
Certificate
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.cer
File: CD468DB63484507F4C8FE71A22B015C19EA23A49.cer (raw, json)
Hash identifier: lewxJxvix1jRD2z83PkVQjLOplAW/ybaVOlkjTBgPFQ=
Subject key identifier: CD:46:8D:B6:34:84:50:7F:4C:8F:E7:1A:22:B0:15:C1:9E:A2:3A:49
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 465E15275D938F23A7447951A9165387CF7A1DCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Manifest: rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.mft
caRepository: rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/
Notify URL: https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
Certificate not before: Wed 14 Jun 2023 14:58:38 +0000
Certificate not after: Wed 12 Jun 2024 15:03:38 +0000
Subordinate resources: AS: 140938
IP: 2406:4440:e000::/40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5e:15:27:5d:93:8f:23:a7:44:79:51:a9:16:53:87:cf:7a:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jun 14 14:58:38 2023 GMT
Not After : Jun 12 15:03:38 2024 GMT
Subject: CN=CD468DB63484507F4C8FE71A22B015C19EA23A49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:48:5c:e0:a7:a6:54:a6:40:06:00:46:8c:
96:9a:0f:78:71:bd:7f:d0:61:74:8a:d3:5a:3a:bb:
11:d1:2a:a8:00:ea:cc:95:bf:ea:69:c2:e1:7b:09:
b7:09:d9:bc:42:c1:1d:f1:bc:f9:fb:7d:20:1d:5f:
51:09:31:29:a9:22:af:9f:cf:6b:28:00:4a:0c:fa:
7c:01:d5:05:59:64:80:4e:36:ff:12:b3:28:07:0d:
82:d1:ce:af:8e:3d:8e:9b:c8:bc:f9:f6:cf:c5:6c:
c6:b0:56:05:91:5c:22:4d:d3:68:d4:89:5c:99:c5:
0a:4e:5d:27:18:d0:0c:3e:1a:f0:08:cb:43:43:ea:
7f:e7:ef:59:1f:47:f0:8d:15:8b:46:45:83:81:5c:
e2:2d:b6:eb:32:38:48:a3:c7:82:79:d1:8e:1c:50:
46:25:0f:52:48:ac:a7:2b:97:78:93:95:52:1e:07:
45:ff:76:8a:5c:22:27:a1:7d:10:5f:e7:38:7f:8b:
9d:bc:52:2d:f2:3d:5a:6f:b0:ee:1f:f1:05:b7:18:
86:80:09:bf:c2:9d:cc:c5:56:13:4a:49:25:c3:ef:
dc:3a:1a:16:f4:85:5f:78:7b:ac:a1:af:43:5a:da:
f0:89:c9:91:a6:61:9d:50:0a:ca:aa:86:7b:a4:28:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:46:8D:B6:34:84:50:7F:4C:8F:E7:1A:22:B0:15:C1:9E:A2:3A:49
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/
RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/CD468DB63484507F4C8FE71A22B015C19EA23A49.mft
RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:4440:e000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140938
Signature Algorithm: sha256WithRSAEncryption
c3:af:ec:20:50:f7:fb:ed:2a:78:6c:bb:2d:de:21:68:76:87:
c1:99:1d:63:89:dd:4d:4f:b6:7d:ae:2f:54:41:d4:be:e4:b7:
bc:30:d4:0d:e0:61:e2:3f:98:60:6e:28:88:67:10:b5:9f:1e:
