Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OFn_4FWXMXtMjN_Blyn60pohns.cer
File:                     1OFn_4FWXMXtMjN_Blyn60pohns.cer (raw, json)
Hash identifier:          dQvKGzO6T6TdMhKu5zZVqmEO8lRAWuwCOZkp/Drutpw=
Subject key identifier:   D4:E1:67:FF:81:56:5C:C5:ED:32:33:7F:06:5C:A7:EB:4A:68:86:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018C03
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/1OFn_4FWXMXtMjN_Blyn60pohns.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Feb 2023 06:29:57 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 58561
                          IP: 103.247.117.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101379 (0x18c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 06:29:57 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91DB917/serialNumber=D4E167FF81565CC5ED32337F065CA7EB4A68867B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:d7:99:ba:6e:1d:d6:d4:68:21:14:d3:ba:
                    fe:aa:0b:a0:9c:fb:63:6e:73:6d:61:ed:d7:4e:39:
                    7d:a3:b1:d5:ff:e7:9a:75:f6:10:f6:0b:23:2b:a5:
                    f8:2a:b2:70:c0:9d:11:87:39:24:77:cd:31:ec:41:
                    bc:a3:5c:42:3a:5c:59:6c:68:c7:24:8d:eb:bc:92:
                    9b:09:5f:74:2d:5f:fc:f8:71:14:94:2f:ca:79:41:
                    3a:0b:79:29:a7:ad:d2:e3:e3:fb:e3:61:c4:17:1e:
                    78:a1:58:1d:4c:98:ca:2b:65:5e:96:ec:7e:4c:0d:
                    84:6c:f9:96:9d:5c:51:83:40:25:58:97:1e:4d:9b:
                    48:0d:6a:d5:b3:4d:e0:fc:a8:ac:b7:fc:cd:e3:cc:
                    09:f8:fb:31:35:13:41:16:bf:a3:67:53:9a:0b:5b:
                    d0:ca:96:f9:6d:df:37:8d:7f:04:26:5b:13:93:0a:
                    9b:9a:bb:ed:93:de:3a:85:a2:4c:e1:0e:30:f3:54:
                    d6:a8:01:78:ca:9f:d5:5b:75:59:a8:06:95:33:1a:
                    0f:d1:bc:12:74:c3:d3:59:fa:1e:dd:31:86:ef:41:
                    c3:4a:c7:db:47:9c:06:72:d3:96:df:f4:1b:69:8e:
                    ab:a0:fe:81:0f:e2:bc:5c:1d:c2:fb:1f:71:58:48:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:67:FF:81:56:5C:C5:ED:32:33:7F:06:5C:A7:EB:4A:68:86:7B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/1OFn_4FWXMXtMjN_Blyn60pohns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58561

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:2a:27:16:b3:1e:5a:df:c6:c8:46:cd:c5:94:df:43:e2:
         95:fb:fb:38:79:57:b9:2f:bf:7c:75:06:f5:17:ac:39:51:28:
         6a:b6:18:f0:71:65:eb:9f:bc:1f:95:2b:80:9a:d1:1f:e1:6d:
         b2:70:7c:0d:87:60:54:a9:4d:20:cb:e0:f4:7c:ed:fc:8b:59:
         0b:41:e8:8f:eb:fa:32:5a:38:d5:ee:24:87:7d:cf:65:e8:20:
         fc:82:33:08:2a:18:88:3f:de:7d:84:5c:2b:89:3c:43:78:88:
         0c:6e:0f:56:15:6e:04:d7:13:3b:78:79:a0:96:e9:e1:7b:c2:
         35:28:e1:71:99:5b:1c:c2:96:99:9e:c6:f5:b4:79:99:eb:47:
         e3:74:4e:2a:fd:30:99:ee:2d:42:af:bc:df:70:1a:36:f6:ba:
         ad:df:d0:39:ed:02:95:34:a7:11:d4:ff:48:14:25:f0:35:42:
         74:c4:97:ea:ed:b3:f7:c7:2b:26:d0:cd:67:0c:af:78:9a:db:
         55:cd:40:6a:71:50:f5:34:71:b6:b7:0c:cc:01:8a:ce:c2:b1:
         ad:06:fa:69:bb:17:d1:ea:3e:22:cc:0e:9b:77:4c:69:c8:03:
         7d:50:7f:f4:ac:0d:f8:a8:7b:04:e9:4b:f4:f2:25:65:e0:a0:
         4c:95:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 01:50:51 2024 by rpki-client on console-fra.rpki-client.org