Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
File:                     _dy2n-m3Qz06SPvucuZZSAUV3Rk.cer (raw, json)
Hash identifier:          pnYlrd/3NjMgkI2RHiABD8f9yLmYfziZf+cgyGyVnE4=
Subject key identifier:   FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018B39
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 11 Feb 2023 15:04:27 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 137451
                          IP: 43.229.152.0/22
                          IP: 103.48.168.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101177 (0x18b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 11 15:04:27 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:15:dd:13:6e:d9:c8:6c:a3:08:4c:24:88:
                    1c:4d:56:56:02:c0:d1:5e:9b:bf:6c:9d:cb:b4:80:
                    82:c9:46:2e:3d:e2:ea:b7:6d:5b:23:0e:c7:88:92:
                    b9:be:60:cf:5a:d5:ef:20:f7:84:8c:92:ba:99:47:
                    bf:4e:fa:bb:3b:d9:aa:66:ad:33:bc:4b:5e:33:81:
                    76:88:4c:5f:52:a5:21:ca:1f:8d:d1:28:aa:f7:06:
                    e0:74:8e:86:85:4f:e1:6a:e0:b9:91:f5:c7:0a:33:
                    15:4e:cb:ab:6b:5c:a8:24:98:9c:e4:0b:76:af:6d:
                    98:6c:68:58:9b:49:dd:f2:86:58:ce:96:2d:c3:c3:
                    00:f5:cc:9e:2a:9d:e0:36:39:6b:2e:47:7b:35:75:
                    bb:da:94:55:33:f0:3c:a1:d1:5d:92:8b:55:21:ea:
                    39:e1:af:3b:e2:17:08:3f:34:8e:b0:28:05:be:87:
                    f7:ec:e9:74:1a:b7:a1:6e:57:a2:b7:ef:cb:97:70:
                    53:22:d6:a0:6d:86:77:29:1f:e6:bf:01:64:ef:45:
                    d3:26:89:95:95:5c:7e:c5:e4:a4:7b:2f:0e:f7:d0:
                    6c:d6:63:dc:fc:8c:14:7d:1b:86:8b:bd:75:3d:7b:
                    bc:5a:ef:e1:1f:f2:44:48:53:2a:ea:ed:85:f7:03:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137451

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.152.0/22
                  103.48.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:73:e9:cc:d3:4c:48:05:78:90:9d:e6:84:80:97:fb:5c:23:
         04:3b:79:69:05:23:03:01:8c:56:3e:14:ea:12:44:42:12:bf:
         53:2e:98:f1:e6:1b:a6:da:75:10:01:1e:1f:75:59:06:5e:a7:
         02:40:30:44:f5:20:41:72:a6:34:bf:70:34:cc:2b:7e:c5:a6:
         ba:7f:63:d5:9f:74:f1:23:bb:4b:66:ef:1d:ad:e2:4b:92:e9:
         df:13:3e:bf:43:c9:fb:1f:f3:f0:67:d7:7f:9d:da:96:9a:3e:
         8a:05:bc:6e:5c:c7:de:38:06:80:47:19:ed:54:c2:cf:d8:ff:
         18:8e:65:5e:d4:87:96:21:cf:ab:48:20:4a:a8:62:2d:86:89:
         d6:d7:1e:9a:d7:f2:2a:d0:bd:e2:cc:17:01:46:ba:78:b4:d6:
         79:c3:9a:df:6b:ca:18:83:cb:85:3d:94:db:57:57:6b:55:17:
         07:f9:ce:3c:68:1e:fd:fe:aa:17:d2:c9:fe:55:ad:b9:ae:d3:
         6a:37:41:9d:f3:b3:48:81:65:53:ea:93:7f:b7:58:f3:ae:f1:
         9f:69:c3:7b:32:0a:7a:de:08:eb:b7:fd:82:87:be:4b:18:65:
         57:a5:80:72:14:70:30:a3:9e:f7:22:7c:c4:d4:e4:48:68:5b:
         cf:99:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org