34:d6:64:3c:16:aa:e2:57:f2:22:50:e7:f5:d1:a7:c5:7d:17:
c6:c5:e3:2f:ac:b8:01:8b:ea:55:3a:0f:93:c1:c1:fe:0d:b9:
4c:8a:af:cc:9d:3c:26:a6:f3:73:00:fc:c0:3b:3d:93:d3:54:
14:14:7d:2d:09:c4:49:e8:c8:95:00:ed:e9:c8:8f:49:59:47:
33:81:b0:bd:42:aa:a5:25:91:e4:3d:06:6f:38:7f:64:4a:8a:
ef:96:48:ed:d0:e2:16:54:24:76:64:0a:5d:db:80:3b:a0:f9:
f8:60:5e:77:3c:79:52:93:ef:ec:92:40:af:5b:4e:27:24:3b:
d7:ff:d4:23:92:b1:bd:ab:d2:b1:53:f7:c9:13:e2:94:80:78:
c6:bf:ef:16:da:ba:ee:da:a2:81:cd:2b:d2:d7:a8:3b:4d:8c:
1f:fc:81:e7:81:54:34:b1:bb:e9:fe:34:8f:d3:aa:24:28:93:
c6:7a:ea:e0:fa:b2:37:5c:d7:01:a4:f5:5f:be:df:bf:4f:fe:
3d:22:e0:08
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIURl4VJ12TjyOnRHlRqRZTh896Hc0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTIzMDYxNDE0NTgzOFoX
DTI0MDYxMjE1MDMzOFowMzExMC8GA1UEAxMoQ0Q0NjhEQjYzNDg0NTA3RjRDOEZF
NzFBMjJCMDE1QzE5RUEyM0E0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+ZSFzgp6ZUpkAGAEaMlpoPeHG9f9BhdIrTWjq7EdEqqADqzJW/6mnC4XsJ
twnZvELBHfG8+ft9IB1fUQkxKakir5/PaygASgz6fAHVBVlkgE42/xKzKAcNgtHO
r449jpvIvPn2z8VsxrBWBZFcIk3TaNSJXJnFCk5dJxjQDD4a8AjLQ0Pqf+fvWR9H
8I0Vi0ZFg4Fc4i226zI4SKPHgnnRjhxQRiUPUkispyuXeJOVUh4HRf92ilwiJ6F9
EF/nOH+LnbxSLfI9Wm+w7h/xBbcYhoAJv8KdzMVWE0pJJcPv3DoaFvSFX3h7rKGv
Q1ra8InJkaZhnVAKyqqGe6QoLhsCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFM1GjbY0hFB/TI/nGiKwFcGeojpJMB8GA1UdIwQYMBaAFFoX
lkiz7yNp3Oe9tYFA/33HBgq/MA4GA1UdDwEB/wQEAwIBBjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Nha3V5YS5uYXQubW9lL3JlcG8vTkFUT0NBLzEvNUExNzk2
NDhCM0VGMjM2OURDRTdCREI1ODE0MEZGN0RDNzA2MEFCRi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvV2hlV1NMUHZJ
Mm5jNTcyMWdVRF9mY2NHQ3I4LmNlcjCB8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYB
BQUHMAWGLHJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj
LzEvMGQGCCsGAQUFBzAKhlhyc3luYzovL3Jwa2ktcnN5bmMubW5paHljLmNvbS9y
ZXBvL21uaWh5Yy8xL0NENDY4REI2MzQ4NDUwN0Y0QzhGRTcxQTIyQjAxNUMxOUVB
MjNBNDkubWZ0MD4GCCsGAQUFBzANhjJodHRwczovL3Jwa2ktcnJkcC5tbmloeWMu
Y29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAZEQOAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAiaKMA0GCSqGSIb3DQEBCwUAA4IBAQDDr+wgUPf77Sp4
bLst3iFodofBmR1jid1NT7Z9ri9UQdS+5Le8MNQN4GHiP5hgbiiIZxC1nx401mQ8
FqriV/IiUOf10afFfRfGxeMvrLgBi+pVOg+TwcH+DblMiq/MnTwmpvNzAPzAOz2T
01QUFH0tCcRJ6MiVAO3pyI9JWUczgbC9QqqlJZHkPQZvOH9kSorvlkjt0OIWVCR2
ZApd24A7oPn4YF53PHlSk+/skkCvW04nJDvX/9QjkrG9q9KxU/fJE+KUgHjGv+8W
2rru2qKBzSvS16g7TYwf/IHngVQ0sbvp/jSP06okKJPGeurg+rI3XNcBpPVfvt+/
T/49IuAI
-----END CERTIFICATE-----
Generated at Tue May 13 04:56:35 2025 by rpki-client