Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PThTpb9U138tqshQsF5ypZGnMaI.cer
File:                     PThTpb9U138tqshQsF5ypZGnMaI.cer (raw, json)
Hash identifier:          ofOCNsnHMsL0sMha9TPEKhpZB1ZxO9QwdDxWNxaj2fE=
Subject key identifier:   3D:38:53:A5:BF:54:D7:7F:2D:AA:C8:50:B0:5E:72:A5:91:A7:31:A2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       658E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3D3853A5BF54D77F2DAAC850B05E72A591A731A2.mft
caRepository:             rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 26 May 2025 23:30:35 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    IP: 165.99.124.0/23
Validation:               Failed, certificate revoked on Tue 27 May 2025 02:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25998 (0x658e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 26 23:30:35 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91301EE0000, serialNumber=3D3853A5BF54D77F2DAAC850B05E72A591A731A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:52:77:62:4d:f0:82:1d:c1:6d:12:34:c5:
                    17:b9:2e:2d:98:4c:bc:3d:42:7b:32:b9:f4:fb:9f:
                    27:65:94:a5:8e:06:3e:66:13:6e:5e:3d:eb:72:b7:
                    51:24:fe:2f:5f:21:2b:c9:89:6b:74:a8:d4:59:d4:
                    b4:00:89:0a:76:f5:2b:40:46:c5:15:18:b8:99:e8:
                    bc:58:b0:18:46:e3:df:d8:51:28:74:ea:0e:cb:43:
                    55:1f:25:1f:d8:1c:f0:f7:f5:22:45:cb:db:6b:44:
                    ce:7a:fe:30:2a:5f:c9:c0:6c:54:30:ec:3d:6d:52:
                    5d:8a:b6:fe:de:22:73:0d:68:a6:64:09:cf:b9:08:
                    c2:9a:02:25:4b:fc:6f:20:84:87:0e:a2:e6:12:fe:
                    e6:8b:57:77:04:d4:f7:5a:63:9a:63:2b:47:b4:27:
                    6a:c1:17:1f:b9:81:c8:de:6e:8e:36:1f:21:34:80:
                    b2:8a:57:8e:27:6f:03:b1:49:aa:e5:e8:b4:c8:5a:
                    18:60:09:bc:08:b6:ec:f3:80:5b:06:29:b9:e0:46:
                    3d:33:20:f2:84:f0:a9:3d:fc:da:25:6f:84:7e:db:
                    65:cc:90:dc:2f:41:24:34:b2:b4:bc:18:1f:af:86:
                    ab:8d:24:88:08:ad:a6:e8:66:05:cf:25:8f:64:55:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:53:A5:BF:54:D7:7F:2D:AA:C8:50:B0:5E:72:A5:91:A7:31:A2
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3D3853A5BF54D77F2DAAC850B05E72A591A731A2.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:80:04:45:c5:e1:6d:1b:5c:10:df:52:68:6a:18:a7:8e:7f:
         ad:4e:55:a2:cb:f8:19:51:41:f2:b9:7f:3b:96:2d:1f:4c:4b:
         74:66:b9:dc:7c:d5:49:7d:d7:fe:9a:5c:c8:53:6d:c8:32:8c:
         24:5c:cc:38:61:a1:42:ee:c7:71:37:55:d1:48:a9:fe:27:88:
         22:79:df:d2:34:79:f4:e5:81:ed:fd:c1:ee:5d:6a:1a:cb:5a:
         f0:48:bc:2f:cd:fe:92:b3:78:04:f8:f5:f2:2f:cc:e3:c8:50:
         fc:33:19:b5:79:ed:f2:c1:8a:fc:03:05:6e:f2:e5:ec:5b:92:
         d1:f7:22:b5:24:e7:f6:ad:e6:40:e3:fb:a0:29:77:70:2b:e4:
         af:85:30:d2:b8:29:4a:8a:9a:8f:66:10:dd:d2:5e:52:ee:7a:
         58:1c:c6:50:80:e1:62:6f:6f:b2:84:c0:cc:f0:9b:50:46:a9:
         6f:14:f4:19:49:8f:49:2c:ac:7a:e0:52:c6:dd:e3:66:a1:5b:
         66:28:6f:c1:04:17:d8:f8:96:bf:1c:30:2a:46:82:eb:9e:b7:
         26:11:54:56:92:18:e9:1e:94:60:a9:8b:a0:70:1d:02:16:f0:
         5e:1e:d8:ac:1d:93:48:31:fc:02:79:89:8e:4c:a2:57:e2:f9:
         7e:f9:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:08 2025 by rpki-client