Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
File:                     x2Gjqfrof48GnWgkccvhyTX74yE.cer (raw, json)
Hash identifier:          lsPrc0bjyl3GP/qAkpq7jq7cTtQCt6I0zMVX+ejt5iA=
Subject key identifier:   C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2DB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Apr 2024 01:31:23 +0000
Certificate not after:    Tue 15 Apr 2025 01:30:02 +0000
Subordinate resources:    IP: 61.114.0.0/18
                          IP: 61.117.128.0/17
                          IP: 61.204.128.0/17
                          IP: 61.215.0.0/17
                          IP: 124.109.128.0/17
                          IP: 202.161.192.0/18
                          IP: 202.164.64.0/19
                          IP: 210.141.224.0/19
                          IP: 210.143.32.0/19
                          IP: 210.158.0.0/19
                          IP: 210.159.0.0/19
                          IP: 210.166.128.0/18
                          IP: 210.167.128.0/17
                          IP: 210.168.128.0/18
                          IP: 210.173.64.0/19
                          IP: 210.188.128.0/18
                          IP: 210.189.0.0/18
                          IP: 210.189.128.0/19
                          IP: 210.191.0.0/18
                          IP: 210.191.160.0/19
                          IP: 210.198.64.0/18
                          IP: 210.199.0.0/18
                          IP: 210.199.128.0/17
                          IP: 210.224.0.0 -- 210.224.159.255
                          IP: 210.228.32.0 -- 210.228.127.255
                          IP: 210.229.128.0/19
                          IP: 210.229.192.0/19
                          IP: 210.233.96.0/19
                          IP: 210.235.64.0 -- 210.235.159.255
                          IP: 210.235.192.0/18
                          IP: 210.237.64.0/18
                          IP: 210.238.0.0/19
                          IP: 210.238.64.0/18
                          IP: 210.249.128.0/18
                          IP: 210.250.0.0/18
                          IP: 210.250.128.0/19
                          IP: 210.253.0.0/19
                          IP: 210.253.128.0/18
                          IP: 210.254.64.0/18
                          IP: 210.255.192.0/19
                          IP: 211.1.64.0/18
                          IP: 211.7.0.0/18
                          IP: 211.7.128.0/18
                          IP: 211.9.128.0/18
                          IP: 211.10.128.0/17
                          IP: 211.12.0.0/17
                          IP: 211.13.160.0/20
                          IP: 211.15.128.0/17
                          IP: 211.125.160.0/19
                          IP: 218.225.0.0/17
                          IP: 218.230.0.0/17
                          IP: 219.118.0.0/19
                          IP: 222.225.0.0/16

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 02:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11698 (0x2db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:31:23 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:4f:28:ec:75:b0:4f:b6:54:f5:67:82:97:
                    c4:2e:29:f8:02:16:da:40:d7:57:e3:d6:47:9c:73:
                    d3:15:aa:ab:7e:87:e9:88:38:15:3c:eb:9b:04:fe:
                    e1:10:3e:20:f2:e3:93:af:38:16:4f:13:af:c8:ab:
                    0c:5c:43:31:d3:dd:f4:53:c6:80:e6:31:70:ac:69:
                    a9:bb:48:43:6b:3c:f7:4c:28:bb:b9:8e:2e:b3:30:
                    89:35:fd:21:3d:91:88:47:7b:6b:b1:61:88:5d:d3:
