Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NvbSidg96FE-QRSvgzKirzBdUk.cer
File:                     _NvbSidg96FE-QRSvgzKirzBdUk.cer (raw, json)
Hash identifier:          ReoMRmwkP7/u4ycxVKdDT2GifekHbr9eBleu+SuzkUs=
Subject key identifier:   FC:DB:DB:4A:27:60:F7:A1:44:F9:04:52:BE:0C:CA:8A:BC:C1:75:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BEA0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/_NvbSidg96FE-QRSvgzKirzBdUk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 Sep 2023 17:05:38 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 134191

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114336 (0x1bea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 20 17:05:38 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91A5534/serialNumber=FCDBDB4A2760F7A144F90452BE0CCA8ABCC17549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:8c:08:77:fb:7c:f7:f7:6c:d2:6a:18:22:
                    56:81:8b:ae:15:b6:d7:b5:19:d0:25:db:0b:f6:02:
                    c7:20:4b:7f:77:7d:12:fd:27:ac:ee:b7:4f:36:c6:
                    32:75:e9:0e:93:1c:b4:8b:70:07:fb:fb:fe:4b:8c:
                    cd:0d:08:c0:bc:71:10:d2:ea:ed:c5:bf:88:99:be:
                    c8:8b:79:fa:cc:64:fb:ed:79:c6:3b:fb:88:a2:e1:
                    07:33:55:97:10:44:49:14:91:82:63:74:81:a9:a2:
                    54:ba:21:c9:fb:4c:4b:7b:59:23:7f:e5:e4:11:45:
                    3b:b2:e6:7b:fa:ee:ee:37:48:ea:33:c9:b8:61:f2:
                    3e:2d:fe:6a:98:f0:e6:03:8a:0a:de:40:c4:ad:75:
                    d1:b0:84:58:2d:3b:80:d3:1f:6e:5e:59:73:12:23:
                    e5:2a:3a:8f:2b:8c:0e:a7:d6:02:12:bf:4d:f9:0e:
                    ec:79:cf:bd:cc:26:7d:8e:3b:e2:29:96:90:7d:4e:
                    f8:3a:7c:86:09:47:34:62:66:79:08:1a:36:da:98:
                    e0:04:c8:d9:44:0e:a2:5b:f6:63:66:6b:d2:b4:58:
                    0c:0c:4f:6a:a6:b6:03:aa:fc:b9:44:f2:6a:f4:71:
                    8c:62:c2:75:e0:02:c1:0b:1d:1e:c6:40:7d:00:61:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:DB:4A:27:60:F7:A1:44:F9:04:52:BE:0C:CA:8A:BC:C1:75:49
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/_NvbSidg96FE-QRSvgzKirzBdUk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134191

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:a7:09:2d:20:bd:04:b6:a6:ed:a5:bf:77:fd:ad:a8:ca:
         99:1e:09:53:b4:e2:dc:5c:33:00:93:8f:a2:8f:93:88:8f:f3:
         9d:cf:58:b3:8f:af:c9:25:de:3c:a0:c6:51:4b:61:9c:1b:e8:
         9e:a0:66:99:bb:89:ec:2c:36:f2:34:33:f4:fd:c0:90:f9:9e:
         dd:6a:36:23:02:57:7d:17:25:a3:41:ff:22:da:20:e3:6a:93:
         93:c9:79:03:9b:41:19:36:f2:8e:12:8e:14:d6:ca:71:85:cb:
         d6:28:e7:69:4b:83:17:6d:34:49:77:87:5d:9e:f2:df:dc:8e:
         04:e7:92:b3:6f:fe:c5:9b:15:0f:9e:c5:80:88:85:b4:06:97:
         1f:30:bb:89:70:62:63:40:61:11:e7:7a:a7:33:6d:da:13:4f:
         26:b1:8b:1c:2e:34:34:57:da:ce:1e:45:1b:59:dc:cd:b2:60:
         13:0b:09:64:fa:11:b9:55:f0:5f:d6:30:bc:61:94:91:68:25:
         42:23:dd:8c:dc:37:93:5d:1a:15:21:94:55:8b:9d:ca:b7:26:
         26:2f:dd:5e:a4:fd:b2:89:95:ae:54:61:7b:d1:d4:11:7b:dc:
         0a:0e:28:9b:af:d3:30:68:12:f9:42:d2:31:28:89:61:fe:9a:
         00:fb:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 20:39:05 2023 by rpki-client on console-fra.rpki-client.org