Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/noxlXACmmRxRBxbd68a_JnFGp8w.cer
File:                     noxlXACmmRxRBxbd68a_JnFGp8w.cer (raw, json)
Hash identifier:          mJHirnhTLgTDVaAB1N8s0jJz026oBA0GH1eHwPhvzU8=
Subject key identifier:   9E:8C:65:5C:00:A6:99:1C:51:07:16:DD:EB:C6:BF:26:71:46:A7:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4624
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F4466/F240D9D61CDF11EC8F630E5CC4F9AE02/noxlXACmmRxRBxbd68a_JnFGp8w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F4466/F240D9D61CDF11EC8F630E5CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Nov 2022 14:59:06 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    IP: 45.130.164.0/22
                          IP: 45.151.152.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17956 (0x4624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  1 14:59:06 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A91F4466/serialNumber=9E8C655C00A6991C510716DDEBC6BF267146A7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:e3:bb:64:c0:76:0c:e2:d2:3e:17:64:11:
                    de:20:41:0c:58:ae:dd:e5:5b:f4:85:a5:71:02:c3:
                    9c:39:78:ba:8d:f4:9c:25:ec:9e:cf:9f:f0:82:eb:
                    8a:58:8f:63:1f:97:38:43:bc:aa:f9:2d:b5:b4:9e:
                    2a:ad:e1:d0:11:7e:e6:f3:fb:ce:ad:0c:e5:23:a9:
                    f4:9d:a9:2f:7a:6b:ab:2b:14:52:b1:71:06:3d:3c:
                    ff:d6:15:98:9a:94:c1:cf:ee:ba:bc:65:a6:e7:70:
                    77:af:6f:c8:df:1c:b8:79:f9:9a:5f:e0:7a:a2:58:
                    21:9a:64:09:2f:e6:bb:e3:ec:d4:3b:33:26:9a:35:
                    a5:5c:83:3c:3c:c6:a7:4e:2d:31:26:67:62:d4:87:
                    42:2d:e7:d9:72:63:46:19:00:ba:99:3f:d1:e4:19:
                    ae:43:24:c3:89:04:5c:b4:82:fd:e4:40:4e:84:75:
                    cc:fe:15:9e:99:56:c5:e3:75:2c:45:72:fc:5f:08:
                    ee:d8:26:fc:c7:af:9c:b3:3c:1c:b4:e7:b9:ce:53:
                    c0:16:26:9b:89:34:21:cd:48:8f:a7:19:0e:1f:ea:
                    78:95:e6:c4:d1:c1:68:6e:68:41:71:07:23:e1:db:
                    eb:0f:5a:dd:43:09:42:c6:e3:ac:9f:e5:3c:c4:ff:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:65:5C:00:A6:99:1C:51:07:16:DD:EB:C6:BF:26:71:46:A7:CC
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4466/F240D9D61CDF11EC8F630E5CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4466/F240D9D61CDF11EC8F630E5CC4F9AE02/noxlXACmmRxRBxbd68a_JnFGp8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.164.0/22
                  45.151.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:e7:2c:25:34:4b:20:ff:7b:60:80:9e:d7:58:26:90:5c:
         8d:2e:cd:99:52:be:cc:54:38:03:21:f7:ec:54:28:94:bd:a6:
         45:27:6e:95:9a:32:20:d4:d4:d9:33:be:64:f6:b5:d1:64:b8:
         60:9a:3f:54:16:b5:2a:48:4d:c3:3f:f2:58:90:49:47:9c:59:
         94:43:5e:a1:e2:23:69:8b:a2:b9:aa:f7:ef:30:7c:7e:20:b0:
         b1:07:5a:5f:a3:e0:25:47:88:58:47:d3:39:81:ba:c9:0d:ba:
         ff:4a:54:fd:d1:91:23:20:b0:bc:6b:16:85:54:38:a3:1e:1c:
         b2:e6:ff:3d:73:a7:ad:6e:63:86:4e:cc:4a:e9:33:d8:08:2a:
         46:70:ea:93:19:65:0f:9e:31:59:d2:fa:57:2b:de:53:4d:78:
         1a:a9:9f:41:88:48:f2:e1:eb:f7:60:e9:97:53:05:b2:4b:21:
         19:2f:d1:91:26:bd:f8:76:0b:a0:45:62:2e:38:1c:73:db:58:
         32:af:61:b9:e5:42:e2:02:de:70:6b:ae:77:bf:ce:79:28:ae:
         c2:5b:f9:d8:2d:89:7b:2b:0d:e1:e9:6e:7d:74:6a:19:bc:2c:
         2e:4d:65:37:2f:d8:0e:26:2d:6b:47:c1:1d:fd:33:69:0a:47:
         2b:0b:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 02:30:32 2023 by rpki-client on console-ams.rpki-client.org