Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MzQs71ocGM4vAGX0oSO2LpCJFrs.cer
File:                     MzQs71ocGM4vAGX0oSO2LpCJFrs.cer (raw, json)
Hash identifier:          pMkepIA+5WQF6jq+TA3gQj4T/jPtqExbH5AzQn5IKlE=
Subject key identifier:   33:34:2C:EF:5A:1C:18:CE:2F:00:65:F4:A1:23:B6:2E:90:89:16:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C189
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Oct 2023 20:23:29 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 134382

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 23:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115081 (0x1c189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  2 20:23:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91E0176/serialNumber=33342CEF5A1C18CE2F0065F4A123B62E908916BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:b4:05:80:c9:8f:c6:e8:00:0e:2e:8b:21:
                    b5:98:99:35:c1:3b:47:5f:00:ee:54:7e:20:43:82:
                    40:06:0a:34:8e:16:8d:25:37:f1:90:b3:d9:cc:b0:
                    77:b3:bd:a4:bc:bc:12:53:9f:a0:86:22:45:c5:dd:
                    a7:06:ac:64:b3:5f:f4:9d:93:0c:29:fd:3f:2e:84:
                    20:d0:eb:cb:b8:03:57:5a:c3:c2:e4:65:0f:da:85:
                    ce:62:6d:6b:af:ac:90:73:15:3d:24:f9:4b:07:a6:
                    50:de:e9:a0:39:a2:9e:97:ca:71:01:a0:75:6b:96:
                    b5:a7:a0:ae:f3:c2:95:7b:46:91:c0:d5:64:4b:a6:
                    be:50:c2:11:8a:23:21:b3:be:9f:e4:91:62:09:a4:
                    af:85:64:4d:b2:7f:41:50:7b:f8:ea:ba:83:ad:5e:
                    48:97:2e:bf:0f:7c:6a:0e:65:85:c0:09:53:86:bf:
                    3f:3e:32:34:23:bc:73:5c:f2:62:d8:77:2f:7d:df:
                    d7:69:26:66:61:ac:8e:c9:11:45:f5:9f:0d:f9:32:
                    d7:47:15:09:f2:e5:48:8c:1b:c4:e5:2f:7e:f4:94:
                    ca:47:49:7b:d0:83:15:4c:67:65:f4:3b:26:7c:b4:
                    95:3c:c2:24:b2:b8:7b:68:8c:5a:ea:d3:a7:f2:b6:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:2C:EF:5A:1C:18:CE:2F:00:65:F4:A1:23:B6:2E:90:89:16:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0176/33797F9828CC11E5A342FC5BC4F9AE02/MzQs71ocGM4vAGX0oSO2LpCJFrs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134382

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:b9:4b:6d:b8:07:48:5b:da:eb:c6:d8:ef:b9:74:c5:d2:
         8b:74:2e:e2:d3:74:a9:c3:4a:87:ca:ee:b3:11:a6:0a:ed:e0:
         03:24:0a:09:5c:61:32:15:69:67:0d:24:9f:cc:78:96:13:1d:
         84:d6:2f:ef:91:27:7f:83:b9:85:36:8a:e8:7e:41:3f:18:75:
         ce:cb:5f:a0:d9:34:88:31:d8:33:36:18:40:09:7d:d0:8f:84:
         60:0d:cf:89:4c:7d:3c:0f:3e:3d:a6:76:04:7a:dd:3e:72:60:
         75:a8:d3:27:02:14:03:0c:c7:56:94:33:56:33:95:04:f8:03:
         81:cc:b2:07:61:b8:01:22:c5:d8:5f:3f:4b:9c:2d:8d:a3:48:
         c5:7d:1e:21:3f:02:50:7d:4b:32:9d:ea:74:db:59:24:28:7b:
         f2:12:69:41:37:bf:d8:a9:fe:60:1c:3a:d1:86:55:7a:d9:df:
         8b:04:a5:2d:84:3e:4f:48:a7:c8:4c:d9:25:bd:67:66:73:1e:
         f8:4d:b0:39:50:8a:f5:d2:16:54:49:e5:5b:d6:ff:7f:9e:7f:
         be:df:9d:43:c4:c3:5b:ca:24:0f:5c:1f:b5:e0:09:71:e0:1d:
         8f:d8:30:db:a1:72:05:d9:9e:d2:be:42:83:ff:96:14:d4:3f:
         fc:8b:3c:65
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAcGJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAwMjIwMjMyOVoXDTI0MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTAxNzYxMTAvBgNVBAUTKDMzMzQyQ0VGNUExQzE4Q0UyRjAwNjVG
NEExMjNCNjJFOTA4OTE2QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4NLQFgMmPxugADi6LIbWYmTXBO0dfAO5UfiBDgkAGCjSOFo0lN/GQs9nMsHez
vaS8vBJTn6CGIkXF3acGrGSzX/Sdkwwp/T8uhCDQ68u4A1daw8LkZQ/ahc5ibWuv
rJBzFT0k+UsHplDe6aA5op6XynEBoHVrlrWnoK7zwpV7RpHA1WRLpr5QwhGKIyGz
vp/kkWIJpK+FZE2yf0FQe/jquoOtXkiXLr8PfGoOZYXACVOGvz8+MjQjvHNc8mLY
dy9939dpJmZhrI7JEUX1nw35MtdHFQny5UiMG8TlL370lMpHSXvQgxVMZ2X0OyZ8
tJU8wiSyuHtojFrq06fytvfZAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUMzQs71oc
GM4vAGX0oSO2LpCJFrswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUwMTc2LzMzNzk3Rjk4MjhDQzExRTVBMzQyRkM1QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMDE3Ni8zMzc5N0Y5ODI4Q0MxMUU1QTM0MkZDNUJDNEY5QUUwMi9NelFzNzFv
Y0dNNHZBR1gwb1NPMkxwQ0pGcnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgzuMA0GCSqGSIb3DQEBCwUAA4IBAQAqq7lLbbgHSFva68bY77l0xdKL
dC7i03Spw0qHyu6zEaYK7eADJAoJXGEyFWlnDSSfzHiWEx2E1i/vkSd/g7mFNoro
fkE/GHXOy1+g2TSIMdgzNhhACX3Qj4RgDc+JTH08Dz49pnYEet0+cmB1qNMnAhQD
DMdWlDNWM5UE+AOBzLIHYbgBIsXYXz9LnC2No0jFfR4hPwJQfUsynep021kkKHvy
EmlBN7/Yqf5gHDrRhlV62d+LBKUthD5PSKfITNklvWdmcx74TbA5UIr10hZUSeVb
1v9/nn++351DxMNbyiQPXB+14Alx4B2P2DDboXIF2Z7SvkKD/5YU1D/8izxl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:42 2024 by rpki-client on console-ams.rpki-client.org