Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oizFwqDIeu3_fi0U3q4aYD930hc.cer
File: oizFwqDIeu3_fi0U3q4aYD930hc.cer (raw, json)
Hash identifier: by0WgcjfI3qasB6mghTNQVwBwd5wGShPEIk02m/BvbY=
Subject key identifier: A2:2C:C5:C2:A0:C8:7A:ED:FF:7E:2D:14:DE:AE:1A:60:3F:77:D2:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D969
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/oizFwqDIeu3_fi0U3q4aYD930hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jan 2024 07:31:32 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 132083
IP: 103.70.88.0/23
IP: 2001:df1:f300::/48
Validation: Failed, certificate revoked on Sat 20 Jan 2024 06:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121193 (0x1d969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 19 07:31:32 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A918377D/serialNumber=A22CC5C2A0C87AEDFF7E2D14DEAE1A603F77D217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:b6:16:f1:2c:9d:72:dc:27:fc:54:eb:6b:
46:c5:77:30:6a:de:96:ea:ef:f0:37:c0:cb:a0:cd:
61:1f:0f:e6:12:99:f7:c7:1e:1e:44:ba:29:fd:1c:
82:d3:ba:a0:2a:a3:53:9a:45:01:f6:26:55:91:67:
58:be:26:ea:26:4b:97:cf:35:e1:19:aa:7d:80:d4:
63:2b:a0:10:6c:e1:1a:f1:8e:a6:5c:06:92:6a:df:
d3:60:01:2f:23:d6:9e:e3:bc:59:68:17:90:e4:c9:
5f:d5:ff:8f:9f:cb:dd:37:28:e8:1f:65:db:90:25:
3c:79:f4:a7:cd:0d:17:2c:e9:48:57:c1:f5:a1:07:
e6:9e:60:c8:fc:e6:fc:93:0b:8b:ad:ca:66:a1:6a:
b4:81:03:a8:9b:d5:b4:e5:f8:b7:38:83:d4:1d:c8:
de:b8:a8:0a:e2:3a:b9:6e:73:11:bc:5f:7f:00:30:
c3:2f:4a:c0:24:cf:73:55:4f:bf:d7:0e:29:5c:9c:
00:f2:3c:bd:b2:ba:70:52:a6:52:e9:78:a7:4e:16:
e9:94:1f:11:45:27:9a:ab:14:e0:47:33:41:70:49:
70:40:28:44:9e:f6:5a:6c:2e:6a:2a:a7:fa:75:cb:
0c:af:84:2a:55:31:d9:4f:d8:19:fd:6c:4e:5f:06:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:C5:C2:A0:C8:7A:ED:FF:7E:2D:14:DE:AE:1A:60:3F:77:D2:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/oizFwqDIeu3_fi0U3q4aYD930hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132083
sbgp-ipAddrBlock: critical
IPv4:
103.70.88.0/23
IPv6:
2001:df1:f300::/48
Signature Algorithm: sha256WithRSAEncryption
9f:b1:c7:30:9a:27:4c:e3:91:b8:e8:b9:63:4f:34:3b:0f:0f:
b1:2a:83:22:ac:af:6b:7c:65:fa:fd:49:0b:57:e2:4c:f4:1b:
49:42:61:66:14:ec:fa:75:4d:f6:fd:20:85:f7:49:66:db:5e:
c7:ab:39:db:da:f6:a9:00:04:43:05:90:b8:b2:e1:33:cb:17:
68:65:26:9a:f7:74:ae:b7:26:19:cf:38:21:02:8a:dc:3b:ea:
41:6d:35:1a:6d:39:c7:43:88:ac:7e:eb:a4:8b:9b:98:d5:de:
cd:be:52:b6:dd:46:d9:11:7b:f6:85:21:72:b0:12:cb:19:31:
96:78:23:64:78:d5:60:31:0a:86:5d:67:43:af:0c:f6:f2:7d:
15:9a:dc:47:b6:72:b1:89:dc:a6:13:92:52:16:08:bc:03:df:
3b:bf:8d:b9:dc:2c:3a:31:c2:d2:c6:da:37:c3:d8:c9:2e:25:
6e:a9:90:03:23:84:f6:a6:3e:d3:3d:82:ee:65:98:f0:97:44:
05:0e:ea:71:60:6e:87:4c:78:0c:0d:c0:b2:ad:56:7f:b0:48:
dd:e7:29:41:28:14:1b:c8:2f:3d:ef:77:35:c2:e1:44:63:15:
1d:b0:64:4d:83:7b:4b:ba:47:b9:ad:90:af:19:66:95:ae:2f:
8d:cc:0f:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 20 07:16:20 2024 by rpki-client on console-fra.rpki-client.org