Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I0SLGFav3nzuu1kk_YrYBfB-BrA.cer
File:                     I0SLGFav3nzuu1kk_YrYBfB-BrA.cer (raw, json)
Hash identifier:          yguYPI44xjLoT2tva2wrphgSqME69Aedn/dByZ8hlPg=
Subject key identifier:   23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DD0C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/I0SLGFav3nzuu1kk_YrYBfB-BrA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Feb 2024 07:40:56 +0000
Certificate not after:    Sat 01 Jun 2024 00:00:00 +0000
Subordinate resources:    AS: 137208
                          IP: 2001:df3:5f00::/48

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 21:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122124 (0x1dd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 07:40:56 2024 GMT
            Not After : Jun  1 00:00:00 2024 GMT
        Subject: CN=A91E178D/serialNumber=23448B1856AFDE7CEEBB5924FD8AD805F07E06B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:c2:a2:60:3d:e1:d6:95:49:b3:94:d6:b3:
                    26:fd:88:34:de:5e:af:de:8c:1a:24:2a:7c:4e:36:
                    80:df:d7:2f:89:e7:05:30:28:9b:d6:76:6d:3b:13:
                    25:f4:75:97:f0:e8:f7:ab:73:74:7d:d8:5b:fe:c2:
                    b7:f6:14:d2:fa:30:3f:a4:7f:8a:a4:44:c5:bd:fa:
                    52:8f:65:e3:62:c3:de:6e:f6:2e:56:1d:ba:dd:98:
                    ae:21:79:5a:bc:4d:9b:fd:4f:64:7f:27:79:65:61:
                    c3:94:80:c4:f4:9b:14:42:c1:8d:f2:fe:13:fa:d8:
                    9d:6b:51:d3:ed:a4:17:f3:3e:8f:12:7e:79:94:2a:
                    6b:b4:83:d8:7b:9e:93:a8:76:f2:28:42:cb:b1:c9:
                    a6:82:05:f7:2a:7f:50:2c:ce:13:47:8c:ed:92:c6:
                    a7:a3:e3:7a:f4:51:d5:87:2b:5a:96:9d:3e:1d:1a:
                    54:cc:14:a8:3d:27:e9:64:ca:d0:70:0e:b5:a4:4d:
                    b1:c2:2a:c6:66:12:9d:a6:2f:7c:da:d4:f5:7a:93:
                    1c:b6:89:e6:20:99:76:48:ca:18:d1:ff:32:61:8e:
                    75:3e:0d:09:15:65:3a:22:18:01:fb:f6:d9:e4:d3:
                    f7:83:4a:7e:ae:9b:dc:9a:4d:1e:c1:2a:18:d5:e2:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:8B:18:56:AF:DE:7C:EE:BB:59:24:FD:8A:D8:05:F0:7E:06:B0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E178D/0624B4D4201911EEB5DFB129C4F9AE02/I0SLGFav3nzuu1kk_YrYBfB-BrA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137208

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:5f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:f0:ab:1b:39:fb:7d:77:6d:d3:98:a1:91:d7:ea:81:41:67:
         08:49:06:d5:e4:e5:05:2b:60:cd:f4:dc:15:cc:4b:fa:5c:b0:
         a7:dd:8a:9f:09:c7:91:4e:94:76:1d:f6:de:ff:43:89:d9:8b:
         25:bf:a2:6f:7b:5e:69:43:a1:bc:92:ad:78:45:1a:35:56:14:
         cd:89:fe:02:ed:73:db:45:05:97:dc:fa:5b:f4:bb:5a:23:a1:
         8d:d3:dc:8b:06:63:7e:d3:33:e2:92:3d:b5:19:4a:46:08:0c:
         cc:60:36:76:bd:1b:10:ff:0c:9e:30:78:35:51:04:3c:4d:49:
         10:2d:bb:e6:11:96:27:7f:4e:f0:b7:a2:17:68:76:d5:b8:12:
         b2:04:1d:a7:bd:4d:66:c2:12:39:c2:c5:05:a6:76:c8:13:fa:
         be:61:22:f1:80:55:5a:14:dd:a4:3f:0b:41:f5:77:bb:96:24:
         ba:60:60:c2:66:81:11:62:65:7a:ed:c9:03:49:73:6f:8c:40:
         50:74:c5:1d:40:6a:82:4e:7e:84:ef:9f:10:0f:3e:b0:cd:ea:
         f3:78:13:a2:36:dd:3c:5d:98:0e:de:39:f3:77:8a:fa:19:4c:
         8e:cc:d0:41:e0:53:a8:95:aa:22:d7:5d:8e:fa:39:f2:59:8a:
         59:48:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 23:37:32 2024 by rpki-client on console-fra.rpki-client.org