Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer
File: yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer (raw, json)
Hash identifier: 0Da8qyiQOrJYBO9cQ4K2eo60Xma9eX/YNObK7ZJKIeg=
Subject key identifier: C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F447
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 May 2024 20:30:26 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 134526
IP: 2403:6dc0::/32
Validation: Failed, certificate revoked on Mon 17 Jun 2024 20:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128071 (0x1f447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 20:30:26 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:4f:73:3b:79:e0:a9:f4:c4:ad:81:35:64:
40:45:03:30:38:05:c5:6c:e0:6e:e1:41:42:c3:fd:
cd:ab:6b:5e:63:7b:38:53:8a:fe:95:98:5d:71:8c:
5f:d5:22:a8:ea:0c:85:c6:8e:c9:e4:cd:9c:0b:44:
a0:21:6c:1e:a7:ef:a0:0b:59:16:c5:78:e1:6d:cb:
59:1f:0b:fe:76:14:5f:82:ea:08:7d:de:eb:50:5d:
14:fb:07:59:23:94:dd:11:d7:1d:f4:77:90:af:e5:
bb:13:5f:8d:6b:45:e5:6b:3c:e9:9c:86:59:91:1b:
10:17:7d:d8:f6:e3:ee:e0:9e:d8:98:49:13:e4:6e:
25:ea:5a:db:94:52:87:37:57:4f:58:06:f2:17:8d:
60:9d:67:dd:f3:57:8a:21:98:29:32:02:d8:9f:0c:
fc:be:e2:09:ec:f6:5b:f1:53:f6:1f:11:cc:ac:cd:
9d:f7:52:d9:fd:bf:71:5a:1a:f2:39:3b:72:c2:d1:
35:6f:c6:c0:67:4d:c3:29:14:75:f4:ee:9d:3d:a4:
d6:43:17:b4:0a:7a:eb:7e:bd:dc:53:2c:5d:83:11:
b4:a4:2e:ab:90:81:d7:60:bd:c3:61:0c:8d:b2:45:
1c:8d:b5:8e:0a:9e:bc:a9:4b:f0:96:5a:00:93:cb:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134526
sbgp-ipAddrBlock: critical
IPv6:
2403:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
79:d0:d4:28:75:6d:34:b1:e4:55:6c:d3:4f:25:a4:8f:9a:4b:
9c:ea:f6:15:5e:89:6b:96:f8:7c:ae:cb:46:18:c2:58:1a:f5:
6a:33:bd:30:b9:f9:9e:2c:d9:01:94:7d:e9:9b:09:70:af:50:
ad:28:de:ac:c6:73:84:51:2d:9a:ba:88:13:86:6c:2f:a2:5f:
de:a0:48:b8:bb:5c:c3:1b:3d:80:5e:a5:0e:39:dd:b4:ba:3f:
67:76:96:46:92:39:f0:4a:a8:29:1a:d3:ce:e7:88:5a:a0:76:
11:06:56:23:7d:57:55:eb:47:79:ed:fe:c7:d1:60:ac:b3:20:
9e:88:1e:fd:45:03:e6:17:a7:5e:a2:df:5e:3d:c7:6e:e2:66:
fe:09:f8:a4:d2:db:56:4c:69:6a:bc:e9:71:d1:24:0e:b8:9e:
ac:d1:ef:4c:90:b5:4f:26:b8:13:c3:a4:3f:04:b6:43:a9:5c:
63:a7:db:e3:3a:55:de:6a:2f:42:65:01:02:e9:b9:2a:b6:5e:
58:99:53:93:30:5d:9e:dd:de:61:98:3c:57:d0:fd:2b:91:45:
be:15:1f:8b:ff:f9:9d:e0:99:ed:ad:e1:14:15:05:f7:7b:f7:
da:63:5f:43:78:dd:f3:15:5b:93:f2:70:14:be:c0:71:df:82:
2e:1c:ef:d6
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAfRHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUyODIwMzAyNloXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzlEMkExMTAvBgNVBAUTKEM5OUVGMjBGOUYwQjAwNzdDNzBENUQ3
MzAwRTBCQkZEODcyMUVGRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx8E9zO3ngqfTErYE1ZEBFAzA4BcVs4G7hQULD/c2ra15jezhTiv6VmF1xjF/V
IqjqDIXGjsnkzZwLRKAhbB6n76ALWRbFeOFty1kfC/52FF+C6gh93utQXRT7B1kj
lN0R1x30d5Cv5bsTX41rReVrPOmchlmRGxAXfdj24+7gntiYSRPkbiXqWtuUUoc3
V09YBvIXjWCdZ93zV4ohmCkyAtifDPy+4gns9lvxU/YfEcyszZ33Utn9v3FaGvI5
O3LC0TVvxsBnTcMpFHX07p09pNZDF7QKeut+vdxTLF2DEbSkLquQgddgvcNhDI2y
RRyNtY4KnrypS/CWWgCTyxX7AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUyZ7yD58L
AHfHDV1zAOC7/Ych7/8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM5RDJBLzU1MjVGNUUwM0RDMTExRUFBRjk4Q0IzNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOUQyQS81NTI1RjVFMDNEQzExMUVBQUY5OENCMzVDNEY5QUUwMi95Wjd5RDU4
TEFIZkhEVjF6QU9DN19ZY2g3XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg1+MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJANtwDANBgkq
hkiG9w0BAQsFAAOCAQEAedDUKHVtNLHkVWzTTyWkj5pLnOr2FV6Ja5b4fK7LRhjC
WBr1ajO9MLn5nizZAZR96ZsJcK9QrSjerMZzhFEtmrqIE4ZsL6Jf3qBIuLtcwxs9
gF6lDjndtLo/Z3aWRpI58EqoKRrTzueIWqB2EQZWI31XVetHee3+x9FgrLMgnoge
/UUD5henXqLfXj3HbuJm/gn4pNLbVkxparzpcdEkDrierNHvTJC1Tya4E8OkPwS2
Q6lcY6fb4zpV3movQmUBAum5KrZeWJlTkzBdnt3eYZg8V9D9K5FFvhUfi//5neCZ
7a3hFBUF93v32mNfQ3jd8xVbk/JwFL7Acd+CLhzv1g==
-----END CERTIFICATE-----
Generated at Tue Jun 18 02:28:03 2024 by rpki-client on console-ams.rpki-client.org