Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer
File:                     Ide4chBUge2CqeYiOyVAa7dSLyM.cer (raw, json)
Hash identifier:          M7EZTTDnyprhVeHS5V0zY+Qzsk8CiCx3Af6Il5+Ykfk=
Subject key identifier:   21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0210CE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Oct 2024 04:24:08 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 136816
                          IP: 103.97.156.0/22

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 18:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135374 (0x210ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 04:24:08 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:79:23:49:e7:28:bb:96:7e:91:83:bf:11:
                    c0:2c:fa:79:eb:b5:fa:5a:22:d3:ad:7f:b7:2e:d6:
                    02:08:f8:8a:3f:8a:cf:4a:00:ef:27:4d:09:a7:5c:
                    5f:fc:a4:92:6e:32:25:6e:7f:97:f8:9f:90:c3:b2:
                    10:65:1f:cb:23:b9:fa:22:ae:b3:c1:f9:5d:93:62:
                    a3:77:de:5e:12:a6:0e:bf:1d:88:6a:1c:6e:2d:d7:
                    10:e2:5f:ca:6a:cf:45:2e:4d:b1:5c:0f:29:1e:2a:
                    7c:19:8a:be:9c:cd:55:25:8b:be:54:f4:bf:f9:26:
                    63:d1:69:bf:46:ea:c2:e9:b2:67:23:0a:af:78:0e:
                    ba:07:5e:60:31:ac:72:e5:d7:74:5a:de:21:ad:6e:
                    1a:04:a7:b4:0d:ca:6b:68:76:da:63:20:27:46:63:
                    c2:df:de:b9:8f:fa:32:f1:1e:25:3e:9f:68:3c:ac:
                    84:6c:f2:92:e6:7c:76:8c:36:21:42:5d:de:9d:01:
                    54:54:ae:ed:8f:ab:7b:c9:9f:20:e4:9a:e9:7e:c5:
                    0d:c9:af:11:ee:6c:63:e6:93:70:7a:83:9c:d1:ce:
                    c5:c8:88:96:ea:87:51:47:6a:3b:59:b9:77:3a:6a:
                    c6:a9:7a:a1:69:bd:31:63:b6:1e:c8:31:e4:d7:36:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136816

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:71:ce:f8:90:11:45:fd:8c:7d:93:c4:7b:65:66:8f:75:5d:
         0c:ad:93:a0:f5:58:75:62:00:52:c2:4a:82:b8:6c:ce:68:dc:
         0b:d1:9e:37:33:11:88:b4:a2:b4:23:6f:04:73:b3:bd:10:22:
         f5:02:b5:c9:94:a6:a8:81:7f:d3:05:9a:bc:88:e7:4b:65:87:
         28:62:b9:e2:2b:56:ad:9f:7b:e9:b7:6f:a9:30:a9:9f:6b:4c:
         38:c6:86:a4:6c:ff:50:3f:cd:f0:96:59:77:be:9d:21:92:92:
         21:9f:38:41:5a:37:d6:49:d1:f3:88:76:fc:71:95:df:61:5a:
         21:a0:db:2a:20:b8:b7:09:05:12:e0:c1:fd:39:30:40:ed:3e:
         f2:eb:e1:39:f0:71:7b:3a:9e:71:74:01:82:6f:c7:cc:35:37:
         d7:7d:85:1d:f9:06:d8:86:2f:b1:67:0a:ae:3d:f1:29:92:43:
         28:20:6b:8b:32:8a:30:ae:05:2c:3b:1d:0b:2c:1f:de:43:3b:
         a1:ba:f3:df:f2:b4:79:b8:34:10:75:90:be:07:ce:3f:52:db:
         6d:c5:75:8e:81:cb:a9:45:6c:3c:f1:f0:83:d2:a1:67:93:15:
         af:92:c3:24:28:e6:c5:27:2f:f4:c3:f5:80:ac:30:ae:20:d9:
         6c:78:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:22:06 2024 by rpki-client on console-fra.rpki-client.org