Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1UpQDAjRCxArnH_wOLX_kt-KeQ.cer
File: r1UpQDAjRCxArnH_wOLX_kt-KeQ.cer (raw, json)
Hash identifier: 8qCJ9sTTBf8OE9Us+dPniQ4xKa4Ri322DlbfG5MCr+o=
Subject key identifier: AF:55:29:40:30:23:44:2C:40:AE:71:FF:C0:E2:D7:FE:4B:7E:29:E4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 017F2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 12 Dec 2022 07:20:27 +0000
Certificate not after: Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources: AS: 135630
IP: 43.224.144.0/22
IP: 103.21.240.0/22
IP: 240f:8000::/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98090 (0x17f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 12 07:20:27 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=A91CD28A/serialNumber=AF5529403023442C40AE71FFC0E2D7FE4B7E29E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:6f:a7:0d:99:31:3d:b8:78:58:52:6b:de:
3b:4c:d8:66:f9:86:90:1e:0d:0e:c8:2a:2c:0f:84:
ea:4f:41:66:1a:72:db:d4:72:9d:5c:92:cc:b9:5c:
b8:46:9b:73:48:48:1f:e8:64:21:aa:40:51:3c:91:
4b:5b:76:5d:3f:35:4b:23:13:9d:0f:df:93:bd:ac:
ce:5d:23:f6:10:fc:26:ca:ab:30:cf:60:cf:22:b3:
9b:6b:5b:7a:89:46:f2:14:62:82:6f:dd:03:cd:a9:
81:b4:ab:67:e5:f6:13:ec:25:46:a8:32:1d:3f:e7:
ac:c4:03:56:f6:76:c0:92:fa:36:7a:74:f6:13:1c:
da:e4:b5:ab:c3:f2:47:76:b4:32:df:74:ef:24:f8:
cf:c5:89:46:46:7f:d8:7c:fc:ed:6b:f2:8d:b7:33:
0a:f2:70:f3:5c:75:df:de:85:68:53:fc:6f:44:82:
b1:68:3f:70:c1:40:ae:c4:5b:c3:a1:cd:09:8d:f1:
a2:40:56:2e:35:ca:a9:22:5f:5c:08:b8:36:a6:73:
fc:f1:41:f7:0b:1e:1a:3f:14:24:1f:cf:e8:55:85:
bb:c2:bb:32:3b:d3:71:8d:a5:cc:2b:fc:5c:5e:ef:
5a:ab:9d:0a:2c:61:cd:46:2e:34:d9:ad:4e:dc:d5:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:29:40:30:23:44:2C:40:AE:71:FF:C0:E2:D7:FE:4B:7E:29:E4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135630
sbgp-ipAddrBlock: critical
IPv4:
43.224.144.0/22
103.21.240.0/22
IPv6:
240f:8000::/24
Signature Algorithm: sha256WithRSAEncryption
5e:bb:d0:73:2e:dc:aa:2d:0c:5f:b4:51:ca:a0:83:ed:fb:c3:
4a:c2:72:5e:a0:5a:fb:85:64:98:39:6e:d5:d9:92:56:ee:6b:
0d:f9:bd:4f:f0:6e:18:0d:18:b5:54:84:d8:17:70:14:aa:08:
e1:a0:b6:80:9d:9d:28:7f:fc:52:0e:a9:f2:72:ce:c4:36:c0:
65:b8:89:3c:4a:10:a1:50:58:e1:ef:b0:75:81:80:f0:44:03:
b6:dc:c8:d7:18:85:dd:dd:8e:c6:a9:83:ee:06:f3:b1:40:68:
a9:7e:e3:e4:56:e6:43:d9:af:b4:8b:7f:2f:29:2f:43:a0:73:
6c:3d:ea:7c:5b:28:e4:d1:de:ce:fa:2c:e1:05:9c:0c:59:7e:
50:f3:52:51:39:3e:4c:c9:5b:c8:ec:91:09:bb:ec:2f:1b:78:
ad:da:65:eb:70:b7:17:1c:83:34:34:40:4b:2e:b7:76:c0:b3:
60:cb:89:e7:17:a6:b9:b3:ae:e3:5d:b8:5c:f5:c9:87:b3:ed:
3c:9e:e5:9d:5d:98:74:4d:3d:c6:ff:81:7f:49:ef:e3:3d:f7:
94:9e:a9:d6:72:c0:c8:7f:5d:3a:5a:05:9e:ed:a2:23:f4:53:
a2:96:2f:26:e5:f6:ca:e6:df:56:f4:54:69:c4:93:c6:7b:af:
08:92:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org