Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
File:                     CxmNO40c0q9b_OS8NtCGjWdAtJE.cer (raw, json)
Hash identifier:          gIyjqa6sfDT3rz5iqDiakwXoHNkIP2vAtIhzV4aDpw8=
Subject key identifier:   0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0168B7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 16 Aug 2022 16:04:51 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    IP: 43.255.36.0/22
                          IP: 103.239.28.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92343 (0x168b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 16 16:04:51 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:79:8a:8a:e1:fd:4f:12:96:ca:cc:f5:75:
                    c2:25:24:3a:f0:51:a9:e7:06:88:8e:d9:2b:c0:8b:
                    61:90:f6:81:e6:a9:d7:03:b0:a9:65:07:f1:81:ac:
                    eb:0a:db:8e:ba:5c:4f:f5:ab:bb:28:41:59:ec:10:
                    01:47:c8:db:d2:0c:7b:81:8d:a9:7a:ba:a2:6f:d3:
                    7a:16:f3:42:88:33:8f:44:a8:c5:63:ba:4c:78:4e:
                    76:27:b5:b6:b8:c6:8b:dd:f9:29:c6:77:26:22:f8:
                    54:be:c6:be:77:df:24:20:76:01:8e:14:14:8f:67:
                    eb:35:3e:be:ec:4f:9f:ec:92:5d:7f:1a:ae:db:74:
                    f4:32:e0:b7:1b:ba:cd:8e:6e:29:57:86:46:0d:8f:
                    6b:ba:67:02:24:ba:47:be:d4:ac:a1:b7:56:fd:42:
                    3c:ec:d5:a0:9a:b1:98:e4:97:cd:7c:c9:ac:a4:3d:
                    60:0e:20:a1:8c:02:62:ba:df:c8:31:08:fc:7e:d1:
                    70:84:0c:e3:ee:4d:08:80:5a:12:ad:88:88:03:4f:
                    36:5f:9e:fe:50:e8:0a:0b:35:d7:ea:05:2c:80:69:
                    f1:ca:b9:2c:7d:c2:87:92:ca:b4:f1:4b:c3:f1:18:
                    b7:87:92:aa:fc:2b:25:0c:eb:cc:25:8a:79:ea:7b:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.36.0/22
                  103.239.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:d2:74:d9:1f:ea:fd:d6:60:ec:3a:9c:5a:ad:41:59:48:
         ed:bf:f1:4f:b3:08:4c:c5:73:a3:31:e6:79:53:a8:44:02:2a:
         0b:d0:c9:93:5e:7e:8e:91:a5:ec:ad:06:ec:55:4d:9c:46:b3:
         f3:5c:68:0a:81:68:99:c6:21:0a:5a:a6:6b:f3:4c:fb:88:93:
         85:f4:3c:6c:ec:8a:41:a6:22:08:3e:20:c4:0e:ad:ce:f4:8a:
         02:a6:4e:80:a9:26:14:9c:ac:1f:66:eb:e6:51:87:06:29:55:
         32:f1:26:c0:0c:26:f8:e7:d0:07:2c:55:a2:6b:df:0b:c3:b7:
         e6:9e:8a:77:39:c0:6e:40:a9:75:81:14:e8:b2:ab:39:43:9e:
         4e:d3:17:fe:3f:9e:ab:39:99:68:db:42:ec:35:d0:9a:06:78:
         55:30:46:f7:4e:15:f9:72:74:56:18:d0:96:8e:a2:73:3d:c9:
         de:b1:d6:2a:cf:40:0c:84:5e:7d:16:58:c6:30:a8:3d:fc:00:
         5a:31:22:73:27:59:a5:be:19:d9:bc:8e:df:fb:9b:6a:24:0b:
         23:29:93:fa:c0:3a:d3:6b:e3:7c:4b:01:f8:db:73:17:22:2d:
         1d:4b:c3:50:47:21:53:79:aa:67:dd:e4:1f:56:04:af:d3:7f:
         aa:52:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 19:07:56 2023 by rpki-client on console-fra.rpki-client.org