Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npfU4BjtNOHv_rZcPkdLKz4cuT4.cer
File: npfU4BjtNOHv_rZcPkdLKz4cuT4.cer (raw, json)
Hash identifier: 6x2L7AAD9vu+ILhDyiI2RORUB+9PFgtjGEThf25b9K0=
Subject key identifier: 9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025307
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 03:17:03 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 151642
IP: 103.244.226.0/23
IP: 2001:df2:c1c0::/48
Validation: Failed, certificate revoked on Thu 03 Jul 2025 04:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152327 (0x25307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 03:17:03 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91A9C1E0000, serialNumber=9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:6a:ab:6d:80:ed:af:92:bf:af:da:90:f0:
ad:47:6b:b4:8c:58:7c:9b:65:79:0a:bb:b0:53:f3:
c7:38:3f:8a:ea:a2:4e:84:62:a5:a5:25:20:1f:36:
6c:39:ae:c5:21:56:83:5f:a7:a0:2e:d1:b7:f1:8b:
89:b3:93:72:f8:c0:67:70:24:d8:06:15:2b:8b:d8:
be:31:7f:b1:5a:27:af:9d:48:0b:0f:f9:96:34:8e:
09:56:ca:e6:48:ae:27:00:ad:5f:0f:97:75:df:d7:
50:ba:86:ba:60:6e:2d:63:a2:d6:0b:c0:1c:0b:12:
c1:20:40:fd:87:1f:bf:21:7e:64:a3:02:a5:c1:4c:
02:d4:fc:35:61:c8:b6:a1:04:b3:81:48:11:e4:b0:
46:6c:c8:a4:a9:a0:56:9c:0e:0e:5d:8f:72:21:01:
3c:f7:ef:b1:b1:8d:5e:8a:ab:fc:18:78:3c:58:3d:
b3:a0:69:f2:09:20:85:2a:13:b5:8d:41:3c:b1:ef:
be:40:25:ce:83:9b:95:c0:9e:41:95:49:d8:ce:1b:
1b:39:c0:95:f3:16:18:68:94:d6:5d:a1:af:51:56:
28:8d:b7:81:1b:72:28:ff:d9:9c:23:28:d5:0c:55:
ab:49:7c:3d:39:7d:4e:03:b3:1b:40:94:b6:fb:3e:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151642
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/23
IPv6:
2001:df2:c1c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:ee:74:a6:be:25:ad:1d:1e:9f:d3:29:4d:81:c6:e2:2f:7f:
a8:ee:e3:1f:28:b7:85:2b:fb:3a:0a:90:31:f3:7f:be:4f:6f:
4b:80:07:81:a5:50:e2:ef:8a:0c:f1:34:36:31:2e:3b:3c:4b:
f8:0b:f1:c1:57:71:03:bd:5f:9d:c3:f0:27:fb:a8:15:35:d0:
fd:0d:5d:22:73:43:73:17:97:eb:b0:2b:13:08:57:7f:6b:da:
8b:bc:3a:b2:bf:f1:20:37:3f:c9:fc:23:f0:3e:05:3c:cd:75:
c8:5e:11:f3:fd:fe:a4:c7:b2:57:f8:be:b9:bb:ee:9c:bc:75:
32:55:a1:74:53:d5:51:84:d4:21:08:ca:6d:6d:43:b9:c7:d5:
d3:13:a3:4d:bd:44:7b:9d:5a:36:43:3b:bd:b9:9c:ae:7d:a0:
e9:23:21:2b:04:df:a1:ae:1f:a6:5d:64:8b:63:41:e9:8d:02:
07:5f:f0:c3:34:1c:aa:56:06:74:3c:63:c4:b5:d9:60:dd:4a:
9a:63:1e:7e:6a:47:96:7e:6f:0e:90:4c:ae:5f:1d:d3:8b:78:
c8:ec:75:15:b5:f6:95:09:06:be:bf:32:fc:43:90:d7:8f:e3:
ec:be:91:12:00:94:2c:fc:0d:02:c6:11:3e:b6:99:1b:c8:b8:
04:59:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:38:23 2025 by rpki-client