Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dzA2FLGuJQ7j5FnW9E4M-zdUqkM.cer
File:                     dzA2FLGuJQ7j5FnW9E4M-zdUqkM.cer (raw, json)
Hash identifier:          ye4qfSEBOwRELJ08tjOTrKVp2A5cI6fw+rWuSZ7hV1U=
Subject key identifier:   77:30:36:14:B1:AE:25:0E:E3:E4:59:D6:F4:4E:0C:FB:37:54:AA:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       583B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/dzA2FLGuJQ7j5FnW9E4M-zdUqkM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 07:49:04 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    IP: 160.22.88.0/23

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22587 (0x583b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 15 07:49:04 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A914B1DB/serialNumber=77303614B1AE250EE3E459D6F44E0CFB3754AA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:4b:5d:cc:b0:8b:09:49:79:cb:6f:a0:01:
                    5b:c1:99:8b:22:d5:74:ba:06:36:21:23:70:b2:7d:
                    60:c9:27:0a:20:64:20:45:1c:67:e3:39:62:cd:5e:
                    96:20:b5:5d:0e:23:d8:d3:64:97:5c:93:64:2f:18:
                    af:20:ad:4e:ea:90:91:01:bb:d5:c6:c2:40:d4:38:
                    28:da:2d:30:4c:9a:6f:76:8d:e7:cd:46:a8:e0:26:
                    d1:00:94:b4:15:81:cb:81:60:3c:84:b7:92:39:80:
                    6e:08:12:47:d3:51:c5:9c:3b:05:ff:85:dd:d4:e9:
                    f2:b5:47:06:31:30:54:5f:41:60:97:9d:8f:dc:98:
                    be:d0:72:7b:54:42:0a:91:5a:04:e9:f0:7d:e7:f4:
                    ae:df:ea:57:32:12:bb:1c:8e:0c:ab:6d:68:14:d9:
                    4e:e7:fa:87:12:94:cf:e9:88:aa:19:6b:68:8f:74:
                    90:70:4d:99:e2:17:8a:56:58:37:bc:b7:bd:cd:a1:
                    cf:64:cd:47:04:a3:b1:5d:5c:71:61:8a:af:0c:c9:
                    c2:10:0e:26:88:9c:5d:47:85:57:44:94:f7:a0:3b:
                    52:95:eb:8f:b7:93:55:a3:cd:48:40:8a:ea:4b:6d:
                    f5:b3:87:94:d1:14:ab:30:de:cc:3c:f4:10:cd:dd:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:36:14:B1:AE:25:0E:E3:E4:59:D6:F4:4E:0C:FB:37:54:AA:43
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/dzA2FLGuJQ7j5FnW9E4M-zdUqkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:3b:c9:82:78:f5:0e:c3:ae:af:bc:84:a9:c1:da:35:fb:
         30:a8:6e:b5:6d:65:da:01:5b:72:88:95:d3:2d:46:40:96:20:
         15:2b:32:a4:e9:61:63:db:f8:f7:6f:cc:60:bd:0d:ac:c0:d6:
         ba:e6:f2:24:e6:86:5b:87:28:d4:69:47:61:c7:14:7c:71:42:
         90:24:20:02:00:51:25:63:3e:1a:2c:46:7f:0e:86:ee:aa:de:
         ac:e4:34:88:23:cb:0b:dc:01:b1:ee:7a:e0:54:41:e8:08:08:
         66:da:67:a3:6f:7b:7a:72:6c:93:6a:c3:1c:07:18:79:26:d1:
         de:20:c2:77:1d:83:bf:66:33:60:e9:86:c6:8c:6f:c6:53:a1:
         af:92:83:0a:da:af:dd:4c:ff:40:9b:79:3f:a3:fe:5c:33:9f:
         5e:2d:c5:5d:31:2a:d4:fd:71:17:4f:ff:58:c1:07:ad:bb:08:
         14:e5:a6:6e:1a:cc:24:ea:18:08:af:43:11:ee:4b:fa:3b:f0:
         1d:94:aa:e8:09:56:2b:80:d1:7a:e9:08:ec:8e:fa:9b:3e:5f:
         1f:1a:8e:c1:1b:f6:34:14:d2:fa:08:58:0f:3e:57:d9:da:a4:
         89:cc:03:4b:ed:a1:61:36:7e:f5:45:e2:f1:c3:9e:50:0f:bd:
         a9:15:31:2a
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNzE1MDc0OTA0WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0QjFEQjExMC8GA1UEBRMoNzczMDM2MTRCMUFFMjUwRUUzRTQ1OUQ2
RjQ0RTBDRkIzNzU0QUE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALOoS13MsIsJSXnLb6ABW8GZiyLVdLoGNiEjcLJ9YMknCiBkIEUcZ+M5Ys1eliC1
XQ4j2NNkl1yTZC8YryCtTuqQkQG71cbCQNQ4KNotMEyab3aN581GqOAm0QCUtBWB
y4FgPIS3kjmAbggSR9NRxZw7Bf+F3dTp8rVHBjEwVF9BYJedj9yYvtBye1RCCpFa
BOnwfef0rt/qVzISuxyODKttaBTZTuf6hxKUz+mIqhlraI90kHBNmeIXilZYN7y3
vc2hz2TNRwSjsV1ccWGKrwzJwhAOJoicXUeFV0SU96A7UpXrj7eTVaPNSECK6ktt
9bOHlNEUqzDezDz0EM3dsy0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR3MDYUsa4l
DuPkWdb0Tgz7N1SqQzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEIxREIvMDlCQkYyMzY0MTVEMTFFRkEzMTZCQjM5QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRCMURCLzA5QkJGMjM2NDE1RDExRUZBMzE2QkIzOUM0RjlBRTAyL2R6QTJGTEd1
SlE3ajVGblc5RTRNLXpkVXFrTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAWWDANBgkqhkiG9w0BAQsFAAOCAQEAEiw7yYJ49Q7Drq+8hKnB
2jX7MKhutW1l2gFbcoiV0y1GQJYgFSsypOlhY9v492/MYL0NrMDWuubyJOaGW4co
1GlHYccUfHFCkCQgAgBRJWM+GixGfw6G7qrerOQ0iCPLC9wBse564FRB6AgIZtpn
o297enJsk2rDHAcYeSbR3iDCdx2Dv2YzYOmGxoxvxlOhr5KDCtqv3Uz/QJt5P6P+
XDOfXi3FXTEq1P1xF0//WMEHrbsIFOWmbhrMJOoYCK9DEe5L+jvwHZSq6AlWK4DR
eukI7I76mz5fHxqOwRv2NBTS+ghYDz5X2dqkicwDS+2hYTZ+9UXi8cOeUA+9qRUx
Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 16 02:29:40 2024 by rpki-client on console-ams.rpki-client.org