Certificate

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer
File:                     GmvpIefaH1HzjCmfeS9ezAy2q54.cer (raw, json)
Hash identifier:          1BVB5cOtRlOHkgXBEIPRhjXzQtHQsrQotoAFrKNGEj4=
Subject key identifier:   1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E
Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F
Certificate issuer:       /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
Certificate serial:       2DB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
Manifest:                 rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/GmvpIefaH1HzjCmfeS9ezAy2q54.mft
caRepository:             rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/
Notify URL:               https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
Certificate not before:   Mon 15 Apr 2024 01:31:22 +0000
Certificate not after:    Tue 15 Apr 2025 01:30:02 +0000
Subordinate resources:    IP: 2001:2a0::/32
                          IP: 2001:2c8::/32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 02:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11697 (0x2db1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F
        Validity
            Not Before: Apr 15 01:31:22 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:88:8e:41:79:ad:23:ef:df:a9:46:1d:8c:
                    63:12:88:e2:24:29:0e:12:0b:0f:14:12:fb:a0:ce:
                    9a:d1:c5:4c:91:ed:3e:5c:72:8f:16:6e:2e:94:5f:
                    de:d6:e8:f6:f9:fe:82:c8:8b:bb:e0:b2:de:86:0a:
                    8c:36:38:f0:41:2c:e2:59:59:5d:73:b4:ca:0d:9a:
                    41:d9:c5:0b:a7:c9:b1:ad:84:81:d9:08:0c:84:8d:
                    03:7b:10:12:0f:63:75:9f:42:d9:0a:3a:51:32:1f:
                    21:58:50:5d:46:cd:58:49:a9:58:03:5f:25:e6:61:
                    17:3e:38:ef:ec:83:3b:5d:63:46:c6:2a:3a:2b:8c:
                    77:3a:c7:10:2f:33:68:36:81:53:2d:f3:cd:04:6f:
                    57:1c:bf:d8:d0:08:46:88:9e:f8:16:fd:7e:7b:f2:
                    0b:54:54:c3:d1:67:9b:9c:7e:c0:f7:56:e4:54:c3:
                    e4:b7:ae:46:08:5a:8a:93:f8:25:d8:57:ed:2a:67:
                    cf:f6:e7:02:fb:20:c7:a8:76:f9:4a:83:a7:b9:22:
                    ed:e2:6f:04:23:8c:d5:6f:91:4c:ff:c0:dd:ff:40:
                    83:74:49:69:ad:c4:0c:0d:9d:87:0b:82:2f:9c:dd:
                    da:2f:a7:2a:19:db:35:40:31:05:28:aa:dd:00:f0:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E
            X509v3 Authority Key Identifier:
                keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/
                RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/GmvpIefaH1HzjCmfeS9ezAy2q54.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2a0::/32
                  2001:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:c0:4f:be:56:f2:25:6c:a0:84:c7:a2:e3:66:a6:36:d6:
         9b:d0:14:ee:b5:ac:22:c3:67:9e:75:50:d5:f7:92:ea:f2:d6:
         29:df:3b:65:f5:e0:16:f2:03:ca:e5:6f:c1:93:d7:7a:1b:25:
         60:5c:ed:96:ac:b5:4d:de:c8:38:a7:76:d7:68:e7:6f:2f:59:
         f6:ed:81:6b:2d:41:aa:aa:02:72:be:fb:f0:53:65:1d:58:c2:
         0d:ff:79:8c:db:d2:f0:2d:78:10:cb:f8:f0:a4:7f:9f:a1:48:
         b7:6b:70:86:e6:ff:10:15:c5:8c:25:2c:6c:d6:3e:87:ea:90:
         73:c3:81:35:fa:d8:25:95:16:4b:3a:22:0e:c1:d3:bd:ac:9c:
         1d:cf:29:46:bb:c9:5b:e9:cf:3c:f9:9a:17:ed:d6:7c:66:63:
         3f:65:e7:52:ce:ba:cc:14:65:7d:68:fe:d4:b0:27:a8:8f:47:
         5d:aa:91:7c:f5:09:a2:5a:50:5d:84:da:de:42:54:ed:58:a4:
         ad:97:15:9f:68:62:fd:d1:bc:d3:5b:16:d6:90:23:dc:e8:c8:
         5d:a1:c9:de:4c:6e:bb:7c:fc:02:34:e5:f3:58:8b:6e:a2:02:
         d4:e1:7b:89:00:a8:d5:06:22:2f:93:d4:d7:78:e1:fa:6e:be:
         65:27:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 02:39:56 2024 by rpki-client on console-fra.rpki-client.org