Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer
File:                     KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer (raw, json)
Hash identifier:          ca8VWX3ROVqwDruj0SorvK1dT+trG6HKxUi8SRUs89c=
Subject key identifier:   29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5044
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jan 2024 22:22:29 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 161.118.0.0/16

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 12:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20548 (0x5044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 10 22:22:29 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A9112A43/serialNumber=295B8404DE75A33E8E87B010E66A3B10AF40E83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:ed:0b:41:79:0d:ca:10:46:e1:52:df:d3:
                    d5:fb:14:be:3e:63:85:de:0a:51:69:9a:9b:a9:0f:
                    65:3b:c4:c1:fd:3d:5a:94:e5:15:06:7c:b1:f5:c6:
                    a3:3f:e5:ea:25:ed:07:8e:7f:5c:c3:6d:bc:ef:9b:
                    3e:f3:d1:dc:04:b7:6e:0f:f6:30:41:25:12:d1:c8:
                    1a:4b:4c:a8:2a:3c:41:ee:49:bd:d7:28:65:af:9b:
                    54:e2:14:94:1f:45:bf:63:12:ec:8c:18:05:ab:f4:
                    b2:cf:e7:d2:fd:e5:d8:51:91:a6:be:74:98:ac:89:
                    ee:88:7d:ab:c6:68:eb:9e:a8:51:25:55:f2:05:bb:
                    f0:7d:2d:4a:1f:2b:a2:d2:98:c3:e2:d5:e4:19:be:
                    4c:80:36:23:fe:80:12:0b:63:ce:9f:12:38:26:d9:
                    1d:ff:68:ac:fd:15:70:c1:ab:a9:a7:c5:3d:49:1e:
                    2a:5a:c4:db:62:ec:66:d2:35:bd:51:a2:7b:35:fd:
                    7a:e9:0d:01:35:1a:0d:3e:6d:27:41:db:fd:b5:dd:
                    e5:1f:7c:95:e8:c4:ef:e7:58:f4:0d:99:8c:ad:bf:
                    2f:9f:f3:d0:4a:94:27:c2:b5:88:58:7d:47:81:7f:
                    82:db:2d:90:61:7f:c6:c6:ac:9c:73:dd:84:a0:39:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:69:3c:26:9f:26:25:36:87:31:6a:ca:a3:07:f3:38:12:77:
         13:7f:0e:2b:ed:3a:f8:e4:3f:ba:ae:45:44:b3:fa:98:81:38:
         9e:1f:2b:8e:5d:ad:21:4c:7c:8c:7f:e4:dd:b6:71:4b:4d:4a:
         4f:f1:a8:c9:f6:c8:44:b3:e9:ea:c9:2e:42:6c:9b:3a:b4:e1:
         e4:ec:72:a6:63:24:70:3e:13:9d:e3:c3:40:01:46:20:ad:0d:
         46:22:3d:aa:2b:61:0a:2c:c4:37:60:52:1f:0d:ee:3e:12:c4:
         6e:75:55:58:57:87:72:a4:fe:36:ad:a3:bf:ab:f5:72:6b:5a:
         bf:22:aa:fd:1b:4b:e9:56:c2:4a:b4:1a:aa:d1:69:65:e2:62:
         57:d4:cd:eb:fd:50:e2:e7:33:97:5f:ce:a0:e2:70:45:44:ea:
         7a:61:21:0a:57:56:82:a1:c2:d6:0e:05:0a:28:54:b0:06:b3:
         67:ad:cd:c3:d4:9d:43:8a:05:98:81:10:fc:0a:e1:20:72:4d:
         5f:93:2f:0b:65:01:87:30:48:b9:29:c1:6f:21:ae:2b:9d:c1:
         de:4b:59:59:3b:38:3c:1b:ad:b7:80:b9:35:2d:71:12:bd:91:
         95:c3:1a:77:fb:ae:b3:3a:64:d1:bf:3e:3d:6b:4c:59:6e:f9:
         39:f7:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----