Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pP_kDMj8cnuHFFIS0srW0qsetbU.cer
File:                     pP_kDMj8cnuHFFIS0srW0qsetbU.cer (raw, json)
Hash identifier:          cFiWb/GZzMG6a8/TaP2i5xMnB/gkj+K5fhz9+L5BoHM=
Subject key identifier:   A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B33D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/pP_kDMj8cnuHFFIS0srW0qsetbU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Jul 2023 14:34:13 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 142294
                          IP: 103.167.164.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111421 (0x1b33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 14:34:13 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A914EBD6/serialNumber=A4FFE40CC8FC727B87145212D2CAD6D2AB1EB5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:49:ce:a7:ee:22:19:5e:e0:bd:54:4e:51:
                    42:ac:e3:1b:08:82:0f:bd:96:d5:3a:05:33:3b:78:
                    95:1b:8b:98:a7:3f:37:c7:77:7e:05:fe:36:c6:95:
                    ce:e4:0a:73:63:0c:e4:df:4d:4f:2a:aa:92:78:ff:
                    ff:8d:3e:53:4a:d6:34:8d:20:01:65:03:14:8a:b3:
                    a2:19:97:db:8c:b0:6c:60:23:88:c1:69:58:d2:8f:
                    19:9d:6a:f7:f5:e9:d8:f1:6e:cc:ee:fd:2d:30:6c:
                    c8:eb:e9:ec:1a:de:45:fb:dc:69:7e:b6:42:1c:a3:
                    a4:e7:c8:0e:86:eb:7f:0a:71:18:e1:3b:ff:b5:fd:
                    24:6b:38:49:e3:55:34:30:34:10:d5:de:71:cc:9a:
                    57:bc:33:dc:50:f7:a0:2a:38:c2:82:56:74:15:6f:
                    7b:df:e5:4f:b6:f9:b9:60:92:0d:ea:05:8e:56:0b:
                    7c:2b:34:c6:ef:9c:14:e8:26:ee:af:e2:a8:6a:1e:
                    1c:ad:a8:e2:9a:dd:d6:25:28:9b:57:4b:d5:75:ae:
                    1b:83:00:18:67:44:9a:1b:f0:53:f5:b5:5a:c5:37:
                    60:ec:84:7c:3c:fe:86:f7:9a:f2:cc:f9:69:c2:41:
                    b8:09:fe:25:57:1e:23:e3:56:81:3a:57:b0:10:3c:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/pP_kDMj8cnuHFFIS0srW0qsetbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142294

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:a8:e0:5a:5e:7b:d7:77:4d:ae:a0:b5:45:0d:a6:ce:a2:
         ca:e4:66:12:80:81:13:5b:e2:c3:5b:75:41:08:c1:43:81:a7:
         4a:e0:0a:dc:72:ac:d4:26:93:84:bd:4f:5a:3f:53:37:bd:84:
         29:93:5f:58:41:c3:c7:1c:2b:04:02:ce:88:d0:02:53:b4:c7:
         f5:9f:64:b1:b2:12:fc:0b:d6:d7:b3:7a:10:0b:81:8d:11:35:
         dc:0d:c4:c1:a0:2d:0a:ac:0a:69:82:22:d0:3b:23:1c:f6:d8:
         ee:cf:ef:03:e4:58:8f:2e:ed:5a:4a:ce:2a:1e:a6:8e:9c:fc:
         8a:91:02:b0:fd:3f:00:f5:79:e3:50:e3:ff:67:35:34:e1:f6:
         40:ed:ff:30:1e:3e:60:33:b5:1f:22:25:70:68:99:0e:cf:a3:
         a8:10:23:44:0a:10:72:7b:a3:d2:70:dc:dd:c9:24:fd:e5:f3:
         6e:6f:85:68:bf:06:87:07:0a:16:02:f8:f1:32:cd:33:25:54:
         d1:76:a6:6e:4d:a4:ae:2c:13:6e:2d:09:eb:ac:c1:21:9f:f8:
         e2:6b:5d:eb:9d:58:fa:68:07:76:82:63:e5:3d:62:a2:39:6a:
         d4:dd:51:e4:ac:1c:02:30:ba:7f:6a:95:cf:8c:e5:13:24:c7:
         2b:e6:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:55 2024 by rpki-client on console-fra.rpki-client.org