Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLRE17z5fc2JzfnXvXZ9hdozuv4.cer
File: tLRE17z5fc2JzfnXvXZ9hdozuv4.cer (raw, json)
Hash identifier: Is3xJtudO/d531fj9gzDC1J46T9gTWIjzgef41UNyl8=
Subject key identifier: B4:B4:44:D7:BC:F9:7D:CD:89:CD:F9:D7:BD:76:7D:85:DA:33:BA:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0142A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919868F/15540658DE8011E694270833C4F9AE02/tLRE17z5fc2JzfnXvXZ9hdozuv4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919868F/15540658DE8011E694270833C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Feb 2022 05:01:05 +0000
Certificate not after: Fri 31 Mar 2023 00:00:00 +0000
Subordinate resources: IP: 103.81.140.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82592 (0x142a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 1 05:01:05 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=A919868F/serialNumber=B4B444D7BCF97DCD89CDF9D7BD767D85DA33BAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:a9:54:8a:8f:16:03:c2:f5:50:11:8f:1f:
33:63:9b:bf:6c:71:52:71:c3:19:6b:64:66:82:96:
21:16:c2:d3:71:f8:85:4c:2b:17:86:b5:cc:46:a7:
b8:91:d5:31:5c:21:ce:37:13:13:78:73:4e:81:ec:
3b:83:0b:14:be:67:9b:56:cb:c8:88:ed:82:7a:af:
5e:65:68:f7:f4:b7:ae:51:27:eb:60:2e:04:15:fd:
62:2f:4b:80:fa:0e:46:65:7c:e6:61:4e:2a:54:47:
1c:13:cc:4e:30:bd:ab:59:24:12:5e:6c:f1:75:70:
e6:d5:9c:68:d7:08:fd:4b:80:a3:65:ca:15:22:84:
63:0c:35:1c:f0:9d:22:a5:dd:2c:f8:0d:1b:d2:e8:
9f:76:32:3c:c6:42:5f:21:ec:a1:96:f1:b8:b8:c4:
f5:e5:b1:eb:58:d8:6b:bb:ec:db:d4:84:71:e5:d9:
d1:78:db:0b:af:d1:c7:1a:f1:19:ba:08:88:6c:d2:
4c:80:f2:b3:55:7f:ca:09:fa:b2:45:3a:8c:3e:1a:
ed:30:5b:50:09:7b:67:d5:b5:48:8e:b3:5e:45:67:
55:93:16:d7:32:82:0e:82:f0:ea:f2:48:44:30:f8:
65:41:d8:c6:0b:38:fc:aa:0b:d5:2f:1b:45:b8:9d:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:44:D7:BC:F9:7D:CD:89:CD:F9:D7:BD:76:7D:85:DA:33:BA:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919868F/15540658DE8011E694270833C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919868F/15540658DE8011E694270833C4F9AE02/tLRE17z5fc2JzfnXvXZ9hdozuv4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.140.0/22
Signature Algorithm: sha256WithRSAEncryption
71:da:92:78:f3:f6:b4:a0:37:78:c4:ee:0a:72:9e:9a:0d:51:
68:16:7a:05:d2:b2:a7:50:8f:a3:c3:90:b1:af:4b:d3:dd:cc:
f2:59:53:9b:77:99:d5:a8:b3:be:2c:fb:38:b5:9f:88:f3:e8:
5b:29:b1:8b:a0:a7:cd:26:98:bd:9f:8d:14:57:77:78:6c:dc:
4a:4b:00:77:81:96:c9:33:3e:7d:2f:5f:18:1e:b3:51:7d:c9:
5d:bc:ac:a3:bb:23:e2:4d:d5:5a:08:05:47:ab:55:3f:77:0f:
fd:6d:c6:58:f6:84:82:aa:6a:43:89:c1:3f:25:2b:31:5e:2a:
1e:50:e4:37:23:99:25:43:d1:5b:f7:a2:c4:33:7f:eb:61:ac:
a3:2e:af:64:c5:dd:00:17:46:cc:05:a2:12:97:98:2d:97:06:
a0:c4:01:f7:a6:1b:9c:d2:21:36:f7:6d:d2:0d:53:64:87:89:
e2:d2:89:3f:bc:1b:a5:d6:96:f1:38:01:d2:3e:60:48:ba:ec:
81:0f:3a:d4:5c:91:16:3b:77:91:07:38:e2:64:1f:8f:00:1b:
91:18:4e:7e:07:3d:d1:b7:7d:08:9a:b8:49:1a:86:3d:3b:79:
c3:32:7e:fb:07:e5:6e:9b:43:32:53:29:d4:a8:2d:7b:a7:52:
1b:62:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org