Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
File:                     ewWczGC6qvz28UEhbv3WjocMJVE.cer (raw, json)
Hash identifier:          W4aOJYGtvzPONl5yd/C740pI6SM8oZHButFRZ5l19CQ=
Subject key identifier:   7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B28E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 19:06:42 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    IP: 43.255.80.0/22
                          IP: 103.238.128.0/22
                          IP: 2401:4e80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111246 (0x1b28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 19:06:42 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:a8:ab:83:20:55:d1:94:a7:c9:b2:31:71:
                    ae:5b:5f:0c:7a:96:28:83:91:1e:f9:16:17:b7:e0:
                    fb:2c:db:1e:4a:bd:9b:8d:9c:f9:fb:c4:42:fd:70:
                    2e:fe:bc:91:c5:49:6e:f0:0e:5f:8a:d3:cb:a4:8b:
                    60:cc:fb:14:7a:30:da:cc:61:7a:cf:76:79:49:91:
                    4c:28:62:97:c8:13:48:3e:28:89:73:9a:12:b4:f2:
                    24:62:c3:48:18:9f:4d:6b:58:db:18:f1:36:f4:06:
                    cc:3e:d8:1a:2b:f7:ad:70:04:93:4c:88:a0:53:aa:
                    c0:7f:5f:48:d7:5c:ef:48:c4:8f:dd:5e:87:a1:75:
                    82:93:7f:32:72:24:d1:c5:f7:f6:bc:67:4a:2a:46:
                    ec:1b:6e:e8:e1:d0:7e:5f:a1:2f:8a:69:78:6d:e3:
                    d2:b3:b3:ed:13:f9:82:cf:f6:fa:c4:76:db:b2:9d:
                    01:15:92:e0:f9:d7:65:8f:19:df:93:be:b6:0b:30:
                    da:de:4a:48:d8:88:4b:16:cd:9b:04:00:58:c0:78:
                    07:23:16:3a:76:29:66:39:bf:5f:75:2d:2e:86:a5:
                    db:54:2d:e5:c8:f6:11:c9:df:b9:01:10:7c:22:79:
                    af:a7:da:a3:3a:b7:5b:eb:73:ec:30:cd:a6:51:5a:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.80.0/22
                  103.238.128.0/22
                IPv6:
                  2401:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:16:31:11:3b:fe:c9:4d:62:28:89:4d:b6:6a:3b:ad:44:fd:
         f7:43:33:b1:c9:78:98:8b:bf:56:07:b1:99:bf:4c:a1:3f:74:
         5e:1b:2d:7b:70:3a:41:67:0f:3c:0e:02:90:22:79:55:3b:40:
         37:9f:4e:0a:e0:70:29:68:6c:25:e5:a0:a1:b6:90:51:6a:6b:
         25:56:30:ed:0b:27:8a:88:55:c9:27:99:35:e0:79:a2:07:90:
         2b:14:42:de:9c:5f:d0:b1:f9:67:31:2d:b9:0a:e2:15:46:37:
         b7:ae:89:26:31:d7:09:69:97:ff:6f:ad:1f:da:fc:da:95:4d:
         5c:6d:05:b6:08:b0:d3:f0:26:9d:92:cc:39:69:bd:b5:82:d3:
         06:64:ed:f5:16:06:61:b3:a9:75:59:f3:b2:10:66:23:d0:f8:
         01:53:28:2b:16:27:f4:59:dc:48:02:54:cf:cc:c6:46:86:77:
         1a:09:47:5d:b2:d9:0c:30:41:df:5d:43:5c:3f:6b:13:06:f9:
         72:7e:93:a3:95:f1:8b:65:d7:f0:5c:80:b1:91:c5:4d:b2:f9:
         cb:57:84:8a:c8:20:73:2f:de:73:c1:05:4e:f2:1f:a3:d5:f3:
         76:c4:7a:2c:a0:89:49:cb:a1:14:ee:23:1c:5a:36:a6:5b:54:
         2d:82:c5:f7
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDAbKOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcyNzE5MDY0MloXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTYxMzExMTAvBgNVBAUTKDdCMDU5Q0NDNjBCQUFBRkNGNkYxNDEy
MTZFRkRENjhFODcwQzI1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe3KirgyBV0ZSnybIxca5bXwx6liiDkR75Fhe34Pss2x5KvZuNnPn7xEL9cC7+
vJHFSW7wDl+K08uki2DM+xR6MNrMYXrPdnlJkUwoYpfIE0g+KIlzmhK08iRiw0gY
n01rWNsY8Tb0Bsw+2Bor961wBJNMiKBTqsB/X0jXXO9IxI/dXoehdYKTfzJyJNHF
9/a8Z0oqRuwbbujh0H5foS+KaXht49Kzs+0T+YLP9vrEdtuynQEVkuD512WPGd+T
vrYLMNreSkjYiEsWzZsEAFjAeAcjFjp2KWY5v191LS6GpdtULeXI9hHJ37kBEHwi
ea+n2qM6t1vrc+wwzaZRWmZ7AgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUewWczGC6
qvz28UEhbv3WjocMJVEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE2MTMxLzBGQ0IzRDM4MjhENjExRUI4NEU0QzkzQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNjEzMS8wRkNCM0QzODI4RDYxMUVCODRFNEM5M0JDNEY5QUUwMi9ld1djekdD
NnF2ejI4VUVoYnYzV2pvY01KVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAIr/1ADBAJn7oAwDQQCAAIwBwMFACQBToAwDQYJKoZIhvcNAQEL
BQADggEBAHAWMRE7/slNYiiJTbZqO61E/fdDM7HJeJiLv1YHsZm/TKE/dF4bLXtw
OkFnDzwOApAieVU7QDefTgrgcClobCXloKG2kFFqayVWMO0LJ4qIVcknmTXgeaIH
kCsUQt6cX9Cx+WcxLbkK4hVGN7euiSYx1wlpl/9vrR/a/NqVTVxtBbYIsNPwJp2S
zDlpvbWC0wZk7fUWBmGzqXVZ87IQZiPQ+AFTKCsWJ/RZ3EgCVM/MxkaGdxoJR12y
2QwwQd9dQ1w/axMG+XJ+k6OV8Ytl1/BcgLGRxU2y+ctXhIrIIHMv3nPBBU7yH6PV
83bEeiygiUnLoRTuIxxaNqZbVC2Cxfc=
-----END CERTIFICATE-----