Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer
File:                     KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer (raw, json)
Hash identifier:          JQuvtUGK2+9xuxncrC8b9IYMmvlLL8fkQ762GEMz/Sc=
Subject key identifier:   28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4580
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Oct 2022 15:53:46 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 137.219.0.0/16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17792 (0x4580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  4 15:53:46 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:27:11:4e:ff:ca:01:02:2f:fc:aa:67:76:
                    c7:2f:a5:6a:4f:40:fb:65:7f:7a:a7:bd:65:bf:99:
                    54:31:03:de:34:18:c2:ed:55:30:cf:5a:63:f0:3f:
                    62:8a:04:71:e8:80:ff:84:3a:95:46:52:38:18:34:
                    35:4e:c5:06:f9:6f:40:fb:5e:c9:a5:5a:a7:93:4c:
                    23:ad:8c:a3:47:c1:0e:f6:a0:f2:6a:1d:04:fb:f0:
                    40:95:cc:d5:8e:92:3f:15:19:f8:3a:41:8a:28:ce:
                    16:76:a0:bf:ca:f2:b8:1a:41:f4:9e:23:fb:22:fb:
                    10:f1:80:49:0f:d8:a7:2e:2c:97:54:e1:4a:0a:6f:
                    2f:d5:1e:5a:62:d7:1c:2d:bf:35:81:31:e8:9e:fd:
                    e6:03:b5:64:c2:dd:b4:a7:73:25:1f:0d:81:27:2e:
                    53:22:40:29:dc:94:b4:96:cb:11:34:a3:6b:79:71:
                    88:05:8e:81:1b:ee:da:38:8b:1b:a1:36:45:28:c6:
                    bb:1e:1e:ce:d9:2e:69:e3:b8:b4:51:e2:b5:5f:43:
                    d5:95:c6:a6:1a:69:06:de:f2:3f:e6:fd:d8:03:d2:
                    b1:0f:e3:aa:5b:31:61:bb:45:84:de:ad:e1:af:32:
                    3a:e6:20:0d:4a:1e:38:08:d7:31:16:68:e7:d6:ec:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:65:79:96:c8:cd:23:b5:36:67:31:31:97:cb:b7:3e:76:
         1c:0c:8f:8e:76:fa:58:64:6f:60:2b:68:1f:61:ea:c2:5f:99:
         8d:59:38:de:63:07:91:09:06:03:4c:5b:80:12:dc:81:bf:b5:
         5c:09:e7:2d:1c:a0:fa:ac:6e:88:ac:0e:57:77:2b:05:16:5d:
         76:47:59:88:38:19:c6:06:73:08:72:02:13:c7:76:fc:79:a6:
         fa:16:bf:9b:3c:0b:35:f7:ad:f0:5e:88:e4:90:eb:30:82:ce:
         3e:1e:45:19:73:f3:99:0e:50:c4:9d:42:c2:87:ea:8a:6f:80:
         d3:45:d4:a9:cb:1e:89:8d:8b:d4:a7:84:6b:d8:eb:70:af:55:
         24:29:54:0a:e1:5b:3f:78:54:1e:eb:20:50:3b:16:82:85:9e:
         25:dd:78:a9:12:df:3b:d6:d1:a0:78:be:ec:ad:ed:b5:31:f9:
         e3:d1:4a:7b:73:84:3f:20:a4:5b:17:fa:70:56:96:fb:0e:e4:
         f9:a0:fc:82:10:16:0d:6d:10:8f:76:8d:aa:b7:e5:65:98:ef:
         d3:56:3a:77:94:40:60:74:cd:9f:93:0f:d8:76:84:dd:0d:af:
         c0:55:f6:c5:00:7d:9b:3d:43:14:eb:e1:b3:32:9c:d3:a7:65:
         12:9f:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 15:49:20 2023 by rpki-client on console-fra.rpki-client.org