Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
File:                     8d-F-c-zXLMQww1ZzWAGNprGkBE.cer (raw, json)
Hash identifier:          lgkvZXzLMwGHxNF5f2XBJ61zWwWM11gUbFvJYDO24fU=
Subject key identifier:   F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C98B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 16:03:47 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 55880
                          IP: 45.113.232.0/22
                          IP: 103.6.252.0/22
                          IP: 115.146.80.0/20
                          IP: 2407:ae00::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117131 (0x1c98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  7 16:03:47 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:0b:78:63:14:93:41:17:b4:20:86:eb:51:
                    84:ff:af:d0:5d:4a:99:bf:4b:c8:16:f9:27:66:25:
                    40:d3:2d:f1:fd:34:73:05:3e:1d:ac:2e:56:5e:76:
                    f2:bd:49:a6:38:65:dc:63:06:4b:20:28:9c:5b:3c:
                    5a:35:94:e1:c4:aa:93:7c:39:0e:35:a9:ba:e7:4f:
                    37:26:dd:ce:a8:9f:e7:c5:22:46:48:37:78:ec:86:
                    e5:2d:0f:9d:2c:ac:49:fb:7c:43:de:73:9e:d6:34:
                    d8:6f:39:17:d5:6f:58:d6:af:92:6a:2e:ea:16:49:
                    73:11:56:a9:15:dd:ce:c1:59:32:a4:49:cd:e4:fa:
                    62:a9:09:2b:2c:46:1e:c4:20:6a:99:6c:ae:d5:5b:
                    19:65:2e:7a:89:73:1b:67:62:9f:7a:3c:15:6e:14:
                    47:17:05:39:25:0f:c7:05:c7:84:61:88:27:93:40:
                    78:fd:33:87:0c:54:4b:ef:f9:20:59:27:97:54:ef:
                    e7:ae:0e:f4:ed:be:f5:48:fa:62:14:ef:a0:38:2c:
                    38:3a:71:93:f5:cc:29:25:e9:08:47:5b:fc:f0:b3:
                    9f:e8:42:db:6a:92:23:cd:4d:d1:be:23:a0:0a:94:
                    0a:f6:58:64:6a:4c:32:62:1e:f7:a8:2c:9c:1d:74:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55880

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.232.0/22
                  103.6.252.0/22
                  115.146.80.0/20
                IPv6:
                  2407:ae00::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:40:6d:56:6b:83:3b:79:98:2d:8d:8d:7d:1b:b4:99:62:d2:
         a8:bd:44:11:54:cb:69:d8:9c:70:50:ce:2c:97:0f:dc:3b:0a:
         ab:49:5a:1f:89:34:5c:e3:8a:79:36:f2:e5:96:c3:bf:c9:aa:
         b5:b7:69:5f:65:46:ec:2d:4b:1d:ed:cf:7b:68:f8:68:6d:0b:
         3b:54:75:4b:29:c4:1d:4d:44:bf:c9:8d:59:62:09:86:b9:9f:
         da:2a:ed:a3:24:44:e8:7a:56:9e:ed:71:04:a2:92:08:bd:16:
         83:b7:27:43:f1:53:ca:03:74:fa:35:3f:0f:33:e6:af:81:e3:
         ff:30:47:e4:7b:6d:cd:12:ca:26:de:26:3f:34:42:e5:05:52:
         69:d4:0f:a5:5b:97:8d:19:57:c6:c3:d9:66:95:29:08:39:4b:
         31:e7:18:bc:f0:30:c7:95:4e:2f:cc:b0:9f:a2:a5:19:c4:8a:
         60:b1:9e:36:36:ff:2a:ef:ec:f5:15:62:be:aa:b7:12:de:37:
         25:50:d1:54:82:44:92:06:71:05:99:d9:65:e0:48:85:d1:33:
         ef:47:02:87:4a:a2:c2:2f:cc:07:ca:84:63:ad:55:c8:68:59:
         9d:37:62:59:9d:2c:f7:1f:ba:2a:fe:a9:fc:50:19:ba:c2:3a:
         11:0d:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 18:44:15 2023 by rpki-client on console-fra.rpki-client.org