Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtRvG-qXII_SIgxMa_x5BhDEXL4.cer
File:                     NtRvG-qXII_SIgxMa_x5BhDEXL4.cer (raw, json)
Hash identifier:          vznBL9YZoQ2mVpv0LzGHR8hZQVV1APgEW71yqhrmKG8=
Subject key identifier:   36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E851
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 19:07:34 +0000
Certificate not after:    Thu 01 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 59216
                          IP: 103.243.68.0/22
                          IP: 2001:df4:d000::/48

Validation:               Failed, certificate revoked on Wed 03 Apr 2024 20:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125009 (0x1e851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  1 19:07:34 2024 GMT
            Not After : Aug  1 00:00:00 2024 GMT
        Subject: CN=A918067C/serialNumber=36D46F1BEA97208FD2220C4C6BFC790610C45CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:cc:dc:ed:76:7c:a3:3a:d5:4e:4d:9f:7c:
                    fc:36:3b:5f:1e:22:cc:5b:a0:e6:39:aa:f1:0e:4c:
                    d8:37:aa:28:1f:89:a6:21:c7:72:df:47:cb:1a:4d:
                    d5:f8:0e:34:93:03:59:1e:33:49:0c:ce:26:ff:ca:
                    79:f8:3a:e1:a1:dd:f6:70:a2:de:49:83:a5:8b:bc:
                    b7:8b:c3:13:8d:d8:15:15:69:a4:cc:02:1a:1b:c5:
                    31:e4:fc:e0:b8:58:c7:7b:4e:23:19:89:f5:89:f3:
                    82:7b:c7:e6:f3:59:02:51:23:12:76:05:c4:c0:b0:
                    e8:84:5c:c2:80:f6:fa:15:73:d6:5e:ce:2f:ce:88:
                    c5:d8:a7:70:ea:31:df:2d:6d:70:9a:33:3d:57:e3:
                    4b:a6:97:6d:1e:b8:0d:b2:5c:ba:2d:af:3d:0b:3e:
                    66:48:80:f1:5d:03:e6:ba:ed:20:d0:9b:d2:10:1e:
                    6a:ea:f3:37:78:b8:93:0b:d3:e4:15:de:f9:82:6c:
                    68:2c:6e:ec:f4:75:0f:21:5c:5f:97:1f:73:f5:32:
                    12:6e:c2:fa:43:78:2e:e3:2e:63:7f:99:78:10:2b:
                    6b:b1:47:1a:1f:a6:85:f8:a9:d4:87:d4:62:29:02:
                    04:9c:49:4e:04:24:b5:52:1c:4e:1a:1d:e9:dc:38:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59216

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.68.0/22
                IPv6:
                  2001:df4:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:56:8c:10:16:f4:28:1d:e8:e6:b9:97:68:97:89:e9:69:
         e5:a3:67:0d:64:c1:78:32:44:40:5d:39:2e:14:f4:6b:ee:f5:
         8b:5e:9c:a1:f9:bc:7a:e6:a2:b2:9a:9f:40:77:b0:79:3f:8e:
         d4:f0:4c:50:35:30:83:c9:77:2d:43:84:21:35:4c:36:2d:2b:
         42:39:14:dd:71:90:1e:b5:c0:25:52:83:98:07:13:c3:34:22:
         a9:31:6c:cb:b7:7d:6f:e7:5a:08:b8:5f:c4:fc:f0:c8:c7:e2:
         59:03:a3:c9:c5:2e:61:be:10:49:51:44:c3:08:9a:b3:29:4d:
         87:8c:02:4c:3f:c7:ac:b1:55:c8:91:d7:7f:c3:39:ed:66:33:
         c0:89:53:20:55:35:f2:d0:45:bb:99:9e:b3:38:04:ee:d4:3e:
         48:81:86:d4:62:7f:4e:91:3f:c1:f0:5a:cd:69:ed:1f:b4:02:
         a2:3a:e8:85:21:71:37:e5:be:1e:47:1f:34:60:44:29:c9:c4:
         fa:ac:c4:af:fa:b9:ef:d3:8b:d7:a7:c9:ff:4f:35:11:f8:4e:
         4d:38:30:d4:ef:72:4a:4a:23:34:ec:08:80:25:6c:f5:c9:04:
         e1:ad:c5:06:17:2b:68:0a:05:65:ee:74:2c:07:d4:0d:3d:49:
         73:2f:3b:5e
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAehRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQwMTE5MDczNFoXDTI0MDgwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODA2N0MxMTAvBgNVBAUTKDM2RDQ2RjFCRUE5NzIwOEZEMjIyMEM0
QzZCRkM3OTA2MTBDNDVDQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ+szc7XZ8ozrVTk2ffPw2O18eIsxboOY5qvEOTNg3qigfiaYhx3LfR8saTdX4
DjSTA1keM0kMzib/ynn4OuGh3fZwot5Jg6WLvLeLwxON2BUVaaTMAhobxTHk/OC4
WMd7TiMZifWJ84J7x+bzWQJRIxJ2BcTAsOiEXMKA9voVc9Zezi/OiMXYp3DqMd8t
bXCaMz1X40uml20euA2yXLotrz0LPmZIgPFdA+a67SDQm9IQHmrq8zd4uJML0+QV
3vmCbGgsbuz0dQ8hXF+XH3P1MhJuwvpDeC7jLmN/mXgQK2uxRxofpoX4qdSH1GIp
AgScSU4EJLVSHE4aHencOMDjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNtRvG+qX
II/SIgxMa/x5BhDEXL4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwNjdDLzk5RkI2MDk0MDFEMDExRUQ5NTQwQkIzNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDY3Qy85OUZCNjA5NDAxRDAxMUVEOTU0MEJCMzVDNEY5QUUwMi9OdFJ2Ry1x
WElJX1NJZ3hNYV94NUJoREVYTDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOdQMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ/NEMA8EAgAC
MAkDBwAgAQ300AAwDQYJKoZIhvcNAQELBQADggEBAHVrVowQFvQoHejmuZdol4np
aeWjZw1kwXgyREBdOS4U9Gvu9YtenKH5vHrmorKan0B3sHk/jtTwTFA1MIPJdy1D
hCE1TDYtK0I5FN1xkB61wCVSg5gHE8M0IqkxbMu3fW/nWgi4X8T88MjH4lkDo8nF
LmG+EElRRMMImrMpTYeMAkw/x6yxVciR13/DOe1mM8CJUyBVNfLQRbuZnrM4BO7U
PkiBhtRif06RP8HwWs1p7R+0AqI66IUhcTflvh5HHzRgRCnJxPqsxK/6ue/Ti9en
yf9PNRH4Tk04MNTvckpKIzTsCIAlbPXJBOGtxQYXK2gKBWXudCwH1A09SXMvO14=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org