Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RnrlTKoMDQxK9VLVCCoc9aT0PtE.cer
File:                     RnrlTKoMDQxK9VLVCCoc9aT0PtE.cer (raw, json)
Hash identifier:          MlJcKLz062Ijo8PseeAUypq8RQeQf9yzfOP4wHH+lO0=
Subject key identifier:   46:7A:E5:4C:AA:0C:0D:0C:4A:F5:52:D5:08:2A:1C:F5:A4:F4:3E:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020028
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/RnrlTKoMDQxK9VLVCCoc9aT0PtE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:05:19 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131112 (0x20028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:05:19 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=467AE54CAA0C0D0C4AF552D5082A1CF5A4F43ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:84:a1:a4:0b:2f:74:7a:96:8b:b8:e5:cc:
                    a4:09:04:3a:9a:f1:a1:6b:a1:51:e7:ba:20:0a:ed:
                    33:1f:ac:e3:54:18:27:f9:24:b6:5a:ce:14:7b:2d:
                    4a:ce:50:36:00:e3:28:72:7f:4d:e8:cd:08:0d:ac:
                    d2:c1:af:f9:39:35:3c:c8:8d:61:71:76:ae:1e:fa:
                    a1:05:7a:0d:a8:0c:ad:ab:00:d3:b5:7a:58:fd:d0:
                    51:98:69:8a:b1:d0:20:bb:b7:f2:95:2a:a8:a3:e0:
                    99:77:f5:b4:a2:d1:ee:fe:ca:a9:01:9b:0d:10:b6:
                    2f:c0:6b:26:51:6d:7b:57:2f:ab:a8:67:4f:fc:71:
                    5a:7e:38:ef:8f:04:8b:2a:ec:d5:b9:1b:7f:3a:92:
                    9c:06:e1:97:79:bb:49:32:e3:f3:9e:3b:00:4f:fe:
                    52:d4:16:c5:bd:43:c3:9a:db:13:40:72:49:af:30:
                    a1:64:60:72:82:a9:0f:d3:6c:1d:38:9d:56:cc:a6:
                    6d:1a:7f:a5:dd:c3:42:52:eb:9b:04:53:a5:a3:9a:
                    46:79:61:e1:f3:f8:a1:b1:6f:76:ff:3c:7d:b1:f4:
                    df:90:c5:50:ac:d3:10:d9:45:05:70:5d:bb:5d:9f:
                    3c:f1:85:94:b4:41:fa:39:ed:5e:d8:9c:0f:9e:cc:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7A:E5:4C:AA:0C:0D:0C:4A:F5:52:D5:08:2A:1C:F5:A4:F4:3E:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/RnrlTKoMDQxK9VLVCCoc9aT0PtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:82:d0:9e:7d:e2:f7:cf:34:18:75:45:51:5e:29:8c:2d:29:
         3e:f6:72:34:f4:77:2c:e9:2c:5d:e3:09:f0:1e:2c:7a:5b:e1:
         b0:aa:e6:87:3e:dd:95:b6:49:4f:c3:d0:bf:58:6f:dc:1c:b8:
         af:4d:d6:9d:07:d5:1c:75:35:1a:e8:14:6d:fb:12:f5:37:5e:
         e3:5b:ef:24:0e:37:3d:1a:da:c3:18:7c:6d:f9:c8:e6:f7:ce:
         95:0a:93:1c:2b:8c:de:0a:12:17:3b:b5:ee:c5:ce:ca:92:db:
         59:c1:5d:45:9c:b2:de:18:34:82:93:13:d8:32:40:8e:93:ac:
         47:ad:c4:55:15:47:e2:1a:d3:9f:7a:f0:57:89:ad:5b:08:f2:
         9a:17:79:d7:f5:58:23:03:f1:35:79:34:59:11:65:9d:7f:bd:
         5a:0a:d2:cc:12:bb:77:91:c9:8f:45:ee:81:09:3e:03:44:41:
         e2:44:a0:8e:f8:57:9a:ec:85:96:71:55:ac:b2:6c:34:6d:28:
         57:00:07:f4:b3:75:1e:7c:eb:63:df:64:3b:ef:3d:1b:ba:c3:
         c0:43:e8:7e:e4:61:45:5b:d9:a4:39:86:f0:a5:76:75:e5:d5:
         89:95:89:34:c7:69:02:f8:d3:13:af:de:cd:d5:24:58:3e:9e:
         0f:bc:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----