Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/RSYt0mlcTSfoRBtno2XoZrW2qOU.cer
File:                     RSYt0mlcTSfoRBtno2XoZrW2qOU.cer (raw, json)
Hash identifier:          yZE+gNXBlT+kwpkhiyauoX5ykytE0rgMpJBneXpYy1o=
Subject key identifier:   45:26:2D:D2:69:5C:4D:27:E8:44:1B:67:A3:65:E8:66:B5:B6:A8:E5
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       40F5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 15:36:33 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 196.12.32.0/19

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 22:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16629 (0x40f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Jan 18 15:36:33 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A918EDB2/serialNumber=45262DD2695C4D27E8441B67A365E866B5B6A8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:e7:26:bd:3e:a3:42:92:58:09:ae:4f:b2:
                    c7:3d:39:6f:b6:7f:14:a3:d3:13:27:bf:cf:60:70:
                    92:33:c0:25:9a:2d:9c:60:83:b6:80:53:ef:4e:5a:
                    09:4c:d9:eb:54:85:c9:07:41:27:bc:3e:e1:fc:bf:
                    57:c2:24:71:2f:ba:1a:23:78:cd:b4:18:be:25:02:
                    ce:df:c6:1d:5f:23:91:10:c1:f3:a8:03:74:f0:a5:
                    24:9d:8a:e7:7c:a7:d3:63:ee:15:ec:18:b9:d0:d3:
                    41:78:ba:b6:74:d1:33:48:7b:64:28:c5:7b:dd:f5:
                    41:16:69:1c:94:e1:30:a1:85:7f:ec:83:d9:38:9d:
                    c9:5a:85:e3:02:11:9e:51:92:78:92:e2:b6:15:ee:
                    67:81:ef:ae:9b:5f:01:a0:29:8d:79:81:17:1c:24:
                    b6:2d:48:bf:a1:93:d2:c4:1b:10:60:9b:36:f6:aa:
                    12:65:17:4e:6d:0a:84:0f:ad:15:5f:a7:f3:57:a4:
                    56:e0:d0:8c:54:17:29:f7:a6:5d:08:38:38:b0:68:
                    8c:8d:0f:f0:5c:d7:b7:7d:1e:f3:95:34:93:76:43:
                    d0:cf:77:1c:5e:17:81:4a:7e:82:c9:b8:89:69:83:
                    ef:d0:dd:38:47:68:76:dc:90:d4:da:7b:0d:01:14:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:2D:D2:69:5C:4D:27:E8:44:1B:67:A3:65:E8:66:B5:B6:A8:E5
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/RSYt0mlcTSfoRBtno2XoZrW2qOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.12.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:42:4b:f9:b1:dd:ed:69:e5:76:5a:6a:71:07:69:f9:9f:
         da:63:01:76:eb:b1:05:b3:3f:19:f6:44:43:cf:82:78:a8:48:
         13:bd:23:41:11:30:c7:d9:f4:42:0d:4d:26:ed:07:a8:b5:8d:
         af:cf:59:0b:db:ce:2b:0a:81:ed:fd:49:23:0a:0d:0d:41:b6:
         05:ea:ea:61:1a:89:f7:d9:74:36:95:3c:a3:1f:8d:15:24:90:
         d2:50:5e:42:b6:9a:d6:2a:67:31:b6:94:5f:9a:91:b8:53:74:
         db:96:5c:10:a7:47:43:49:e4:e6:b1:28:7b:51:df:c9:9d:74:
         f0:eb:17:ab:4f:e5:14:1e:93:c6:d1:1d:24:86:48:43:d6:ea:
         bd:f9:bb:f8:b8:3a:b5:49:77:56:3b:ea:1d:ae:3c:1d:1a:c9:
         81:58:d0:a1:9d:6a:93:1c:1a:bc:ee:16:9b:f5:72:a4:ca:bd:
         64:42:12:19:06:dd:a1:00:f7:f4:28:95:c9:c1:e1:01:bc:74:
         32:23:1c:7e:dc:9e:13:30:3d:f9:e3:17:65:95:c4:e3:04:9b:
         e3:b9:5b:ff:d4:e3:07:4a:5c:fb:a3:b7:48:06:8c:f3:b3:5e:
         74:ac:00:39:97:83:d7:d0:de:5c:62:8c:d9:db:c4:75:05:82:
         b5:4e:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:38 2024 by rpki-client on console-ams.rpki-client.org