Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G44N7JKBoArI6r4qb8VR004A0RU.cer
File:                     G44N7JKBoArI6r4qb8VR004A0RU.cer (raw, json)
Hash identifier:          6ocE0RUqTU1MxSOGknV7wO6GKCwyi4SvWfuRd3quHRE=
Subject key identifier:   1B:8E:0D:EC:92:81:A0:0A:C8:EA:BE:2A:6F:C5:51:D3:4E:00:D1:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BF89
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E66B2/84579728049B11EB9B24A365C4F9AE02/G44N7JKBoArI6r4qb8VR004A0RU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E66B2/84579728049B11EB9B24A365C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 21:13:55 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 43.231.4.0/22
                          IP: 103.15.104.0/22

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 21:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114569 (0x1bf89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 25 21:13:55 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91E66B2/serialNumber=1B8E0DEC9281A00AC8EABE2A6FC551D34E00D115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:f0:6f:a4:a4:6c:fa:aa:8d:74:e8:04:8a:
                    af:ca:64:c9:67:08:f8:a7:36:0a:ba:01:14:8c:76:
                    64:ea:81:9a:ad:94:b0:8a:90:49:75:f2:6c:27:7c:
                    5b:14:62:6e:23:52:64:fe:b7:69:3c:8e:06:45:27:
                    c8:97:65:5b:bd:fe:16:aa:5b:a3:f8:9a:98:d5:f7:
                    85:c7:95:df:69:eb:0f:11:47:97:1b:80:3a:e4:cf:
                    02:57:f7:df:0a:c7:b0:d7:68:92:06:df:9f:41:5a:
                    56:61:d9:d8:30:7b:ed:b3:2b:c3:f2:ac:b6:45:97:
                    f3:07:c1:77:b6:ad:85:68:3f:a6:d5:df:92:26:70:
                    d7:c2:cc:f3:9d:3e:89:20:f6:9d:6b:17:a8:db:34:
                    3c:6b:ac:67:ec:19:bd:1d:e1:5e:1e:c7:65:6c:57:
                    14:7f:2d:ff:d7:01:25:bc:4d:de:ee:7b:6b:27:24:
                    12:85:af:00:8c:eb:d2:da:93:8e:3c:39:d9:4c:5d:
                    0a:e4:7e:e1:b4:ae:7b:d1:4d:dd:bb:5d:d8:db:59:
                    a7:47:54:4e:24:ed:e5:bb:6a:15:58:22:7f:69:4a:
                    e5:a5:f6:12:3c:07:62:9c:18:bf:f2:7e:3d:7e:e8:
                    81:64:26:36:c5:62:fa:75:59:18:d8:40:68:70:87:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:0D:EC:92:81:A0:0A:C8:EA:BE:2A:6F:C5:51:D3:4E:00:D1:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E66B2/84579728049B11EB9B24A365C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E66B2/84579728049B11EB9B24A365C4F9AE02/G44N7JKBoArI6r4qb8VR004A0RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.4.0/22
                  103.15.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:82:05:1d:28:9b:6e:9e:b6:f7:ee:d3:31:c1:4a:34:6d:23:
         f6:ac:89:d4:ef:ad:e4:b1:58:cf:45:16:38:41:ad:5a:87:f9:
         4b:3d:bc:e8:da:5b:f5:64:5b:eb:b4:df:bc:a1:ff:4e:9a:80:
         03:4f:e1:c9:7f:2a:ba:d7:c4:79:14:2f:b7:0c:48:26:3c:2c:
         95:3d:5b:a4:a1:a3:1b:4e:81:b0:91:9b:c0:57:15:f6:d7:05:
         27:15:3c:fa:25:f9:bb:56:8c:ed:b0:ca:38:b3:35:4e:1d:cf:
         5c:69:79:e6:e0:4a:9d:57:62:4a:6d:f0:7f:70:1e:53:87:6c:
         96:72:7b:19:9c:37:71:b8:92:ae:9d:c5:74:fd:ba:04:25:1c:
         a1:7b:99:a4:b9:e4:2b:49:13:43:de:e3:96:f1:72:c7:0d:2a:
         54:04:b8:9e:6c:84:9f:a3:4a:9d:bb:02:7c:54:dc:51:7a:ff:
         ce:79:bf:03:f5:07:77:51:02:56:4a:cf:e8:da:d8:19:e9:2d:
         4b:a8:65:4c:0e:65:45:a0:77:2a:44:a5:fc:6d:ae:97:68:fd:
         31:4b:7a:74:d3:60:c9:60:aa:c5:36:d2:5a:f7:cd:9a:0a:15:
         a5:05:6a:86:ac:e6:b0:b0:9c:b6:ae:26:a3:6a:95:d6:bb:1d:
         5f:81:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 00:17:19 2024 by rpki-client on console-fra.rpki-client.org