Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
File:                     nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer (raw, json)
Hash identifier:          4bsaKyx/bHwzFF+3EuZ5Dn9rBhp0tEODqyzuLR9Wwhw=
Subject key identifier:   9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4660
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 09 Nov 2022 13:32:06 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 138.77.0.0/16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18016 (0x4660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  9 13:32:06 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:f8:d1:2d:4a:7f:4f:7f:33:7b:02:ee:da:
                    11:e1:48:7b:63:d1:da:76:03:1b:7b:72:fe:2d:1c:
                    94:cf:23:64:bf:34:96:98:8c:00:39:a6:02:b0:68:
                    42:0c:56:1f:64:d8:bc:7c:70:02:15:87:24:63:e6:
                    25:96:20:59:25:2a:eb:dc:1f:02:93:67:1e:1a:87:
                    83:a7:d5:ae:7c:70:fe:0f:2b:91:07:83:07:a1:68:
                    5f:47:17:62:ad:45:ba:61:73:0b:fd:bd:f2:ed:97:
                    81:d9:57:88:9b:49:85:54:da:c0:f8:98:dc:fe:05:
                    ec:76:c2:4b:40:ba:87:91:ce:fb:53:0d:fa:57:78:
                    53:92:a7:2b:84:ca:77:b8:ab:a4:cb:b4:ce:e5:81:
                    33:22:3c:74:bb:7d:85:e9:4a:fa:19:ba:b0:47:e9:
                    f9:0c:48:e7:2b:9b:1b:5f:4f:29:67:a3:6b:ee:8d:
                    e1:e7:e2:f2:84:0a:58:d8:4c:67:cc:be:51:06:31:
                    06:0f:08:82:dc:8d:e3:23:df:07:63:70:39:fc:ba:
                    8a:a1:54:0b:c6:b6:e2:d3:dc:81:12:c3:61:11:d9:
                    f0:e0:2c:5a:d8:84:59:5e:04:3f:e3:ca:a3:ad:d7:
                    54:0e:db:87:c2:b3:f3:f4:da:fc:5e:e6:10:7c:77:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:26:57:40:05:23:ac:e9:5d:83:d9:a9:9d:ee:fb:6b:9b:d2:
         35:85:a8:21:92:43:92:fb:87:89:96:8f:26:8d:41:81:af:f7:
         8a:17:1c:f3:2b:91:c9:d6:9d:1b:c5:62:f4:bf:30:51:27:2f:
         2c:99:67:e4:9d:f4:55:13:95:2c:d6:3b:a5:d2:b5:b2:9c:24:
         6a:9e:e0:4c:9f:34:18:8e:f8:bb:91:73:27:a0:de:fd:2b:da:
         5c:01:c0:7b:44:24:86:af:4e:36:38:aa:6a:df:a2:bc:a1:d9:
         8c:77:60:34:f3:5e:89:43:81:a8:e4:cc:7b:41:e2:b4:2c:16:
         83:19:1e:2e:f9:0f:c3:67:da:07:5b:a5:74:59:4a:f0:9c:60:
         88:6b:f8:72:33:04:84:9f:41:69:64:8d:35:c1:54:1f:88:7a:
         ef:37:87:70:bb:24:90:15:27:d9:3f:45:1e:9d:b4:7b:e4:04:
         37:cb:d4:34:0f:c4:ff:94:4f:96:ad:d6:09:0e:29:20:57:94:
         f8:75:66:2e:eb:25:b7:e2:9d:7b:d2:ba:c5:10:31:f1:84:48:
         4f:11:cc:2d:db:21:3e:a7:41:83:c0:d2:b4:49:37:c9:fe:53:
         5a:03:4a:b2:11:dc:8b:7b:25:d4:ca:ea:c0:ff:7d:03:07:1d:
         b0:a7:6a:7c
-----BEGIN CERTIFICATE-----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 at Fri Sep 1 17:02:36 2023 by rpki-client on console-fra.rpki-client.org