Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ynpHwPYUIJOKMLMNni7QCd4sZC8.cer
File:                     ynpHwPYUIJOKMLMNni7QCd4sZC8.cer (raw, json)
Hash identifier:          jLUkpGc8glEAKPvlzhW/Las8MUl2UCSpQPJAOOuWF7w=
Subject key identifier:   CA:7A:47:C0:F6:14:20:93:8A:30:B3:0D:9E:2E:D0:09:DE:2C:64:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       52DD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FA66B/0A6F80C0C4FA11ED9BDF3157C4F9AE02/ynpHwPYUIJOKMLMNni7QCd4sZC8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FA66B/0A6F80C0C4FA11ED9BDF3157C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 06:04:00 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    IP: 139.188.0.0/16

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 01:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21213 (0x52dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Mar  1 06:04:00 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A91FA66B/serialNumber=CA7A47C0F61420938A30B30D9E2ED009DE2C642F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bf:42:a2:38:f4:35:eb:02:af:d3:9c:a1:4d:
                    88:33:ee:56:06:c4:51:5e:35:b4:a1:c5:d4:eb:40:
                    36:a0:5c:5a:c4:01:fd:ce:4b:20:77:e2:5c:6d:96:
                    f3:36:b2:09:96:27:34:30:cf:4a:4b:63:03:60:a6:
                    90:6b:f7:65:f2:96:df:b4:97:2e:56:b4:c4:82:ba:
                    41:8f:20:e8:22:33:ab:68:e2:59:c8:05:eb:de:b4:
                    57:a6:51:43:a2:c1:2e:66:19:c7:b8:25:1e:0c:d9:
                    1b:60:da:9a:6f:71:41:f9:3f:a7:ea:28:23:00:6d:
                    19:c5:1f:de:8d:5a:d1:ee:5f:7a:71:a9:64:c9:cc:
                    93:cc:d0:c9:c7:33:ee:06:65:51:fe:a2:35:39:b1:
                    e3:52:d9:8f:7c:0d:5e:d8:f5:67:f2:86:ce:f7:0c:
                    30:ea:29:3a:a7:00:52:56:33:43:6d:20:31:c0:f5:
                    6e:b4:ec:0f:90:66:81:99:bd:31:76:1f:28:a6:93:
                    76:6e:a9:48:d9:08:38:07:20:60:83:89:d6:49:51:
                    6f:c5:9e:90:98:8c:91:2f:4d:74:9f:76:d0:8c:39:
                    bf:4f:db:01:32:66:bf:98:d8:0f:67:2b:8f:cc:1e:
                    09:19:2c:0f:a0:30:4e:14:20:a0:67:3c:55:db:70:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7A:47:C0:F6:14:20:93:8A:30:B3:0D:9E:2E:D0:09:DE:2C:64:2F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/0A6F80C0C4FA11ED9BDF3157C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/0A6F80C0C4FA11ED9BDF3157C4F9AE02/ynpHwPYUIJOKMLMNni7QCd4sZC8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:c7:84:2a:02:7d:d0:7d:a2:ed:69:64:f3:3a:c7:7a:5d:
         ca:cb:91:16:af:c9:f6:4d:b6:54:f3:7c:0a:1f:31:4a:df:f4:
         bf:70:8a:7f:82:33:b4:4b:4d:e9:2e:7a:d0:e2:af:b1:91:74:
         0e:bf:4e:02:80:94:39:08:53:cb:0e:b5:3b:97:5f:3c:66:c0:
         00:2d:fe:8f:d8:be:72:50:f4:ef:f8:95:b9:5a:6c:c8:63:fa:
         fd:04:48:15:c7:12:8e:ea:c7:29:8d:20:0e:65:10:a0:a0:fd:
         79:c3:af:9b:59:58:76:a7:08:46:45:f2:6a:28:53:4c:7b:ad:
         6e:8a:cc:38:6e:c7:f1:29:5d:0c:f3:41:93:4c:fc:5e:16:71:
         72:98:b8:98:4d:9d:47:cd:52:87:f7:e3:94:ad:0b:bb:6a:f9:
         ca:1e:fd:bd:b4:ad:30:d8:2c:69:7a:d4:2d:3f:f7:2b:cc:a0:
         e6:6a:21:73:67:ca:c5:12:01:13:8c:21:06:a5:cd:90:1d:19:
         8c:b0:0e:12:4f:04:72:d6:d9:5e:58:36:5f:63:ce:dd:f9:0d:
         44:2a:6d:14:7f:9c:2f:14:be:bf:d4:ad:dd:8b:72:5b:1f:af:
         62:2f:68:60:dc:51:5f:4a:8d:c2:7a:4d:77:5c:44:a1:0d:b1:
         ac:e8:b6:e0
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICUt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMzAxMDYwNDAwWhcNMjUwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFGQTY2QjExMC8GA1UEBRMoQ0E3QTQ3QzBGNjE0MjA5MzhBMzBCMzBE
OUUyRUQwMDlERTJDNjQyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AO2/QqI49DXrAq/TnKFNiDPuVgbEUV41tKHF1OtANqBcWsQB/c5LIHfiXG2W8zay
CZYnNDDPSktjA2CmkGv3ZfKW37SXLla0xIK6QY8g6CIzq2jiWcgF6960V6ZRQ6LB
LmYZx7glHgzZG2Damm9xQfk/p+ooIwBtGcUf3o1a0e5fenGpZMnMk8zQyccz7gZl
Uf6iNTmx41LZj3wNXtj1Z/KGzvcMMOopOqcAUlYzQ20gMcD1brTsD5BmgZm9MXYf
KKaTdm6pSNkIOAcgYIOJ1klRb8WekJiMkS9NdJ920Iw5v0/bATJmv5jYD2crj8we
CRksD6AwThQgoGc8VdtwqXsCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBTKekfA9hQg
k4owsw2eLtAJ3ixkLzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkE2NkIvMEE2RjgwQzBDNEZBMTFFRDlCREYzMTU3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBNjZCLzBBNkY4MEMwQzRGQTExRUQ5QkRGMzE1N0M0RjlBRTAyL3lucEh3UFlV
SUpPS01MTU5uaTdRQ2Q0c1pDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAIu8MA0GCSqGSIb3DQEBCwUAA4IBAQBfqMeEKgJ90H2i7Wlk8zrH
el3Ky5EWr8n2TbZU83wKHzFK3/S/cIp/gjO0S03pLnrQ4q+xkXQOv04CgJQ5CFPL
DrU7l188ZsAALf6P2L5yUPTv+JW5WmzIY/r9BEgVxxKO6scpjSAOZRCgoP15w6+b
WVh2pwhGRfJqKFNMe61uisw4bsfxKV0M80GTTPxeFnFymLiYTZ1HzVKH9+OUrQu7
avnKHv29tK0w2CxpetQtP/crzKDmaiFzZ8rFEgETjCEGpc2QHRmMsA4STwRy1tle
WDZfY87d+Q1EKm0Uf5wvFL6/1K3di3JbH69iL2hg3FFfSo3Cek13XEShDbGs6Lbg
-----END CERTIFICATE-----
Generated at Wed Mar 20 03:44:25 2024 by rpki-client on console-fra.rpki-client.org