Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4rQKDz53fvleDN5tRqXn15HQ_Y.cer
File: t4rQKDz53fvleDN5tRqXn15HQ_Y.cer (raw, json)
Hash identifier: +30CYgnLDyQrD2CWDzT5O5KGRKfHiZ8kBAShEMBEZUs=
Subject key identifier: B7:8A:D0:28:3C:F9:DD:FB:E5:78:33:79:B5:1A:97:9F:5E:47:43:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B98D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/t4rQKDz53fvleDN5tRqXn15HQ_Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Aug 2023 16:40:40 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 103.248.10.0/23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113037 (0x1b98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 16:40:40 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A911C2E1/serialNumber=B78AD0283CF9DDFBE5783379B51A979F5E4743F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:22:ea:a8:dc:a1:4f:45:5a:51:f4:4f:9a:
7e:8f:84:5e:44:47:8a:8f:7f:c3:79:52:b7:42:79:
64:90:de:0f:7b:ce:36:24:42:e4:a6:35:50:78:ef:
54:1b:07:08:ac:b2:18:7c:76:9c:d0:98:de:10:d4:
e9:4b:88:77:31:22:4e:6c:9d:21:bd:da:27:5c:23:
d6:95:49:f8:46:ba:6f:c9:0b:8c:83:33:d9:66:39:
d6:31:ad:80:b6:0c:d0:90:02:57:35:f8:fa:27:cf:
ae:b4:fc:23:6c:9a:8f:c9:40:95:b1:1a:65:95:64:
e1:e0:77:2e:e9:a3:48:03:84:73:a0:6a:12:74:e7:
e1:44:ee:d9:87:f4:12:4d:ea:09:a6:62:9a:0a:2f:
e9:f4:f9:a0:5a:c2:8d:cd:31:ae:2c:fd:45:1e:ab:
46:7a:b3:51:d7:27:75:e5:08:6e:ea:10:37:79:18:
d6:8e:6b:25:ec:29:46:1b:89:f2:3c:59:ea:ae:f9:
45:f5:96:8a:7c:47:45:3b:c5:f7:61:b1:1c:f2:89:
ab:66:6d:c3:90:f0:7c:78:3e:ea:7c:b0:11:e7:5d:
b7:2e:1f:27:49:c2:26:7a:5c:96:61:d9:58:be:e6:
25:d0:eb:89:4a:ba:5f:ba:69:ee:d1:31:a0:0c:88:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:D0:28:3C:F9:DD:FB:E5:78:33:79:B5:1A:97:9F:5E:47:43:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/t4rQKDz53fvleDN5tRqXn15HQ_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.10.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:09:95:c3:c6:54:68:54:52:e2:f6:43:63:27:d2:07:b7:e3:
cf:27:75:4e:1a:98:29:92:f2:2b:65:e3:39:75:2b:69:af:52:
be:bd:8c:86:86:b5:1b:78:8e:98:be:94:79:00:ca:5e:88:8d:
6e:64:67:42:bb:be:a8:40:34:9f:62:57:b9:83:da:87:46:8d:
78:40:4e:c7:5d:22:fc:53:09:b2:f6:62:8d:30:85:5b:76:3b:
c9:7b:3b:30:9b:ea:aa:17:6e:59:94:0a:7b:aa:e0:e5:30:fd:
63:50:b6:91:69:ea:53:8a:6f:69:47:40:6a:94:f6:a4:9b:1b:
76:60:1a:23:78:6a:60:ca:20:f7:d9:f5:3a:e7:6a:58:55:b4:
0e:5f:5d:87:b8:cd:c9:48:3f:ec:8f:da:a9:01:61:c9:e1:70:
bf:4f:be:7b:66:75:26:8c:d2:01:0b:7a:33:b6:61:5b:0c:73:
f2:93:d8:52:a7:2f:66:ce:4e:f7:90:32:29:51:8c:c7:2b:d2:
24:aa:ab:a0:25:58:bd:21:5b:a7:65:0b:7a:aa:67:4f:48:da:
06:36:65:7d:45:62:fa:a4:68:8f:df:d8:23:01:01:4c:b8:ff:
12:32:a4:ab:ce:ce:d8:fe:93:96:88:cf:22:eb:76:f5:51:73:
af:b4:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 01:13:36 2023 by rpki-client on console-fra.rpki-client.org