Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
File:                     ajEj09qLvBGNPABC9HmTsxb2THc.cer (raw, json)
Hash identifier:          t+0cAJA96BnaJhl5dx6Q40e+/9JCOQhPy/T8Eqyt0b4=
Subject key identifier:   6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       24F4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:06:20 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 329073
                          IP: 102.215.144.0/22
                          IP: 2c0f:1e80::/32

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9460 (0x24f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:06:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:cf:d7:e4:48:d9:b4:61:12:0a:ac:16:52:
                    e3:f8:80:b8:c0:cc:1e:05:f9:0f:16:d1:fb:b6:33:
                    bf:c7:e5:cc:20:2f:77:5c:c2:22:24:ea:a4:bc:18:
                    e0:76:ff:ff:c0:aa:1f:d4:b0:4f:ad:89:0a:84:78:
                    e6:4f:f1:d3:33:59:2a:bd:c1:19:7e:70:47:15:32:
                    ed:3a:bf:a7:e6:81:57:c6:77:56:95:1f:6a:07:2b:
                    92:e0:78:dd:f5:66:9d:24:92:12:2a:24:09:6c:d7:
                    9a:46:0f:41:68:aa:09:7e:ae:03:b4:8f:1d:16:14:
                    f0:f5:da:be:41:21:a8:ec:6a:77:8c:fa:37:3a:ad:
                    0c:9f:7d:35:e9:26:d6:0f:f7:29:de:a1:66:7b:87:
                    51:eb:5b:21:29:3b:59:b1:f5:74:07:fc:fb:75:01:
                    b4:6a:5c:0d:3e:ed:42:7e:76:3f:49:a1:69:d5:33:
                    b5:45:d5:15:63:6b:c6:8e:60:93:87:3a:94:e4:5b:
                    94:a1:05:8c:61:da:b5:39:2e:a9:ee:d1:cf:45:1c:
                    96:e6:c3:6f:f3:64:9e:ff:a0:8c:a3:3d:92:d5:3f:
                    27:eb:f0:ad:73:2e:3a:1a:ed:fa:92:11:c0:b2:2d:
                    4c:00:07:3c:ea:e9:db:8a:d6:01:96:5f:42:6e:af:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329073

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.144.0/22
                IPv6:
                  2c0f:1e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:c3:7e:35:38:64:6e:9e:80:da:ce:0e:12:9d:3a:22:f2:e1:
         ad:8a:d7:7d:e0:9a:7d:5b:a4:e4:73:59:2e:6a:8e:53:6e:92:
         b8:19:85:81:f5:03:5e:7c:2e:cc:03:0d:bc:4c:4c:a2:16:52:
         e0:db:9e:a2:da:fa:e1:aa:02:ff:64:da:4a:16:d7:2a:8b:f1:
         58:d8:86:ec:7b:70:83:07:80:0f:b9:92:b5:a1:8c:28:25:e9:
         32:6d:09:22:c7:25:01:37:7a:60:71:e9:bd:fd:6c:f1:4a:bb:
         d5:40:30:78:08:3f:3e:4a:88:32:aa:dd:7c:e2:5e:bf:6e:b7:
         6b:68:65:e5:31:ba:b8:1e:47:1b:0f:97:c2:96:df:97:64:e4:
         c2:db:9b:98:8f:e8:5e:c3:47:1c:87:c6:d5:d5:5f:62:a7:b0:
         d3:57:de:47:3f:0a:32:8d:7a:75:50:e4:55:41:79:ee:40:d9:
         e1:82:ba:28:23:d4:7a:84:9d:e6:b2:3e:2e:00:d8:c8:c6:27:
         90:c2:6a:c6:26:b0:c4:bf:0b:f9:c2:13:90:12:b1:54:07:e5:
         04:43:6c:08:07:09:4b:84:f5:f4:2d:4c:c5:87:8f:5a:69:5f:
         41:62:78:c0:d0:56:fc:f6:c4:bf:65:5c:3a:0d:aa:14:9c:63:
         d7:f2:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----