Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer
File: tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer (raw, json)
Hash identifier: 2yUe7YwfFSSEn+0jKg5ZhSR1YNwF7Lmv26tQ093JQaM=
Subject key identifier: B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D084
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Dec 2023 17:04:20 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 45.127.204.0/22
IP: 103.78.216.0/22
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118916 (0x1d084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 7 17:04:20 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A917EA0F/serialNumber=B6A07A52DDDA2E139D1D1B265686D6CEB1B65D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:58:8b:f9:98:34:ac:33:bf:31:6f:95:ee:
90:c0:d0:e9:ee:11:f6:2d:7c:66:3f:4a:69:7e:3d:
a2:e0:a3:38:12:54:6a:2c:08:c8:53:7d:50:7c:c7:
cf:19:54:2a:b8:98:73:4a:12:0e:e6:ac:2d:72:85:
d3:69:19:5a:e2:2c:b8:ef:b3:22:f8:4a:0b:77:fb:
12:5d:dc:f2:aa:a8:df:ca:29:0e:99:67:b8:c6:3f:
eb:86:e9:08:6e:5b:ef:11:df:7d:44:a4:7b:54:9c:
09:fa:f6:d8:d8:a2:06:09:9e:69:c0:91:c5:8d:ee:
60:d6:d7:4e:a2:78:29:ba:06:ff:9e:5e:ef:c8:20:
8a:71:44:55:3b:c4:1b:0a:8b:6c:b0:9a:f2:cf:0b:
c4:4c:a4:d8:e2:70:ee:6b:9b:4b:75:7d:ad:2d:23:
16:19:7f:37:51:89:8c:47:4a:a0:91:33:c2:56:38:
8d:66:43:41:65:92:b2:06:5c:d4:e0:29:50:2b:a3:
a1:78:3b:97:1b:c7:f4:3b:b9:f3:09:72:f8:94:a3:
cb:51:cd:bb:99:ed:e2:9c:71:20:a6:91:17:ee:6f:
be:c9:15:c7:1d:f5:4c:0a:93:bb:27:66:82:af:b9:
91:4d:0a:c8:30:43:b8:e5:41:8f:98:99:f2:6b:bd:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
103.78.216.0/22
Signature Algorithm: sha256WithRSAEncryption
03:44:69:3a:b0:18:85:e8:08:ed:09:c3:34:74:86:82:76:3b:
31:a7:9c:20:38:c9:7d:4f:cf:c1:61:25:25:3c:72:ad:09:83:
76:77:ed:c6:c1:eb:04:4d:10:fb:8f:07:83:38:f8:31:ad:02:
34:c8:cb:62:d5:01:30:b1:dd:bc:03:b9:aa:1b:32:1a:59:59:
27:cc:23:2b:36:70:20:17:69:60:0e:dc:fa:c8:a2:57:ef:a9:
ac:09:92:18:7d:87:01:8b:2e:7f:4e:c9:b5:d9:0e:37:26:f8:
19:62:19:70:38:9f:63:f5:13:7e:80:0b:c3:31:39:c7:75:02:
c0:90:e4:e0:54:a1:89:98:30:39:30:4a:52:06:30:38:8e:e8:
59:70:b8:bf:52:23:a4:3e:10:6c:f2:86:87:32:5c:e7:a3:9f:
45:19:36:35:4f:96:be:ea:04:4c:34:5e:ac:99:00:47:33:1f:
c7:bc:1a:b9:7f:8d:86:90:8f:69:11:8b:c0:1a:6c:e8:ae:c7:
51:bc:b9:88:20:47:de:6d:70:48:93:7e:a3:e0:2f:8f:3e:e7:
bc:30:70:22:23:8b:69:00:3b:f6:a2:7e:02:b4:28:bc:74:35:
08:37:ad:c6:a7:6a:74:a8:34:a0:24:f5:51:39:4c:56:70:60:
17:1d:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:23 2024 by rpki-client on console-ams.rpki-client.org