Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer
File: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer (raw, json)
Hash identifier: aIqz1x/2HYSlcNudXUtWCCE7nMhGqxMtp59g8ab/7Qk=
Subject key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02086A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 Aug 2024 16:32:15 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 103.116.176.0/22
Validation: Failed, certificate revoked on Mon 20 Jan 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133226 (0x2086a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 22 16:32:15 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A917F89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:8e:71:6e:09:65:31:fb:a9:c2:94:76:59:
06:94:4e:d9:db:bf:76:30:0e:83:5d:22:3c:d6:63:
9d:ba:82:49:40:ad:5d:c1:fc:ae:99:90:64:b9:77:
fb:5c:cc:ed:43:f3:36:b3:56:14:48:17:fc:c0:c1:
19:79:ed:f8:fd:db:4e:ad:a0:e0:e9:af:c4:65:0a:
11:49:0f:80:1c:9f:28:71:9a:90:92:61:da:da:50:
e5:e6:94:9d:96:a8:3d:3b:c1:a0:d4:25:0c:35:02:
35:47:e7:c1:41:38:19:e9:bc:d8:e7:ea:a0:ff:60:
53:80:b5:f2:2d:6b:92:1a:ef:5f:71:8e:fb:c6:84:
80:e3:af:f7:ec:75:e8:9f:d6:47:5e:92:03:08:f5:
b7:8f:a6:2a:b4:c3:49:47:3b:5c:fc:9a:57:95:9e:
83:20:0c:ef:ce:a3:11:1b:e6:06:b1:0d:fb:5c:23:
99:47:f6:66:27:58:37:47:d0:46:fc:5b:03:57:5e:
54:22:07:b6:ae:07:12:d5:fb:96:3f:59:6e:cb:27:
86:17:e2:15:90:0f:66:3b:f3:dd:6c:34:41:5f:17:
da:f9:5e:c6:4b:3e:20:53:6c:d2:94:55:d1:04:6c:
0a:54:76:04:22:ec:f6:59:dd:cf:26:51:4e:70:a7:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:5f:ed:d1:6e:f7:e0:e4:1f:8c:a6:7e:89:18:2c:51:14:6f:
48:45:e2:77:37:4e:9d:89:f1:bf:15:47:9f:ac:43:e4:d9:96:
22:73:f0:8b:0a:f4:ae:d8:48:81:41:fa:35:1c:35:1c:b5:47:
11:0b:11:1d:f6:4f:da:38:14:ee:82:bf:b4:27:fe:e8:c9:c3:
96:73:ab:06:2e:77:b2:8f:87:2f:da:0a:46:da:73:17:60:00:
bb:67:56:65:d0:47:a0:54:27:24:19:b6:a6:82:b9:8d:03:86:
20:7c:61:b9:a6:68:d9:de:71:5b:99:40:7c:ac:51:27:24:e4:
5c:12:dc:ce:6a:a8:f4:e1:3d:9b:e7:42:00:a2:0e:cb:b0:26:
9b:8c:0a:e5:e1:77:44:ee:f2:a0:99:b3:fb:03:20:59:02:b8:
7c:72:75:c8:86:7f:5b:b7:bd:f0:52:d3:93:1d:ec:a0:b3:08:
11:ae:b3:8c:0c:9d:54:f1:a0:ac:55:b6:bb:1b:33:2f:98:95:
a8:9f:26:9f:98:01:8a:ac:3b:2d:18:90:08:60:29:89:0c:58:
dd:9c:87:ff:93:4a:21:6d:5e:7c:61:ea:05:f5:99:8b:ab:b5:
1c:db:6b:b1:3d:a5:19:44:69:71:0e:01:38:56:c1:b0:05:0d:
eb:e9:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:36 2025 by rpki-client