Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdYOrDBSk0zbscaXU1FtBwgwNO0.cer
File:                     MdYOrDBSk0zbscaXU1FtBwgwNO0.cer (raw, json)
Hash identifier:          8kcGVD1q/VeacCgNbB/nh5Sv9Lcy1/FUG7A6NUdkGx0=
Subject key identifier:   31:D6:0E:AC:30:52:93:4C:DB:B1:C6:97:53:51:6D:07:08:30:34:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019F62
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/MdYOrDBSk0zbscaXU1FtBwgwNO0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Apr 2023 21:39:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 132714
                          IP: 103.112.200.0/22
                          IP: 2402:b140::/32

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 19:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106338 (0x19f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 27 21:39:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91F3B43/serialNumber=31D60EAC3052934CDBB1C69753516D07083034ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:9d:38:74:e8:dc:7a:7e:bf:26:04:9a:e8:
                    2d:a4:fb:e8:c3:06:92:cf:77:15:86:7b:86:9e:e7:
                    fb:0b:e8:e7:07:0c:7d:d2:db:a5:bd:64:12:af:ca:
                    ef:f0:8a:ad:b9:7b:dd:48:92:1e:4c:e0:29:2a:22:
                    4a:5d:b2:23:16:21:4a:9d:b4:10:1d:33:4a:52:98:
                    d0:c2:7e:71:f3:e8:00:8e:d3:fe:b2:3d:2d:05:5c:
                    05:5f:25:4b:3f:26:56:bd:31:e2:d9:60:93:47:ce:
                    1e:d5:db:ad:2a:cc:b2:2c:5c:5a:ca:a8:e1:17:06:
                    58:a3:3c:eb:98:97:30:64:96:ac:f2:3c:5f:36:a4:
                    00:7f:d9:73:98:8b:aa:e9:50:a3:c0:59:04:96:6d:
                    85:e9:f2:a3:d4:57:3e:b4:3d:ce:d0:63:c8:58:7c:
                    62:d4:b4:98:cc:6e:fb:63:09:e0:df:9c:13:30:e3:
                    e1:cd:14:20:63:7b:b7:25:05:d1:be:da:b3:2e:c4:
                    9c:62:83:96:40:ec:a5:39:51:aa:ea:4d:24:cf:8f:
                    29:de:1a:b3:9f:b6:d9:7e:cc:da:24:8b:61:c5:a4:
                    00:38:4e:b0:0c:a6:4c:7b:43:9d:73:64:0b:23:64:
                    2f:ec:24:09:b7:fb:7a:0d:bf:f1:d4:52:e0:16:48:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D6:0E:AC:30:52:93:4C:DB:B1:C6:97:53:51:6D:07:08:30:34:ED
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/MdYOrDBSk0zbscaXU1FtBwgwNO0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132714

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.200.0/22
                IPv6:
                  2402:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:80:15:91:04:71:58:bb:7a:57:6d:10:a1:a3:a0:7c:46:
         45:3a:ac:3d:7c:24:99:80:81:87:46:e9:9c:7b:bb:82:b7:09:
         8f:c9:49:ff:21:20:c4:7c:03:56:d2:d5:63:8b:54:a1:01:50:
         9b:eb:1c:fb:a4:9b:88:17:eb:9b:3b:65:71:d1:b9:d2:9c:26:
         0e:28:7d:9a:64:91:5a:37:cb:fe:c9:8e:47:63:97:dd:a8:33:
         86:6f:c4:32:de:66:62:28:43:fc:57:db:3b:b0:26:9b:f0:28:
         af:da:02:3a:1e:6e:ab:dc:eb:2e:14:de:de:3d:a9:ec:66:17:
         02:47:22:d3:01:ee:9b:6d:6c:4c:4c:ac:37:88:eb:3d:53:12:
         fc:9b:de:b8:47:d5:3c:64:9f:ae:77:9a:42:60:9a:e1:14:c9:
         e0:67:2d:7e:41:94:f8:c3:bb:14:30:c3:fc:6e:cb:02:e4:99:
         21:ef:b6:1b:52:36:68:1c:a3:cb:d8:f3:87:bb:ca:93:f5:3c:
         30:ac:7b:22:6f:f1:20:2a:0e:3d:18:93:45:fb:47:31:6d:ad:
         e7:5f:af:7e:25:c8:d9:40:f7:cf:ad:78:26:cb:8b:67:af:dc:
         ab:b8:07:f9:17:2f:64:67:c8:33:90:ba:25:5c:15:b2:85:f7:
         2f:f4:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:53 2024 by rpki-client on console-fra.rpki-client.org