Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer
File:                     Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer (raw, json)
Hash identifier:          q2OQGSA2DlBFiCyIG6C1KM7v/f+NwT7MJr973m1m+qM=
Subject key identifier:   62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F641
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Jun 2024 04:07:32 +0000
Certificate not after:    Tue 01 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 151081
                          IP: 103.230.82.0/24
                          IP: 2001:df2:31c0::/48

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 23:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128577 (0x1f641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 04:07:32 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:0b:ec:e4:2b:68:b8:1a:36:3d:62:69:83:
                    1f:bc:56:95:69:19:f9:af:f4:f6:d7:32:d0:eb:2e:
                    d8:a2:5d:c1:ec:58:c4:7d:08:15:d5:ec:d2:71:8d:
                    7b:29:7d:6a:59:8c:9d:b0:ed:6a:4d:1a:be:55:aa:
                    52:a1:99:d5:6a:02:38:b0:6f:6a:d7:a0:6c:50:0f:
                    05:ee:1c:34:4c:bc:9d:b2:8f:23:32:c2:c2:4e:00:
                    57:3f:3f:ea:65:99:21:01:ad:a2:d1:20:9a:17:a3:
                    db:df:ff:d1:9f:01:49:fd:53:a2:b5:2b:f6:9d:05:
                    65:9e:a1:79:24:b0:56:c6:26:58:67:a3:12:c6:f6:
                    10:50:5c:4c:a2:92:06:d6:82:ca:7c:94:b8:f8:63:
                    b8:6a:55:98:80:55:47:92:98:b2:09:60:69:3b:43:
                    e7:79:9b:4c:d5:49:e8:6c:32:34:6d:d4:d8:96:58:
                    5b:0b:a3:39:29:0c:ba:1c:a6:fd:5f:a1:a7:e0:d3:
                    67:d5:c0:a9:dc:36:8b:ae:00:5e:2f:67:7c:45:56:
                    cc:57:90:d7:c1:2f:a8:8e:de:f4:81:36:42:ea:d8:
                    22:8d:3b:ee:fb:ac:6e:9e:48:24:60:28:b5:d8:74:
                    b0:11:e0:8e:52:38:81:e9:6f:86:57:03:02:67:98:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151081

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.82.0/24
                IPv6:
                  2001:df2:31c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:94:d7:6f:43:7e:ee:78:8f:97:e4:ff:ae:83:7d:87:67:97:
         33:fc:20:b7:1b:bf:5f:23:93:81:10:e3:09:ff:1f:72:b4:0d:
         94:8f:01:84:49:48:49:b4:dc:59:aa:ca:68:4a:2d:8e:f4:1a:
         3d:16:70:81:c8:34:ba:a3:db:7e:8d:e0:14:6f:20:5a:aa:03:
         23:20:6c:64:f7:98:cc:69:23:32:b4:6f:b9:f5:7e:b6:13:c7:
         df:71:4c:db:31:1d:3a:2d:d4:bc:1c:fe:6f:06:fa:4f:68:3b:
         44:73:22:61:a3:f7:75:ea:2c:58:03:d3:7a:ca:ff:86:c6:c0:
         56:fd:bc:cd:1f:cb:4b:70:b7:90:a5:90:7b:9f:95:35:99:5f:
         ca:d2:8a:a2:e5:81:b0:20:fb:75:5a:4f:76:97:e7:28:91:f7:
         ec:bf:58:a5:96:42:cf:27:b3:03:f3:74:3c:9b:1e:7f:1c:fe:
         46:39:32:61:6d:75:a8:1c:d9:82:0a:4e:ca:bc:a4:f0:98:7e:
         df:c3:01:03:fb:b6:48:6e:f4:26:5a:6d:81:5d:c4:ca:a6:60:
         15:15:b2:51:e3:a5:5b:5a:74:ff:99:fc:3a:05:e5:47:2a:46:
         ea:e4:35:9d:e3:2a:8e:10:09:e6:32:d5:20:95:43:c8:81:b6:
         dc:15:db:93
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAfZBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYwMjA0MDczMloXDTI0MTAwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjQ2MTAxMTAvBgNVBAUTKDYyNUFBQUY3MzE5OUE3M0FCOUFCODI3
RkQ1QzEwRDI0OTJFNEUyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4rAvs5CtouBo2PWJpgx+8VpVpGfmv9PbXMtDrLtiiXcHsWMR9CBXV7NJxjXsp
fWpZjJ2w7WpNGr5VqlKhmdVqAjiwb2rXoGxQDwXuHDRMvJ2yjyMywsJOAFc/P+pl
mSEBraLRIJoXo9vf/9GfAUn9U6K1K/adBWWeoXkksFbGJlhnoxLG9hBQXEyikgbW
gsp8lLj4Y7hqVZiAVUeSmLIJYGk7Q+d5m0zVSehsMjRt1NiWWFsLozkpDLocpv1f
oafg02fVwKncNouuAF4vZ3xFVsxXkNfBL6iO3vSBNkLq2CKNO+77rG6eSCRgKLXY
dLAR4I5SOIHpb4ZXAwJnmOYbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUYlqq9zGZ
pzq5q4J/1cENJJLk4mUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY0NjEwLzkwRTc2MjQ4Q0VBNjExRURBNUYwOTE0MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNDYxMC85MEU3NjI0OENFQTYxMUVEQTVGMDkxNDJDNEY5QUUwMi9ZbHFxOXpH
WnB6cTVxNEpfMWNFTkpKTGs0bVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk4pMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ+ZSMA8EAgAC
MAkDBwAgAQ3yMcAwDQYJKoZIhvcNAQELBQADggEBABmU129Dfu54j5fk/66DfYdn
lzP8ILcbv18jk4EQ4wn/H3K0DZSPAYRJSEm03FmqymhKLY70Gj0WcIHINLqj236N
4BRvIFqqAyMgbGT3mMxpIzK0b7n1frYTx99xTNsxHTot1Lwc/m8G+k9oO0RzImGj
93XqLFgD03rK/4bGwFb9vM0fy0twt5ClkHuflTWZX8rSiqLlgbAg+3VaT3aX5yiR
9+y/WKWWQs8nswPzdDybHn8c/kY5MmFtdagc2YIKTsq8pPCYft/DAQP7tkhu9CZa
bYFdxMqmYBUVslHjpVtadP+Z/DoF5UcqRurkNZ3jKo4QCeYy1SCVQ8iBttwV25M=
-----END CERTIFICATE-----
Generated at Tue Jun 18 02:28:03 2024 by rpki-client on console-ams.rpki-client.org