Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer
File:                     T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer (raw, json)
Hash identifier:          aScHsn/Rwp7teBPaxih6mOMLNm2EQGnSu3EB7GMj3GM=
Subject key identifier:   4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FF13
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 01:05:10 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137275
                          IP: 103.106.146.0/23

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 20:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130835 (0x1ff13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 10 01:05:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91C0443/serialNumber=4F437E171E59F781432C4EC2FAFE49BE7F157ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:d9:e5:e8:76:d6:f2:bf:e6:fb:0d:0b:d1:
                    a2:6b:46:72:50:6c:29:cb:c6:94:1f:58:c3:f6:4e:
                    af:e3:b9:1e:5c:c8:7d:50:6d:35:d0:6d:86:56:01:
                    eb:ec:69:9e:0d:d4:6a:b0:09:36:df:78:02:1e:7a:
                    f5:5c:94:61:61:ab:ca:6c:71:f9:01:5b:bb:a7:24:
                    a4:c3:1d:97:65:ac:52:b9:d1:5c:37:81:77:a1:fa:
                    de:ea:1f:58:2f:d7:88:8c:35:c9:4e:e9:00:07:b3:
                    75:44:1a:ec:0f:2f:d2:8d:d5:ec:e0:de:53:61:27:
                    98:ab:81:59:24:83:e8:05:52:5c:c9:b9:f5:9a:91:
                    71:cf:7b:bd:f1:99:2e:fb:1d:9a:50:f1:d0:f1:ef:
                    cf:34:d2:d5:cf:c7:ce:71:3d:ff:bf:59:bc:e9:aa:
                    51:d5:82:6b:53:78:bd:2e:08:b3:8b:93:6f:f1:b0:
                    2c:72:25:78:53:ff:6e:8e:5c:ad:69:74:57:cb:08:
                    aa:fd:fe:99:ca:94:02:81:9e:1f:a5:a2:5f:20:60:
                    c9:f4:34:ad:2e:5b:4e:de:d1:71:83:93:2d:5f:e6:
                    c6:6f:95:86:ad:ed:aa:ed:bc:e3:f9:1e:a2:61:0d:
                    e1:57:6f:db:f4:e6:72:e6:e1:fa:9e:87:c5:6f:56:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137275

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:4a:75:4f:cc:ba:0f:6a:03:e3:44:7e:98:58:07:de:92:
         07:0a:2a:84:74:99:ac:87:0b:2a:c5:a5:7d:92:a5:37:f9:03:
         aa:b0:11:48:1e:0a:b6:e1:ce:0c:99:5a:dc:7c:1c:92:a3:ed:
         a9:10:05:3f:d7:67:1a:5d:e7:14:06:21:ad:4d:71:c8:2a:79:
         82:7e:4e:79:0d:7b:25:6e:cf:17:84:a7:92:81:dc:87:b8:96:
         d9:75:4e:0a:01:89:92:f1:0d:db:8f:59:2d:a5:76:0f:05:3e:
         b5:ed:7f:82:06:7a:c6:e2:46:2f:62:56:55:1a:0f:8a:2f:40:
         ab:d2:b7:7a:ec:52:b4:ef:3e:53:63:41:72:3e:dc:53:1a:06:
         8e:82:c6:20:90:5e:28:31:79:52:13:60:91:c8:15:f8:ec:7b:
         0e:90:3b:38:7b:53:fa:1f:a8:6d:49:41:b9:f1:33:45:45:8e:
         bf:7c:2f:6b:1a:3d:08:e7:dc:d8:70:42:8d:80:bf:8d:a8:e7:
         4c:9d:0a:3d:5f:4a:66:e1:e4:31:06:5a:c4:c6:7f:86:e7:e4:
         22:9a:93:60:61:72:67:63:22:8e:45:49:77:a7:f7:17:85:14:
         9d:e3:ce:bc:09:a4:89:aa:af:03:0d:2c:99:28:97:2d:39:bc:
         20:4b:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:10:05 2024 by rpki-client on console-fra.rpki-client.org