Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sX1WLTavPXb_Zb4cenRcZDPr20g.cer
File: sX1WLTavPXb_Zb4cenRcZDPr20g.cer (raw, json)
Hash identifier: 3IDjS2nZpXdxuOHAGAxbFlYCoz3zAXOuSj8E7PHOlyQ=
Subject key identifier: B1:7D:56:2D:36:AF:3D:76:FF:65:BE:1C:7A:74:5C:64:33:EB:DB:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 014F95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/sX1WLTavPXb_Zb4cenRcZDPr20g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 13 Apr 2022 08:36:02 +0000
Certificate not after: Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 203.18.30.0/24
IP: 2001:df0:a340::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85909 (0x14f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 13 08:36:02 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=A9154DE6/serialNumber=B17D562D36AF3D76FF65BE1C7A745C6433EBDB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:15:54:f8:3f:c5:57:76:3c:1f:07:42:b7:
0c:ff:eb:23:e5:c8:34:69:a5:cc:d7:c4:2a:79:ee:
fb:7b:8c:56:b4:d9:e1:23:9c:3a:68:c4:9f:6c:d6:
c3:93:e2:bc:d0:6c:39:1c:bc:c4:7f:bd:ac:97:cb:
2c:4e:7f:19:d4:84:74:a7:81:0d:21:5e:27:3d:ae:
79:3c:06:ed:16:0c:5c:ef:6c:2c:1f:4d:96:5f:06:
64:3a:a9:de:5a:51:8f:d3:04:99:27:37:31:2f:d3:
d5:30:ef:c8:c3:4a:09:68:b0:3c:4e:33:c2:1d:4f:
52:61:c1:bb:9b:70:09:e3:a6:92:72:2b:7d:2e:9b:
d3:8a:b4:61:bf:82:7d:0c:2a:d9:66:5e:7f:9b:b6:
58:89:bc:65:0b:c6:eb:2d:d8:c9:94:2d:1b:b2:bc:
2c:68:14:ac:77:30:67:0f:43:cb:e6:d1:3d:7b:dc:
d0:8f:e5:df:26:af:23:fb:85:8f:49:d6:58:ae:92:
7a:ab:ab:0c:df:b4:e2:ee:40:3d:89:62:0c:0c:93:
02:98:30:d6:ac:46:35:2e:6a:ec:a5:d4:74:c1:75:
0f:94:b4:8a:9a:7c:81:76:3d:02:a4:7f:7a:52:62:
aa:28:44:06:da:f7:fe:ba:08:e7:c1:a8:a0:6c:b3:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:56:2D:36:AF:3D:76:FF:65:BE:1C:7A:74:5C:64:33:EB:DB:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/sX1WLTavPXb_Zb4cenRcZDPr20g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.18.30.0/24
IPv6:
2001:df0:a340::/48
Signature Algorithm: sha256WithRSAEncryption
40:3e:4c:ba:fd:0b:43:a7:1c:64:0d:dc:32:3b:5a:90:91:a9:
bb:17:5b:08:89:63:94:6d:21:8c:96:c5:5c:b4:c4:13:40:59:
6e:e0:f5:ad:ee:0b:27:b3:53:9a:83:8b:fa:6b:ff:ae:17:7a:
a8:31:bd:6c:09:93:97:57:97:10:f6:b4:77:d8:fe:4c:f7:33:
e0:1c:46:c1:9c:71:e2:c2:7d:33:41:01:c8:73:32:cc:ec:63:
b6:06:dc:7a:a9:c2:20:38:5f:ac:01:95:ca:b7:1d:13:00:ae:
82:da:4c:5c:2a:a9:d2:c3:2a:5c:52:0e:e7:e7:f6:8d:f6:82:
5a:a4:bf:68:7c:30:1c:35:5c:63:de:a2:33:27:d7:03:37:94:
0b:41:60:0d:4a:51:d0:22:7d:71:ca:e0:2c:ec:86:fd:1a:b5:
0e:c3:41:28:ed:34:bf:13:6b:c4:80:fa:bd:26:31:d8:30:b2:
dd:71:eb:f7:d7:18:89:1a:44:e0:f0:30:5f:23:0e:c1:07:69:
75:31:db:db:63:39:ac:8d:14:9b:78:ca:e4:80:67:a0:8d:53:
9c:55:8f:8e:93:8e:9b:c6:98:38:f1:bf:17:eb:d6:6e:d3:c3:
8e:45:a6:f3:ce:be:d7:a1:91:94:e8:ec:5b:1f:07:59:c3:78:
45:39:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:44 2024 by rpki-client on console-ams.rpki-client.org