Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer
File: nS0PsoYg0aU5gFqMXEhRIXDgfD8.cer (raw, json)
Hash identifier: 10YmLvotU1FsZZWpINvJXM3oT1+Z6PZMgurPymmuE9A=
Subject key identifier: 9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DB76
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jan 2024 17:10:40 +0000
Certificate not after: Sat 01 Jun 2024 00:00:00 +0000
Subordinate resources: AS: 137210
IP: 2402:23c0::/32
Validation: Failed, certificate revoked on Thu 29 Feb 2024 12:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121718 (0x1db76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 17:10:40 2024 GMT
Not After : Jun 1 00:00:00 2024 GMT
Subject: CN=A9125F18/serialNumber=9D2D0FB28620D1A539805A8C5C48512170E07C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:d5:11:9b:6e:1a:c6:10:12:f3:c1:67:c2:
5a:c5:60:73:e8:69:6f:16:9b:7b:66:27:5c:f0:80:
71:e4:80:df:99:01:c0:da:fe:27:c8:e6:7e:58:67:
6f:85:b9:04:6f:60:54:fe:4f:ae:b6:de:d3:0e:fc:
62:c9:da:26:12:db:04:70:e5:b9:92:5a:11:47:f8:
f1:86:d2:c6:59:80:57:5d:a1:ea:ea:5e:0b:a1:61:
02:e6:f2:29:d7:4a:72:74:38:3a:81:1c:c1:20:b7:
75:22:56:a5:bc:05:b4:4b:76:8a:57:21:1f:9e:03:
9d:f3:d1:07:e4:85:fb:1b:6e:81:5c:cc:d3:1e:e9:
10:1e:d8:cb:8c:d4:64:5b:7b:d8:55:44:7c:4c:3e:
da:75:89:ad:ea:2d:0f:a4:9b:06:7d:94:2f:27:fd:
b7:90:e3:55:e7:d4:38:fd:4b:6c:84:5e:d3:b0:6b:
8e:fb:ab:80:8e:23:b5:ae:8f:cb:96:07:e1:a1:da:
85:4c:36:c0:e2:3d:97:e9:fb:73:98:c0:ec:50:6b:
ce:6c:cd:19:7b:3e:75:fc:bd:94:8d:3e:ce:a9:de:
e7:15:e2:ee:42:30:49:25:80:bc:98:ac:e6:75:53:
a1:35:90:18:06:53:2e:98:d1:dc:d3:f9:30:db:0b:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:0F:B2:86:20:D1:A5:39:80:5A:8C:5C:48:51:21:70:E0:7C:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125F18/6FAACF48DB0911E7878C3185C4F9AE02/nS0PsoYg0aU5gFqMXEhRIXDgfD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137210
sbgp-ipAddrBlock: critical
IPv6:
2402:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
76:6b:13:3d:ea:70:03:73:4d:29:2c:ba:eb:6e:75:54:67:89:
da:26:8e:f6:8b:e1:24:e8:40:08:22:05:25:95:dc:50:ba:c6:
bf:9c:4a:cd:97:8b:6f:29:75:57:52:b7:a4:dc:7f:bb:e2:6d:
18:5a:a2:61:ba:2f:9c:f6:a9:e2:02:af:19:92:81:82:d3:0e:
34:04:3a:94:60:5b:50:5b:3f:f0:86:05:6c:0e:b5:6f:a1:65:
ef:3e:99:8b:ab:03:e1:8d:3d:e5:52:15:76:69:2c:dd:40:32:
20:e0:ae:31:fa:f4:dc:03:40:56:59:08:68:a6:c1:88:b2:d1:
5e:32:6d:75:68:3d:ac:24:9e:fb:f0:33:57:cb:40:02:80:3a:
86:d6:27:62:88:73:7d:e8:66:84:43:2c:f3:11:17:a3:41:20:
79:91:24:bf:4b:5d:07:5f:54:a4:bb:10:14:28:d7:ae:67:2b:
f0:b2:cd:0f:df:b9:72:33:9d:04:92:77:47:fb:48:e4:63:dc:
03:8a:16:cc:6f:36:51:1b:0a:c0:19:22:f6:16:ef:78:19:19:
6c:be:f6:16:ca:b5:0f:18:56:c4:ac:ba:fc:7b:df:f0:44:8d:
5c:25:9c:96:1c:90:1b:40:fc:95:80:ac:81:ee:bf:0b:34:e9:
dc:be:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:19 2024 by rpki-client on console-fra.rpki-client.org