Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9bxsCzyY_3RKRKZbq08B6GozdE.cer
File: p9bxsCzyY_3RKRKZbq08B6GozdE.cer (raw, json)
Hash identifier: VH8DbZkwYciHGK1inh+B3UuSs0Apfx95+/DQSjzj3KA=
Subject key identifier: A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01432D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/p9bxsCzyY_3RKRKZbq08B6GozdE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Feb 2022 14:30:00 +0000
Certificate not after: Thu 02 Jun 2022 00:00:00 +0000
Subordinate resources: AS: 139820
IP: 103.145.166.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82733 (0x1432d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 14:30:00 2022 GMT
Not After : Jun 2 00:00:00 2022 GMT
Subject: CN=A9167130/serialNumber=A7D6F1B02CF263FDD12912996EAD3C07A1A8CDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:2a:f6:36:81:fa:4e:c7:7d:0b:23:06:a5:
1f:93:0d:0d:1c:34:bc:66:57:25:7b:a1:68:20:a7:
70:5d:cc:aa:e3:7b:cd:2c:d3:3d:57:d1:7b:d8:92:
90:ef:51:22:29:2d:b4:4e:ec:fc:b1:d9:36:66:11:
76:25:45:5e:4e:87:4e:3f:3b:24:91:84:e5:aa:7a:
44:2e:be:e5:d5:12:e8:9b:6c:5e:27:e7:d0:aa:ff:
64:68:42:18:3b:60:b9:1f:2b:2c:c9:3e:27:e3:c3:
5d:82:60:bc:4e:60:06:67:83:56:6b:e9:c2:30:42:
ed:00:dc:e1:c8:25:e7:19:9c:bd:9d:68:6a:bf:03:
87:1e:88:94:bb:a3:e0:bb:b6:34:45:fc:a4:89:c5:
f9:62:c0:91:03:f9:eb:c5:13:c2:ed:63:01:34:df:
2c:8c:cd:81:ed:6f:8a:19:2a:de:e5:f5:77:ea:35:
f2:5d:82:6e:d5:7a:d4:03:39:0d:3b:4f:4c:af:77:
aa:ee:25:77:93:eb:b1:52:d0:01:4b:12:3b:f9:17:
19:2f:11:7f:59:7d:30:c8:9f:a8:98:57:47:91:66:
7b:0f:6e:72:87:c6:46:54:d8:69:0c:61:0b:34:39:
1b:c3:01:82:53:40:ef:f9:d1:e4:f4:97:19:ba:78:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/p9bxsCzyY_3RKRKZbq08B6GozdE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139820
sbgp-ipAddrBlock: critical
IPv4:
103.145.166.0/24
Signature Algorithm: sha256WithRSAEncryption
12:76:17:18:00:2f:cf:35:b3:bb:9c:60:10:7a:7f:28:07:f6:
20:4f:43:fc:c3:87:cf:5b:dc:ab:fc:45:59:db:f2:d4:76:bc:
53:45:3e:08:f6:b5:95:d4:6b:e0:d9:fe:75:97:02:18:aa:99:
27:27:4d:4b:cb:bb:82:36:d8:38:00:9b:4b:f0:aa:c2:57:92:
38:ed:b4:19:97:7e:d8:87:0d:93:e9:50:cf:67:ce:25:33:7c:
e9:d7:b4:9e:16:4f:7e:7e:26:44:60:95:d1:eb:9c:ee:64:3f:
23:66:6a:5c:3f:1a:15:44:8f:56:88:5e:ba:45:04:81:bc:53:
62:a8:48:ea:a7:ff:a0:c3:49:d5:b8:f8:09:c1:a0:70:49:5a:
70:0a:f3:64:b7:11:c9:43:52:91:4f:dc:f1:b5:e4:0e:07:89:
cc:98:b4:ba:79:ce:8d:4c:56:26:00:21:f3:d5:1d:ef:59:72:
18:e6:21:6b:50:17:9d:80:eb:58:b8:af:2d:6c:25:c9:50:ac:
16:41:30:90:12:3c:e1:5d:44:ba:69:3f:23:4e:57:87:77:63:
8c:50:a5:f9:db:6c:44:3b:46:b6:71:03:45:af:32:d8:fb:d1:
bc:9c:6c:c5:b8:ef:22:b4:ff:96:c2:2d:35:18:1e:5e:7b:03:
dd:e4:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:55 2024 by rpki-client on console-fra.rpki-client.org