Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkOcbhO3EI4ApuUbi74WKVOg6is.cer
File:                     bkOcbhO3EI4ApuUbi74WKVOg6is.cer (raw, json)
Hash identifier:          XR9WbMgFClkjHJZ2qHek8S30fyVuFsYy9lvkxfpxnks=
Subject key identifier:   6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020A1E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Aug 2024 17:24:54 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 136768
                          IP: 2401:5d40::/32

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 14:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133662 (0x20a1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 17:24:54 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91659DB/serialNumber=6E439C6E13B7108E00A6E51B8BBE162953A0EA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:cd:ef:02:12:d0:9e:89:75:99:3a:6a:75:
                    d8:6f:74:f9:83:4a:c1:82:3b:98:78:85:b7:98:ad:
                    b5:60:9f:6e:c1:6a:ea:c0:37:fc:2e:fc:33:32:21:
                    0a:a8:66:5c:d3:ce:50:03:1d:64:63:41:fc:6d:56:
                    46:4a:69:a8:55:9d:05:3b:7c:b6:09:43:4a:32:cc:
                    76:07:05:7a:de:d4:b4:3d:59:9b:3a:07:b5:36:f1:
                    ef:73:63:e8:2c:40:5e:81:5f:ab:2f:17:d1:69:e7:
                    94:a0:41:79:35:8c:f3:2c:81:3c:69:da:4e:e3:c4:
                    1a:e8:73:4f:8c:d7:0f:ec:76:45:36:ba:ec:5c:8b:
                    a2:33:82:b8:0e:1e:53:e5:c1:2e:92:f3:57:65:1b:
                    6a:cb:27:bd:0d:72:79:68:47:fe:ec:99:cb:75:3e:
                    50:b4:e8:dc:ad:b9:ad:e7:f8:1d:fe:04:c3:f7:21:
                    34:7a:0b:c6:78:95:04:35:13:bb:30:21:21:25:ad:
                    aa:5e:42:5b:8c:9c:5b:16:59:0d:bb:69:6b:3f:9e:
                    62:65:06:8d:53:62:e5:bd:2f:62:22:af:eb:c7:bb:
                    29:ec:6b:17:49:70:21:78:13:a5:11:b6:6b:06:da:
                    27:ea:ad:4d:60:c9:ab:24:78:03:6a:fb:e0:d5:14:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:9C:6E:13:B7:10:8E:00:A6:E5:1B:8B:BE:16:29:53:A0:EA:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91659DB/235F9444C7B511E987F3F62CC4F9AE02/bkOcbhO3EI4ApuUbi74WKVOg6is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136768

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:47:b5:c8:bb:9f:fd:60:02:b8:4a:81:9c:e2:c0:c2:5b:
         9a:bf:c4:76:fa:28:6c:7f:f5:5a:1d:d9:19:6a:30:5a:7f:27:
         72:e6:b9:a9:23:82:d4:3c:46:22:c7:a5:54:fa:4a:47:56:0f:
         24:87:b5:85:5a:5b:0e:7a:70:03:4a:91:1b:ca:b8:56:1f:6f:
         12:c2:4c:2e:7b:f2:4b:88:4d:1c:4c:46:69:0e:ba:32:4a:14:
         17:d8:99:da:2c:5f:fd:3b:6e:74:45:e3:f1:e8:83:b8:b9:dd:
         a8:e9:90:a4:c9:28:ca:05:ea:f7:e7:51:c3:08:4e:56:cf:89:
         db:a6:e2:e0:be:e6:3b:a6:74:47:ab:cc:5d:70:e6:6e:33:00:
         18:20:30:2f:40:07:41:77:5a:9b:d0:b1:27:68:56:ab:58:00:
         2e:d0:41:82:8d:bf:47:fc:26:26:a9:3e:66:c2:0c:b7:6c:1d:
         2a:fe:c6:de:2a:a9:75:8e:73:62:92:7b:36:b9:2c:51:13:8b:
         14:32:a6:e7:4c:74:ce:39:27:3f:cb:c9:95:22:18:0d:8b:95:
         88:95:bc:d8:f1:a9:26:d2:52:c5:f9:7c:2b:c5:7b:ff:df:f9:
         a4:b1:77:e8:9a:54:4f:8f:52:e6:3b:76:49:04:b9:de:1e:39:
         df:cf:32:04
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAgoeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgzMDE3MjQ1NFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjU5REIxMTAvBgNVBAUTKDZFNDM5QzZFMTNCNzEwOEUwMEE2RTUx
QjhCQkUxNjI5NTNBMEVBMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu+c3vAhLQnol1mTpqddhvdPmDSsGCO5h4hbeYrbVgn27BaurAN/wu/DMyIQqo
ZlzTzlADHWRjQfxtVkZKaahVnQU7fLYJQ0oyzHYHBXre1LQ9WZs6B7U28e9zY+gs
QF6BX6svF9Fp55SgQXk1jPMsgTxp2k7jxBroc0+M1w/sdkU2uuxci6IzgrgOHlPl
wS6S81dlG2rLJ70NcnloR/7smct1PlC06Nytua3n+B3+BMP3ITR6C8Z4lQQ1E7sw
ISElrapeQluMnFsWWQ27aWs/nmJlBo1TYuW9L2Iir+vHuynsaxdJcCF4E6URtmsG
2ifqrU1gyaskeANq++DVFLA1AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUbkOcbhO3
EI4ApuUbi74WKVOg6iswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1OURCLzIzNUY5NDQ0QzdCNTExRTk4N0YzRjYyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NTlEQi8yMzVGOTQ0NEM3QjUxMUU5ODdGM0Y2MkNDNEY5QUUwMi9ia09jYmhP
M0VJNEFwdVViaTc0V0tWT2c2aXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhZAMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAFdQDANBgkq
hkiG9w0BAQsFAAOCAQEAoFZHtci7n/1gArhKgZziwMJbmr/EdvoobH/1Wh3ZGWow
Wn8ncua5qSOC1DxGIselVPpKR1YPJIe1hVpbDnpwA0qRG8q4Vh9vEsJMLnvyS4hN
HExGaQ66MkoUF9iZ2ixf/TtudEXj8eiDuLndqOmQpMkoygXq9+dRwwhOVs+J26bi
4L7mO6Z0R6vMXXDmbjMAGCAwL0AHQXdam9CxJ2hWq1gALtBBgo2/R/wmJqk+ZsIM
t2wdKv7G3iqpdY5zYpJ7NrksUROLFDKm50x0zjknP8vJlSIYDYuViJW82PGpJtJS
xfl8K8V7/9/5pLF36JpUT49S5jt2SQS53h45388yBA==
-----END CERTIFICATE-----
Generated at Thu Oct 17 19:48:47 2024 by rpki-client on console-ams.rpki-client.org