Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pe_NK5PznTkToX4q9IRA0BrI74U.cer
File: pe_NK5PznTkToX4q9IRA0BrI74U.cer (raw, json)
Hash identifier: OGt2uVxKgfbXAc+RrMQTEyQ9HmIWrhOOINpuiNHEugk=
Subject key identifier: A5:EF:CD:2B:93:F3:9D:39:13:A1:7E:2A:F4:84:40:D0:1A:C8:EF:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C1D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA4F1/6367F4B6623211EEA0A9DF51C4F9AE02/pe_NK5PznTkToX4q9IRA0BrI74U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA4F1/6367F4B6623211EEA0A9DF51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Oct 2023 21:18:31 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 202.49.41.0/24
IP: 202.50.121.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115155 (0x1c1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 21:18:31 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91EA4F1/serialNumber=A5EFCD2B93F39D3913A17E2AF48440D01AC8EF85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:f6:c1:bb:2e:09:39:32:f7:b8:c7:f4:3f:
45:29:b5:c9:9c:bc:2f:a6:6c:85:ab:a4:fb:0f:5e:
0a:e3:fa:24:28:b3:53:bb:a1:e5:2d:e9:38:b7:1b:
35:9b:3d:36:93:bf:77:46:d4:34:3d:5c:0e:72:2c:
a3:f9:24:0d:65:54:51:e9:65:74:94:bf:5f:5f:2e:
30:ae:d4:78:85:65:39:4d:77:81:e5:b6:97:04:73:
7f:79:a6:7b:de:76:0d:fa:b1:54:bc:c0:76:fd:31:
05:0a:ac:ff:6a:59:40:4c:95:a1:ff:08:1e:07:e8:
63:fe:d1:0a:35:2b:a2:55:15:b7:9c:55:10:f7:54:
ba:cc:dd:30:5b:33:ea:8d:76:05:69:e4:6a:40:a0:
31:91:e7:92:ca:82:12:88:48:a1:88:a4:15:9d:85:
25:1a:1c:6a:ad:3b:d8:dd:3e:3b:26:b6:7e:03:59:
59:4e:f3:c4:35:45:54:cd:e2:98:b1:46:12:17:99:
52:1b:32:3a:7d:49:ed:6b:87:82:bf:ae:96:6b:d6:
94:14:f9:bb:58:ff:c8:52:a5:16:af:d3:70:6c:f7:
c7:6b:43:98:56:15:5a:f6:08:aa:02:9d:af:7f:91:
9a:fd:4b:b5:d8:20:6a:f9:84:08:d6:3a:31:3f:9d:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EF:CD:2B:93:F3:9D:39:13:A1:7E:2A:F4:84:40:D0:1A:C8:EF:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA4F1/6367F4B6623211EEA0A9DF51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA4F1/6367F4B6623211EEA0A9DF51C4F9AE02/pe_NK5PznTkToX4q9IRA0BrI74U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.41.0/24
202.50.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2f:4a:86:57:ca:bd:d6:d5:85:8f:c0:e7:23:06:99:61:04:
a6:33:45:cb:a9:0f:71:eb:2b:ca:f2:a2:1e:d4:50:d1:fb:27:
b7:ba:e0:d6:b9:47:e8:6b:5b:2c:7e:49:b3:08:1c:21:f5:0e:
59:a5:23:8e:b2:d3:07:9b:51:b0:50:a9:5a:86:1a:d7:bd:d4:
3f:82:3e:6f:63:85:6a:02:6b:c8:38:bb:01:e1:cf:70:42:99:
94:87:e5:73:61:a2:8c:1e:ab:17:34:8a:65:b8:d2:01:5c:e6:
06:66:8d:52:fc:ad:68:4e:8a:2c:34:f5:89:4d:02:84:48:b4:
29:e5:26:fe:5f:1e:67:60:83:6a:5b:57:19:fb:66:eb:01:c5:
c1:6f:a8:f1:13:83:67:72:74:57:38:a1:bd:f7:7c:cb:27:b4:
8b:ed:8f:e7:3d:58:02:70:e1:8b:3f:38:da:ae:04:24:45:a0:
3d:b0:b6:cc:03:e6:d4:6d:f2:31:f6:81:b8:b4:23:50:3f:6a:
f1:50:ed:63:94:e8:a8:b3:8f:61:06:b4:9b:a2:a2:28:e6:e4:
08:1e:02:dd:f8:0b:2d:a7:84:da:38:4e:a6:1d:2f:a1:a5:fd:
e9:bc:a2:28:77:0a:64:6d:b3:27:39:14:aa:d3:5b:b9:30:4a:
1c:5c:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 23:05:39 2023 by rpki-client on console-ams.rpki-client.org