Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mlquAB7_yG9G4xQ2O49ZJ-zm3s.cer
File:                     7mlquAB7_yG9G4xQ2O49ZJ-zm3s.cer (raw, json)
Hash identifier:          8RS0koDIBb9vHgCjlpFP1Peoc3i2TNbvEZmizIdw96g=
Subject key identifier:   EE:69:6A:B8:00:7B:FF:21:BD:1B:8C:50:D8:EE:3D:64:9F:B3:9B:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F8A5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A918C2870004/0/EE696AB8007BFF21BD1B8C50D8EE3D649FB39B7B.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A918C2870004/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 11:32:48 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129189 (0x1f8a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 12 11:32:48 2024 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870004/serialNumber=EE696AB8007BFF21BD1B8C50D8EE3D649FB39B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:ba:77:be:1e:b1:3d:df:8c:0c:0a:94:87:
                    cc:6b:8a:9e:f2:cd:f0:dd:1c:36:25:18:68:db:45:
                    2b:0a:df:4a:03:32:c8:4b:cf:30:38:ce:cd:56:0b:
                    e5:fe:b1:02:44:e4:a1:e1:9e:b9:5e:eb:18:f0:ef:
                    d6:0f:cd:65:c9:0f:8d:8e:2e:d8:63:bd:f0:7d:5d:
                    59:90:95:68:51:e8:14:31:96:eb:f3:b1:92:c4:c2:
                    1e:f8:bc:ee:7b:5d:5e:c8:3d:4a:25:c4:34:03:d2:
                    9e:eb:8a:5c:2c:97:82:59:b2:e5:50:7b:ca:f4:4e:
                    ee:3f:89:1a:1c:54:ea:2d:93:3c:75:70:fb:a8:73:
                    2e:36:6f:ff:3d:60:2e:9e:20:e8:4a:e8:01:3a:7b:
                    b0:38:ec:a7:c9:99:4f:0e:8f:cb:4b:2e:2e:1b:7a:
                    0f:14:86:e6:fe:e8:46:87:26:26:30:fa:d3:d0:33:
                    39:5c:92:d8:58:76:d8:95:e8:1f:1b:27:d3:43:d3:
                    74:dd:8b:10:ad:34:e8:56:6d:4f:84:bc:7a:ea:d3:
                    2c:a2:cd:ef:18:33:b4:99:1f:86:91:b0:16:8b:8c:
                    ef:58:33:09:ff:f5:15:a7:f6:45:cd:59:64:fc:1d:
                    3b:8e:2f:92:1e:87:c2:53:c8:0d:51:e6:4a:a5:6e:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:6A:B8:00:7B:FF:21:BD:1B:8C:50:D8:EE:3D:64:9F:B3:9B:7B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870004/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870004/0/EE696AB8007BFF21BD1B8C50D8EE3D649FB39B7B.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:81:83:4f:fd:ec:26:ef:5f:5d:19:14:44:8c:6b:08:65:
         d3:d8:e9:3c:f7:7d:d1:a1:0c:e6:eb:84:c2:a4:12:a9:af:b5:
         38:04:bb:65:0d:05:95:fa:85:77:4c:22:3f:04:7b:16:28:33:
         70:e2:8b:61:f0:6a:e0:81:1b:8c:93:82:c5:e8:90:33:34:72:
         7e:ad:da:c6:9d:24:47:be:df:3a:e3:8b:b5:b3:2b:38:5f:b6:
         87:2a:57:17:a8:05:e8:fb:76:fc:62:da:31:af:db:70:35:3d:
         79:2d:ba:1f:fe:76:86:1d:fe:83:4e:bd:a2:95:a4:11:90:6a:
         18:82:27:0c:7b:f8:92:56:6c:93:64:47:1a:c2:ce:26:a6:dc:
         bf:70:0d:f9:16:f6:a3:0b:89:89:16:31:fe:c7:01:33:3f:3a:
         05:d3:be:80:77:3a:ce:a9:31:62:8e:a3:5e:01:b7:ab:5b:57:
         97:ab:82:30:8e:06:2c:dd:d2:1b:51:cd:94:83:72:dd:27:42:
         1f:43:63:0e:ec:c3:32:43:39:e6:8e:00:da:4f:46:78:5d:7a:
         39:fb:c4:42:fe:db:82:04:55:25:ca:c7:b3:63:56:83:49:92:
         f9:a2:6f:b6:04:81:8a:ee:de:05:65:1e:57:20:12:c2:a5:30:
         35:c4:1c:76
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIDAfilMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYxMjExMzI0OFoXDTM4MDUwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxOEMyODcwMDA0MTEwLwYDVQQFEyhFRTY5NkFCODAwN0JGRjIxQkQx
QjhDNTBEOEVFM0Q2NDlGQjM5QjdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArfS6d74esT3fjAwKlIfMa4qe8s3w3Rw2JRho20UrCt9KAzLIS88wOM7N
Vgvl/rECROSh4Z65XusY8O/WD81lyQ+Nji7YY73wfV1ZkJVoUegUMZbr87GSxMIe
+Lzue11eyD1KJcQ0A9Ke64pcLJeCWbLlUHvK9E7uP4kaHFTqLZM8dXD7qHMuNm//
PWAuniDoSugBOnuwOOynyZlPDo/LSy4uG3oPFIbm/uhGhyYmMPrT0DM5XJLYWHbY
legfGyfTQ9N03YsQrTToVm1PhLx66tMsos3vGDO0mR+GkbAWi4zvWDMJ//UVp/ZF
zVlk/B07ji+SHofCU8gNUeZKpW4f5QIDAQABo4IDCjCCAwYwHQYDVR0OBBYEFO5p
argAe/8hvRuMUNjuPWSfs5t7MB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4
QzI4NzAwMDQvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxOEMyODcwMDA0LzAvRUU2OTZBQjgwMDdCRkYyMUJE
MUI4QzUwRDhFRTNENjQ5RkIzOUI3Qi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgB
Af8EFTAToBEwDwIDALBrAgMA2K8CAwIAizA+BggrBgEFBQcBBwEB/wQvMC0wDAQC
AAEwBgMEAMuwvTAdBAIAAjAXAwcAIAEN8ACQAwUAJAFGAAMFACQB5kAwDQYJKoZI
hvcNAQELBQADggEBAEwcgYNP/ewm719dGRREjGsIZdPY6Tz3fdGhDObrhMKkEqmv
tTgEu2UNBZX6hXdMIj8EexYoM3Dii2HwauCBG4yTgsXokDM0cn6t2sadJEe+3zrj
i7WzKzhftocqVxeoBej7dvxi2jGv23A1PXktuh/+doYd/oNOvaKVpBGQahiCJwx7
+JJWbJNkRxrCziam3L9wDfkW9qMLiYkWMf7HATM/OgXTvoB3Os6pMWKOo14Bt6tb
V5ergjCOBizd0htRzZSDct0nQh9DYw7swzJDOeaOANpPRnhdejn7xEL+24IEVSXK
x7NjVoNJkvmib7YEgYru3gVlHlcgEsKlMDXEHHY=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org