Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nVooFltTps91tGAgDxSYXguuv0s.cer
File:                     nVooFltTps91tGAgDxSYXguuv0s.cer (raw, json)
Hash identifier:          t8oxbigubEgYV4V4cmwuM8N6oTnES8z48ru25RU85yE=
Subject key identifier:   9D:5A:28:16:5B:53:A6:CF:75:B4:60:20:0F:14:98:5E:0B:AE:BF:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D591
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 22:31:33 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 135649

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120209 (0x1d591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 22:31:33 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91AB98A/serialNumber=9D5A28165B53A6CF75B460200F14985E0BAEBF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:73:06:61:b0:bb:de:a3:90:cd:be:aa:e0:
                    b5:37:a7:3c:7b:33:7e:6f:fe:f0:9f:99:84:6e:a5:
                    c1:bb:10:7e:95:dc:69:66:59:de:ff:c4:6b:f9:01:
                    5b:a5:3a:23:de:52:04:af:dd:4c:66:46:f9:01:33:
                    5e:65:a6:0c:d3:ed:7e:98:fa:77:65:29:01:44:19:
                    60:c6:06:3e:3c:00:8b:96:f2:34:2c:98:ca:48:43:
                    e9:ff:2c:6d:da:f1:be:10:3b:6d:76:1b:00:1b:a2:
                    03:df:f7:1b:48:22:3e:44:38:8a:e5:eb:e5:15:c0:
                    be:6d:13:80:41:2a:65:2b:59:50:2a:3b:79:03:81:
                    c2:cd:17:d8:bd:8c:f4:e0:90:1d:f2:b8:86:83:37:
                    b5:96:36:e2:19:b7:1b:5b:5e:16:5a:2b:40:c6:6d:
                    00:2c:8f:49:6e:23:b1:f2:08:0e:13:c8:34:1c:77:
                    6b:db:a7:78:74:a4:8b:fe:31:fb:88:a7:cd:28:4f:
                    22:a4:b5:d4:30:d4:3c:f3:b6:76:4d:2d:cd:21:ce:
                    93:64:04:4b:e5:c1:27:76:b0:27:30:f9:e3:46:13:
                    80:d1:71:2e:3e:ed:39:4f:7c:7a:e8:9d:68:d8:51:
                    28:f3:ab:ed:01:5b:28:18:ae:13:54:1d:75:6a:b3:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:28:16:5B:53:A6:CF:75:B4:60:20:0F:14:98:5E:0B:AE:BF:4B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135649

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:12:57:71:b6:a0:20:2e:38:b7:1c:91:64:45:0e:93:26:
         a5:10:14:ed:9c:fb:3e:d7:8b:2d:cf:b8:00:cb:a3:74:13:8f:
         65:29:b8:54:64:ef:74:4a:c4:69:e6:3a:17:f7:e2:65:94:ea:
         b7:0a:8d:71:41:70:a1:35:d3:03:9e:dd:e4:38:51:4c:a5:66:
         ae:dd:f4:61:cd:00:26:e0:2d:63:43:73:f9:c5:a6:77:ac:c0:
         71:af:b2:54:23:7b:60:3e:82:88:4d:65:63:34:77:56:e7:db:
         a9:da:a7:3a:be:74:57:f1:7f:31:f6:f5:65:b8:1b:51:a7:b8:
         5c:07:5c:66:03:d7:3a:42:d2:5d:45:c8:26:e7:fc:a6:fe:53:
         40:2d:37:05:c3:71:a9:ce:ab:92:3d:6e:6e:2a:fc:76:62:be:
         45:9b:da:39:71:a8:b0:d7:4c:3e:78:f9:2c:48:05:c8:94:4b:
         7e:cb:e2:61:7a:ff:48:6e:1f:19:41:6d:f1:a2:ee:ab:bd:58:
         0d:dd:32:2a:02:5d:92:ab:77:f3:3b:82:5c:4b:32:14:ee:80:
         b4:dc:f2:20:ed:54:c4:22:47:4a:a5:b9:12:54:b0:07:4e:5c:
         15:77:a9:f6:49:3b:d5:8d:05:07:a7:b2:fb:86:a5:9d:ce:57:
         30:34:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:55 2024 by rpki-client on console-fra.rpki-client.org