Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhC5e8hmDE5anWo8udqHGaW6RRI.cer
File:                     AhC5e8hmDE5anWo8udqHGaW6RRI.cer (raw, json)
Hash identifier:          EsMZppsoBIo3Rt2/glBjmRulyTB/W+hSYv8aIQD/8vs=
Subject key identifier:   02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020A7E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 31 Aug 2024 01:55:49 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 103.241.40.0/23

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 07:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133758 (0x20a7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 01:55:49 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91CF0BD/serialNumber=0210B97BC8660C4E5A9D6A3CB9DA8719A5BA4512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:74:c4:8b:77:d8:25:ac:55:0c:2d:bd:6e:
                    1d:04:96:87:77:32:60:00:e9:94:d0:66:e5:92:c4:
                    6d:34:99:2a:cb:9b:20:5c:ee:02:49:70:4d:2c:8e:
                    9c:da:84:66:82:c4:6c:4a:76:b5:11:89:bd:fb:07:
                    f1:16:a1:ab:16:a3:2f:c2:1f:88:3b:3a:5d:a0:9f:
                    31:c1:9e:42:2c:14:bc:d7:7f:6a:9e:9a:9c:e7:6a:
                    59:c5:26:d0:24:f0:1a:86:09:e0:8e:41:bc:9c:b2:
                    a8:7d:1b:fa:3f:7c:5c:b0:33:07:02:12:d5:21:7a:
                    e2:3b:ca:e9:f4:06:d7:22:31:2b:91:e2:86:4a:4b:
                    44:e6:12:cb:a5:f4:57:60:bf:f8:0f:1d:bf:61:45:
                    76:d7:01:43:0f:b0:56:3d:5a:ea:bd:d7:52:ff:64:
                    22:4a:73:3d:63:b8:78:f4:80:14:bc:1d:bb:11:12:
                    4e:ec:08:4b:11:17:54:9a:53:b2:6e:d6:68:55:8b:
                    d0:e1:e9:d9:6d:60:5a:4a:cd:3c:25:0d:03:01:1f:
                    fa:65:3e:f7:d4:e0:bc:43:fd:c4:03:4f:49:8c:ae:
                    c5:64:d0:85:c0:f7:76:5b:9a:21:7c:f0:43:99:f1:
                    b3:27:43:b2:06:b1:43:1f:9e:5c:f1:53:14:f1:1d:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:B9:7B:C8:66:0C:4E:5A:9D:6A:3C:B9:DA:87:19:A5:BA:45:12
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF0BD/A67B277873D511EE8808CF71C4F9AE02/AhC5e8hmDE5anWo8udqHGaW6RRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:ea:b5:a8:ab:26:de:56:f9:37:c2:cb:64:39:3d:02:6b:
         df:ad:04:d8:08:30:38:74:a1:5b:8c:e9:30:16:36:f2:e2:11:
         83:5c:17:c3:f6:a8:be:50:d6:b2:2d:ce:b9:01:1a:53:12:53:
         4e:70:94:99:1c:b3:db:03:aa:14:cd:1e:2a:ea:fb:c4:a5:c8:
         7f:2f:a1:0f:7a:36:58:7b:10:33:4c:ad:12:c8:78:ec:2c:97:
         e5:81:0e:e3:5a:d9:b1:cd:bc:04:cf:3d:45:cb:04:08:97:9a:
         94:22:1b:2c:8c:b3:43:fa:4a:64:95:3d:be:12:6f:0e:e2:97:
         44:ad:62:1c:6a:ae:3f:99:21:83:22:c4:06:a8:53:31:11:45:
         c1:81:3e:cb:09:94:c3:9e:77:1a:d8:3a:2e:24:19:03:81:6d:
         6b:99:5f:c8:ce:0c:97:e5:5a:ab:80:d3:d4:6b:b7:8f:4a:4c:
         90:e2:19:7b:82:34:1e:ba:87:8b:b1:8e:a1:13:52:39:30:77:
         f7:f6:f3:73:1f:ce:ae:f5:ee:d9:4c:be:af:3a:97:9b:a0:fb:
         b0:ba:21:78:43:b8:5f:44:43:aa:0b:17:f9:78:a3:71:8e:0e:
         82:47:58:8c:4c:4c:f1:34:1e:7e:78:34:75:39:b9:b4:f9:63:
         9a:6e:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:12:02 2024 by rpki-client on console-fra.rpki-client.org