Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.cer
File:                     cOCKcSHNNs9zxMpCgOyt2Dc5JKg.cer (raw, json)
Hash identifier:          E1yQaoZFqEKFOx/wGOu96QAUWA/2iohNKegNr8oXOgA=
Subject key identifier:   70:E0:8A:71:21:CD:36:CF:73:C4:CA:42:80:EC:AD:D8:37:39:24:A8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4716
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 16:45:54 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 56868

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 17:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18198 (0x4716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jul 10 16:45:54 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A919EAF3/serialNumber=70E08A7121CD36CF73C4CA4280ECADD8373924A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:d4:60:b6:7c:bf:f0:d1:b5:0e:12:2b:b6:
                    b6:20:f6:da:8c:c4:ae:54:b1:59:6a:27:ed:e6:3e:
                    ee:88:9a:ad:a3:5b:80:e5:6c:1c:61:c7:e7:51:e3:
                    9f:98:21:56:2b:20:b1:66:03:7b:3b:90:a8:5d:bf:
                    ce:8c:ee:69:62:08:c2:28:44:7f:a8:6f:0d:43:e0:
                    c9:51:45:38:00:e6:19:72:51:32:97:97:45:0e:fb:
                    bf:c0:1a:b8:8d:17:3b:25:02:95:64:69:5f:70:66:
                    1b:28:c6:ed:0f:70:3d:ac:38:3b:ce:80:00:68:e0:
                    86:e1:4c:f4:28:0f:85:fb:a4:2f:fd:26:3e:74:b3:
                    85:be:b3:da:2a:6f:b9:a4:e6:07:4b:8e:0c:db:ab:
                    fe:38:41:01:a9:6c:6e:97:05:36:f1:d1:59:7f:25:
                    51:7e:5d:1a:b4:7a:36:26:20:08:91:a9:fe:88:61:
                    d0:1e:d7:4c:26:fc:bd:f3:57:33:f3:c5:c6:e4:f5:
                    10:af:18:b4:dd:a8:e6:fe:22:51:e8:d1:af:f6:61:
                    00:ef:27:50:92:c9:a2:04:62:59:8a:e2:13:69:34:
                    34:34:76:8f:03:16:6b:0c:69:ab:e4:61:29:a4:5e:
                    54:b7:46:77:fb:5d:31:95:ed:ea:52:7b:b8:6a:b0:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:8A:71:21:CD:36:CF:73:C4:CA:42:80:EC:AD:D8:37:39:24:A8
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56868

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:8b:62:1e:e1:4f:c5:55:7d:80:7c:9a:c0:5d:a3:07:63:
         3b:a6:c0:25:8c:12:18:4f:9e:b3:49:c3:03:42:60:33:d9:fb:
         2a:b6:aa:56:ae:71:61:e2:16:90:32:f8:c1:d4:c1:e8:cb:f8:
         0d:65:06:29:34:4c:cd:93:a2:a6:c6:b1:de:72:3b:dd:46:f3:
         fb:97:15:fc:ad:0d:fe:16:e9:1c:1f:ef:52:32:91:83:8b:a8:
         32:fe:be:65:e0:fe:04:05:4d:19:91:35:5f:79:9d:6c:f5:48:
         56:7d:12:be:0f:f4:3d:4d:2a:d8:df:65:ea:e1:80:45:42:5c:
         9a:61:a9:1e:31:3a:52:94:19:f3:70:c0:0b:22:26:b5:6f:e8:
         de:6b:0e:15:01:f9:4e:28:c6:43:8c:9f:bc:de:f2:87:d6:c1:
         43:58:28:03:f3:be:36:1b:0d:95:46:bb:60:fc:2d:94:62:55:
         ef:df:a0:96:3a:70:c4:4a:e6:8d:55:5b:aa:28:6e:1c:63:bd:
         d4:40:41:87:33:c2:69:42:cb:45:77:4e:08:52:64:c5:96:de:
         e1:f2:96:e9:20:1c:57:c8:c9:23:90:e8:0c:aa:57:28:6f:00:
         80:23:7e:a7:b5:15:75:4c:57:fd:42:ab:f9:04:01:f5:c7:99:
         ae:b9:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----