                    6a:92:82:e1:ec:d3:bd:f6:cf:32:42:2d:59:bc:d9:
                    01:89:b8:78:45:65:7a:f0:f8:81:d9:e4:68:64:3d:
                    3c:52:a5:11:b3:b3:dd:98:b0:7e:42:93:b2:4a:3e:
                    a4:57:f0:2d:53:76:9a:57:13:41:5b:75:9b:a4:60:
                    eb:8d:9e:04:f7:25:5c:d1:90:fb:ec:a8:2f:1d:e0:
                    cc:7a:63:ec:65:43:d7:c0:bb:12:50:32:af:68:c3:
                    da:72:a7:40:00:23:be:69:b4:d9:ac:d0:0c:a1:14:
                    0c:f2:80:a2:25:6f:2e:dc:2a:33:29:84:3d:6a:17:
                    48:88:a3:fd:4f:fa:c9:26:73:91:20:79:b6:f5:6f:
                    f9:7f:fc:00:24:34:d8:7f:2f:f2:f6:dd:eb:d0:bb:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.0.0/18
                  61.117.128.0/17
                  61.204.128.0/17
                  61.215.0.0/17
                  124.109.128.0/17
                  202.161.192.0/18
                  202.164.64.0/19
                  210.141.224.0/19
                  210.143.32.0/19
                  210.158.0.0/19
                  210.159.0.0/19
                  210.166.128.0/18
                  210.167.128.0/17
                  210.168.128.0/18
                  210.173.64.0/19
                  210.188.128.0/18
                  210.189.0.0/18
                  210.189.128.0/19
                  210.191.0.0/18
                  210.191.160.0/19
                  210.198.64.0/18
                  210.199.0.0/18
                  210.199.128.0/17
                  210.224.0.0-210.224.159.255
                  210.228.32.0-210.228.127.255
                  210.229.128.0/19
                  210.229.192.0/19
                  210.233.96.0/19
                  210.235.64.0-210.235.159.255
                  210.235.192.0/18
                  210.237.64.0/18
                  210.238.0.0/19
                  210.238.64.0/18
                  210.249.128.0/18
                  210.250.0.0/18
                  210.250.128.0/19
                  210.253.0.0/19
                  210.253.128.0/18
                  210.254.64.0/18
                  210.255.192.0/19
                  211.1.64.0/18
                  211.7.0.0/18
                  211.7.128.0/18
                  211.9.128.0/18
                  211.10.128.0/17
                  211.12.0.0/17
                  211.13.160.0/20
                  211.15.128.0/17
                  211.125.160.0/19
                  218.225.0.0/17
                  218.230.0.0/17
                  219.118.0.0/19
                  222.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:57:1c:9a:58:63:34:21:a1:dd:64:dd:5f:8d:bd:24:7a:00:
         fa:7d:09:e3:56:1c:00:ac:7f:60:ef:8f:ed:2f:c8:75:12:3c:
         39:55:0b:34:09:18:9b:e9:8b:4c:44:0d:d2:30:a4:97:8e:74:
         d2:e5:18:fb:90:7e:cb:03:16:ba:e8:88:f0:23:c8:68:cd:b2:
         12:81:86:26:81:2c:7f:4e:7a:e3:01:1d:3a:2c:cd:e4:73:d8:
         ff:09:16:68:6b:7b:45:ed:44:80:65:7e:b1:53:cc:34:58:13:
         79:6d:b9:b5:f2:38:9d:e3:62:f0:e0:c2:7c:a1:9a:52:14:22:
         6b:41:f0:30:fc:08:b0:2b:4e:eb:2f:56:a1:c2:c3:98:6c:eb:
         7d:b6:70:da:8a:74:bc:c8:75:bb:25:0e:e5:c0:b2:09:fc:69:
         3a:e5:50:2e:ff:c8:5e:c9:96:34:4c:3e:d5:4e:eb:83:de:f8:
         bd:44:8c:d1:9a:91:99:fe:0f:44:73:6c:d1:d5:73:a0:b4:d7:
         36:a1:79:94:66:6d:b7:78:c5:22:93:40:d8:1a:1e:8e:22:92:
         e2:ac:e0:8f:58:d3:bb:4a:61:b6:ca:21:39:e7:39:a1:c1:c2:
         f5:bb:be:25:b0:35:8d:07:9e:8f:13:46:e4:30:1c:18:f6:e0:
         a7:a4:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org