Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer
File:                     D4D0DTKGhSybn240W-HVvS-VSDI.cer (raw, json)
Hash identifier:          JkvJHglXFgiYzbCnT/7XvnyE7WiDe9ZIw8P+2Gd8ims=
Subject key identifier:   0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4545
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 02 Mar 2024 12:47:17 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    IP: 185.203.36.0/22

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 13:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17733 (0x4545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Mar  2 12:47:17 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:df:6d:7f:cf:09:de:bb:3c:bb:6e:01:2d:
                    86:e6:a2:e4:3c:94:d5:e1:c2:0a:3e:f8:2d:d9:b4:
                    5f:07:52:91:e2:57:b6:69:24:03:59:2b:bd:41:00:
                    62:61:75:82:29:71:7c:fe:b6:17:9d:88:55:10:56:
                    3e:dc:48:4a:20:ac:d9:4f:2e:dd:21:f2:04:ab:57:
                    5f:c4:f0:1f:6d:34:1a:73:78:ea:18:bb:ac:bf:c4:
                    05:a2:b8:e3:08:de:42:58:60:78:58:c4:10:17:0b:
                    21:f5:ab:04:1c:db:9f:ce:11:7e:35:dc:bc:23:f7:
                    ac:fb:0e:35:a0:cf:bf:6b:a9:27:f1:ff:fc:ef:f9:
                    8f:86:06:55:a6:bb:2a:2c:2c:af:71:7e:1d:be:4d:
                    20:94:62:3c:22:5f:e5:b0:db:d4:15:6b:fa:36:f9:
                    b4:6d:e3:97:c1:4c:6e:2a:0d:fe:a7:9e:e4:ff:a3:
                    00:22:de:e9:33:97:dd:6d:39:71:c7:33:c6:2a:26:
                    ce:bf:a9:c8:da:b5:a1:b1:78:8c:e5:e8:20:43:73:
                    86:20:1f:a8:0a:1a:70:5b:58:51:86:54:65:9e:eb:
                    e6:8b:7e:86:3c:83:ab:6b:43:8c:ea:d4:a3:f5:8f:
                    59:2b:2d:29:a5:3d:fa:f5:de:0f:f2:10:1d:87:2c:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:5e:8b:1b:07:1b:b3:70:a8:57:37:a0:07:fb:97:38:a3:0f:
         69:87:cc:13:a6:8b:e1:ae:ae:8f:30:85:4b:d4:74:b2:d1:2b:
         92:62:53:26:cf:72:c8:0e:eb:ef:4f:45:59:8a:97:3c:f3:9a:
         8b:7e:dd:ef:1f:de:f1:1b:8d:93:0f:8b:db:d2:61:42:b2:9c:
         15:f2:1a:c9:3a:42:cc:92:84:30:f5:35:29:8c:bc:01:9f:0e:
         c5:d7:d8:e6:bd:19:e5:d8:a8:3a:cc:4a:78:5d:2d:7f:5a:d6:
         d4:22:e7:e3:2e:b9:ad:29:f7:5b:6a:6f:38:00:94:27:4b:b7:
         ab:fd:c7:cb:dc:6a:ca:3b:76:ac:5d:a7:15:10:26:3d:a6:31:
         dc:7b:de:cf:47:f2:0e:b6:9a:45:ea:ae:b2:6d:aa:d4:b2:69:
         c5:22:84:bd:87:8b:76:9c:e8:bd:aa:eb:97:e3:dc:6f:56:dc:
         d9:1a:a2:e1:93:c8:65:9a:33:94:a4:0c:a8:44:9a:74:05:51:
         fa:e7:11:b4:fc:c0:d6:ce:8f:23:cb:6e:a4:2d:25:22:6e:25:
         89:9d:bf:8f:7f:3b:43:5a:a7:bf:7e:3a:6e:d4:6b:18:2d:81:
         1e:ab:f7:6f:8c:a4:9c:5f:a9:0b:98:b5:31:59:0c:c1:65:ad:
         d8:92:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 16:54:48 2024 by rpki-client on console-fra.rpki-client.org