Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMOJG04eB4mahjWQVEPuZ-2I6c.cer
File: xUMOJG04eB4mahjWQVEPuZ-2I6c.cer (raw, json)
Hash identifier: QBZvUzKr9+lsxobXjtDwNoEPaa5RUt2uvkbjYg9j5Uo=
Subject key identifier: C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018943
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/xUMOJG04eB4mahjWQVEPuZ-2I6c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Feb 2023 15:30:30 +0000
Certificate not after: Wed 01 May 2024 00:00:00 +0000
Subordinate resources: AS: 137436
IP: 103.108.188.0/23
IP: 103.115.204.0/23
IP: 2402:6ec0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100675 (0x18943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 1 15:30:30 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=A9162B3A/serialNumber=C5430E246D38781E266A18D641510FB99FB623A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:1d:a1:37:ef:c8:39:d5:1c:aa:ca:be:38:
5b:e0:c0:fc:29:a2:08:e8:a4:80:c1:84:2b:41:60:
4e:e1:3f:2d:cd:53:90:ac:93:6e:10:1e:43:f6:6b:
5a:6d:30:e0:05:d5:1e:84:82:4d:36:c4:42:c6:4b:
61:a8:cf:28:2c:6c:ab:cd:c6:9b:d5:4a:b2:fd:95:
b3:42:0b:a6:f7:4f:a4:c0:c1:9b:14:b4:c7:b5:b4:
b1:8c:b6:44:c5:ac:e8:a4:9c:32:1e:55:6b:a7:f2:
4a:be:f9:ab:e9:87:b1:3d:71:30:3f:63:47:14:ef:
6e:c6:62:08:eb:7f:a0:c2:b6:9f:d6:ca:20:fe:91:
7e:68:35:a3:0c:a4:6f:5f:66:f9:a6:e2:a0:ed:43:
b2:39:90:b3:1c:58:70:d1:3c:6f:56:42:23:ad:6c:
14:fb:61:74:95:eb:e6:95:19:e0:1d:d5:e5:44:52:
59:89:cb:d2:d1:80:6d:bd:ab:4b:6e:f9:2d:e4:00:
05:1e:3f:13:be:a4:c9:56:f2:8a:29:58:d7:79:51:
cb:77:72:b5:12:47:c2:a8:e6:25:d9:6b:5f:cf:d7:
c9:10:1f:ba:f9:a6:98:5c:e3:54:63:90:fe:ce:37:
3e:59:8e:f0:09:81:5f:d4:c3:13:5b:34:41:e7:b0:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/xUMOJG04eB4mahjWQVEPuZ-2I6c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137436
sbgp-ipAddrBlock: critical
IPv4:
103.108.188.0/23
103.115.204.0/23
IPv6:
2402:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:29:1b:a7:c5:3c:5b:9c:43:1e:5f:b7:a7:06:97:d1:55:31:
59:4c:b7:42:c9:e5:4d:b0:9e:54:6a:96:9b:07:e6:04:93:91:
3e:28:86:df:57:b5:10:b6:a7:ee:ed:ba:6e:8d:ef:46:f3:1f:
b2:77:98:6d:ed:b9:69:43:7e:bc:27:2b:36:e2:2e:08:7f:78:
b1:17:5f:0c:7e:09:67:77:1e:8a:4b:66:ed:f3:15:9e:4d:2e:
44:0b:e4:98:79:d1:83:53:d4:26:99:c9:c6:22:12:0f:f1:28:
cf:f4:b4:58:bf:51:54:90:6f:bf:75:8d:2a:07:cb:81:90:da:
89:02:cc:0e:9a:f7:d8:50:03:a7:b4:ad:32:3a:ab:99:38:a0:
2b:05:59:b8:19:60:15:e5:18:e3:52:41:47:e0:bf:b6:0e:76:
55:2a:0d:72:f8:c3:51:db:39:22:36:da:a6:02:20:dc:9e:e2:
2f:93:ce:c5:c7:d2:1e:b7:23:54:7b:48:3c:70:e7:cb:40:69:
ce:df:18:2b:16:96:a5:f3:06:12:83:5d:2b:37:74:ce:d4:b2:
95:59:61:8e:2d:8a:ad:3d:53:7d:d6:12:aa:fd:14:5f:a0:95:
d7:69:13:5d:13:94:4a:8d:52:e2:e6:af:ea:33:9a:e8:1e:46:
b0:fd:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:45 2024 by rpki-client on console-ams.rpki-client.org