Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLC4wveAEsPgEYiqpql68zSoLkk.cer
File:                     LLC4wveAEsPgEYiqpql68zSoLkk.cer (raw, json)
Hash identifier:          HreUFECC9Eapc7ZL04GBVWOLEhQV5OT9qt/u+t4QqdE=
Subject key identifier:   2C:B0:B8:C2:F7:80:12:C3:E0:11:88:AA:A6:A9:7A:F3:34:A8:2E:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CDFF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/LLC4wveAEsPgEYiqpql68zSoLkk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 15:36:44 +0000
Certificate not after:    Sat 30 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 132467
                          IP: 103.5.196.0/23

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 14:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118271 (0x1cdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 15:36:44 2023 GMT
            Not After : Mar 30 00:00:00 2024 GMT
        Subject: CN=A9141105/serialNumber=2CB0B8C2F78012C3E01188AAA6A97AF334A82E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:84:1b:7b:17:85:39:22:7f:15:95:89:5c:
                    cc:fc:80:d2:7c:24:a3:25:25:97:09:80:dd:f0:60:
                    d8:f9:c3:b5:01:91:51:8e:e5:89:31:75:a8:45:ef:
                    7b:92:a0:1b:51:64:88:0c:34:5a:85:45:1e:96:65:
                    64:3c:57:38:af:20:b6:65:a5:40:e9:98:61:9b:8a:
                    2d:17:f2:62:26:16:f1:e3:a2:a7:85:e6:8d:9a:80:
                    c1:b1:e7:60:c2:04:66:08:60:ef:9e:f6:36:d2:69:
                    6d:02:bb:0d:2e:35:a6:ae:07:af:77:b1:2f:0d:e4:
                    20:1d:9f:98:af:10:3f:7d:47:0d:b0:a7:d9:2f:0c:
                    58:06:8f:48:61:8c:85:4c:7a:b4:f5:a4:ab:fc:a2:
                    8c:2d:32:b9:d1:87:0e:02:b1:93:3a:97:98:7f:3e:
                    51:7d:ee:72:80:3a:39:86:0e:63:9b:59:78:54:ce:
                    e6:60:77:e9:a7:43:da:81:40:5d:d6:95:a5:b0:f1:
                    0c:ce:96:6e:1a:c3:a7:3a:59:8f:9e:4a:85:c9:cd:
                    05:dd:1d:c4:98:4d:d4:34:64:0a:dc:90:79:cf:40:
                    e4:aa:c0:4e:29:e0:e7:07:d4:a6:ee:34:f8:6c:6c:
                    7a:17:7f:e6:53:fe:34:24:a9:70:2f:c4:46:76:d4:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:B8:C2:F7:80:12:C3:E0:11:88:AA:A6:A9:7A:F3:34:A8:2E:49
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141105/5FE7DE56261511E28D36FC9708B02CD2/LLC4wveAEsPgEYiqpql68zSoLkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132467

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:05:4d:83:5a:4d:e5:10:64:ce:29:48:61:2e:35:39:45:
         79:7c:fa:b6:44:1a:f9:e6:8b:b0:72:dc:3d:97:09:91:81:5d:
         bd:95:8f:d7:0c:c7:29:bb:40:cb:7f:9e:09:ef:41:43:1b:64:
         40:1f:51:54:a9:4e:95:b5:d4:5e:af:2c:6d:2c:91:77:b5:ed:
         e0:6c:4a:e7:30:7c:73:3b:45:9f:ec:9b:fe:a1:15:17:62:f8:
         26:6c:8e:14:fa:2a:eb:5e:77:03:02:d5:13:83:89:0c:31:a2:
         c4:b3:36:6d:49:48:5f:85:15:05:78:d6:4a:0e:07:b6:70:a1:
         d1:37:ee:c6:41:24:28:d2:bd:4d:4c:d6:96:fd:e4:ab:35:3e:
         b2:70:a2:6c:05:00:21:cf:15:40:70:5d:d7:79:7f:91:be:c5:
         87:d2:f6:77:e7:fc:0a:fa:ae:d5:be:89:37:fd:3c:42:04:5b:
         9a:a5:03:e6:b6:ef:22:9a:45:d0:1c:e4:df:6a:11:91:03:67:
         56:dd:9f:f0:4f:b5:8d:80:7c:17:68:b0:5d:d6:f6:d6:f1:84:
         ea:b7:9c:31:a0:31:45:94:79:5a:e5:5f:af:1e:14:db:45:96:
         65:dc:b6:1b:1c:4b:90:df:a2:38:9e:60:8b:16:43:34:ce:41:
         76:69:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:02:50 2024 by rpki-client on console-ams.rpki-client.org