Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x4Jw2CmbkBJQwzRy_k9rWemovUU.cer
File: x4Jw2CmbkBJQwzRy_k9rWemovUU.cer (raw, json)
Hash identifier: 3M5qRY+7lyjI4NE0Qd2dA7IHdOVJeb98Cvq0hWpizDg=
Subject key identifier: C7:82:70:D8:29:9B:90:12:50:C3:34:72:FE:4F:6B:59:E9:A8:BD:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F8AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A918C2870006/0/C78270D8299B901250C33472FE4F6B59E9A8BD45.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A918C2870006/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Wed 12 Jun 2024 12:47:36 +0000
Certificate not after: Sat 01 May 2038 00:00:00 +0000
Subordinate resources: AS: 45163
AS: 55471
AS: 131211
IP: 203.176.189.0/24
IP: 2001:df0:90::/48
IP: 2401:4600::/32
IP: 2401:e640::/32
Validation: Failed, certificate revoked on Sun 16 Jun 2024 11:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129197 (0x1f8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 12 12:47:36 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=A918C2870006/serialNumber=C78270D8299B901250C33472FE4F6B59E9A8BD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:6f:94:3c:b3:a2:c7:53:6f:9a:27:eb:e2:
b8:f9:80:86:76:1c:7e:d5:cd:a0:45:bf:8a:9f:fb:
82:a9:63:8b:7e:c3:b5:d1:67:60:86:e6:26:0a:97:
8f:e4:d0:1a:ea:2f:55:94:de:6b:18:33:78:46:f8:
96:b7:b7:86:02:ce:33:bc:54:4c:a7:06:6f:f6:9c:
08:e7:60:bf:20:4d:49:c5:45:ca:51:b9:d2:51:8d:
47:8f:4b:c6:2b:5f:f3:86:3a:47:82:09:87:07:73:
03:58:08:be:2a:5d:a5:01:ca:ee:7e:50:d7:9b:ad:
3f:22:ce:ae:30:bd:1c:b1:db:65:f5:26:bd:c0:02:
5b:3a:8d:e8:ff:44:4f:86:7a:09:ed:7c:b9:f3:6e:
85:a0:e2:8e:b4:72:63:d5:3b:01:39:0f:89:1b:b7:
d6:11:45:95:ac:f3:07:cf:85:c4:7d:7e:c4:c0:86:
76:52:46:d4:9b:2b:a4:f1:68:72:4a:4c:0d:4d:6e:
67:35:e8:a8:c4:4a:9f:d0:53:fb:17:b8:8f:0e:67:
ad:fd:93:37:07:e9:59:af:bc:a8:8a:05:f7:ea:5c:
78:84:ca:54:23:5b:e0:df:42:e8:db:b2:82:7e:9d:
da:bf:ad:c9:db:76:20:17:72:31:8d:67:98:e5:8e:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:70:D8:29:9B:90:12:50:C3:34:72:FE:4F:6B:59:E9:A8:BD:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870006/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870006/0/C78270D8299B901250C33472FE4F6B59E9A8BD45.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45163
55471
131211
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
IPv6:
2001:df0:90::/48
2401:4600::/32
2401:e640::/32
