e0:
29:be:57:58:b8:87:bb:76:89:1e:2d:b1:6d:e5:c7:
05:3e:38:fa:24:fb:92:cf:26:cd:a8:74:32:86:c5:
fc:5c:0b:f0:d8:63:09:61:f8:f0:76:c5:ba:1b:07:
cf:40:e3:bd:98:c3:20:52:42:7d:d5:91:5a:c3:d5:
c8:52:fb:59:e2:87:e6:b3:00:68:0e:cd:2a:ff:26:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132282
140704
sbgp-ipAddrBlock: critical
IPv4:
27.0.232.0/22
103.68.108.0/22
103.208.84.0/22
103.214.68.0/22
103.230.140.0/22
144.48.80.0/22
IPv6:
2404:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
7c:e1:32:a1:71:33:3a:d6:bf:4d:4a:92:79:54:f9:9a:27:c6:
e3:66:9f:c0:3c:45:86:c7:07:da:87:f3:b7:77:b4:e8:90:bd:
2f:f5:2b:4f:ee:02:27:b4:27:df:ee:ac:69:49:14:f3:c3:01:
97:c6:9f:99:8c:5c:f6:ae:f7:49:8a:ec:79:01:73:0c:53:cf:
0a:21:0c:d3:70:ef:8a:51:12:65:88:34:07:6f:fa:ef:66:47:
c5:30:8a:5b:f1:aa:8e:59:64:a2:69:21:5f:4d:f6:22:28:7e:
6f:17:08:c9:f6:ff:69:a3:bd:06:a1:be:25:e2:98:e1:d6:9f:
08:44:67:93:34:87:0a:db:3c:50:13:21:eb:07:30:71:2d:8e:
bb:66:f3:fa:d4:de:ca:bc:96:2d:0d:d4:b1:36:5e:65:15:40:
34:58:fd:8e:dd:88:84:bb:89:56:4f:e3:8f:93:de:29:8c:3d:
18:be:2b:55:c5:18:6f:68:1c:5c:ea:2b:e9:3b:de:2f:0a:75:
9a:9b:ce:c1:f6:a6:0d:75:0f:ca:6c:ac:64:23:4c:43:48:37:
37:78:26:86:c0:57:12:e1:83:dc:7f:de:ff:46:64:39:9e:f8:
fc:68:5b:c7:cc:8c:3c:86:18:a6:b6:b0:df:b9:d5:90:03:da:
3e:20:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org