Signature Algorithm: sha256WithRSAEncryption
3c:9d:18:0c:6b:43:4f:c5:8c:09:12:32:1b:46:ae:c7:83:35:
de:18:2f:e4:5e:d8:16:6c:45:9d:59:0a:9a:fa:ef:cd:3a:1a:
e5:91:c4:fb:eb:92:ab:b4:29:a4:a9:2b:4d:23:c6:6b:9d:42:
a1:e5:b5:d2:00:75:cf:d3:e5:ec:24:6c:4a:c8:c0:4f:22:e3:
ab:03:2d:57:1f:2d:ae:bc:9b:a0:02:3f:6e:02:0b:a4:dc:10:
73:9c:59:5c:d9:3f:85:13:50:0b:1e:cb:84:a9:56:f0:fb:ca:
55:85:f4:e2:4e:25:0a:88:0a:7a:c9:d5:ac:91:34:37:e6:d2:
e3:dc:11:28:78:21:0d:fd:58:66:a9:d7:1a:e2:83:37:b6:79:
ef:23:0c:86:f5:c4:ae:7c:c6:8c:21:2c:76:6a:0e:cb:71:d4:
b7:67:99:ac:ea:bd:f1:4e:19:77:28:de:79:0d:ce:d2:b7:1a:
69:5b:e5:8c:b8:be:52:84:2f:f5:bf:57:eb:b7:4e:40:b5:94:
da:7a:10:41:b8:22:0c:af:32:9a:97:c0:47:69:de:16:e1:46:
b6:2c:a8:5d:09:f5:e4:38:db:ff:34:2d:f0:43:94:57:60:ba:
34:90:d0:d8:f9:90:1d:ad:33:b9:a8:fa:4b:53:82:92:55:a3:
6c:77:32:5e
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIDAfitMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYxMjEyNDczNloXDTM4MDUwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxOEMyODcwMDA2MTEwLwYDVQQFEyhDNzgyNzBEODI5OUI5MDEyNTBD
MzM0NzJGRTRGNkI1OUU5QThCRDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqwNvlDyzosdTb5on6+K4+YCGdhx+1c2gRb+Kn/uCqWOLfsO10WdghuYm
CpeP5NAa6i9VlN5rGDN4RviWt7eGAs4zvFRMpwZv9pwI52C/IE1JxUXKUbnSUY1H
j0vGK1/zhjpHggmHB3MDWAi+Kl2lAcruflDXm60/Is6uML0csdtl9Sa9wAJbOo3o
/0RPhnoJ7Xy5826FoOKOtHJj1TsBOQ+JG7fWEUWVrPMHz4XEfX7EwIZ2UkbUmyuk
8WhySkwNTW5nNeioxEqf0FP7F7iPDmet/ZM3B+lZr7yoigX36lx4hMpUI1vg30Lo
27KCfp3av63J23YgF3IxjWeY5Y7IkwIDAQABo4IDCjCCAwYwHQYDVR0OBBYEFMeC
cNgpm5ASUMM0cv5Pa1npqL1FMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4
QzI4NzAwMDYvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxOEMyODcwMDA2LzAvQzc4MjcwRDgyOTlCOTAxMjUw
QzMzNDcyRkU0RjZCNTlFOUE4QkQ0NS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgB
Af8EFTAToBEwDwIDALBrAgMA2K8CAwIAizA+BggrBgEFBQcBBwEB/wQvMC0wDAQC
AAEwBgMEAMuwvTAdBAIAAjAXAwcAIAEN8ACQAwUAJAFGAAMFACQB5kAwDQYJKoZI
hvcNAQELBQADggEBADydGAxrQ0/FjAkSMhtGrseDNd4YL+Re2BZsRZ1ZCpr67806
GuWRxPvrkqu0KaSpK00jxmudQqHltdIAdc/T5ewkbErIwE8i46sDLVcfLa68m6AC
P24CC6TcEHOcWVzZP4UTUAsey4SpVvD7ylWF9OJOJQqICnrJ1ayRNDfm0uPcESh4
IQ39WGap1xrigze2ee8jDIb1xK58xowhLHZqDstx1LdnmazqvfFOGXco3nkNztK3
Gmlb5Yy4vlKEL/W/V+u3TkC1lNp6EEG4IgyvMpqXwEdp3hbhRrYsqF0J9eQ42/80
LfBDlFdgujSQ0Nj5kB2tM7mo+ktTgpJVo2x3Ml4=
-----END CERTIFICATE-----
Generated at Sun Jun 16 13:06:21 2024 by rpki-client on console-fra.rpki-client.org