Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
File:                     e1-2lw03S_91hy64fbtAMEN6YYg.cer (raw, json)
Hash identifier:          ybE9gQYdbJU2vannm1ZtYaB/Wa02IKp9l+s46SUDQgU=
Subject key identifier:   7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BA4B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 31 Aug 2023 05:12:14 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    IP: 45.250.60.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113227 (0x1ba4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 05:12:14 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fa:16:21:e8:61:7e:9b:4a:52:62:35:0e:c7:
                    78:0a:5b:1f:da:ed:f7:63:67:2d:14:07:d3:6e:20:
                    44:10:b0:c7:1c:73:3f:a3:96:f0:d6:53:49:e4:e2:
                    15:be:d4:ba:59:33:4a:76:91:a8:cf:71:cc:5e:bf:
                    aa:c3:e4:18:5a:e0:51:80:d6:99:c3:95:67:91:e7:
                    60:5c:17:c5:18:aa:e7:1f:4d:0f:e2:c8:71:4f:0a:
                    ed:a3:2a:d5:c0:96:49:5f:6f:4d:5e:f5:95:5f:d1:
                    f6:27:06:60:8e:9b:76:8e:46:77:65:ea:56:f6:5c:
                    87:41:9d:61:24:d4:1c:fa:3b:4c:4b:7d:d0:ff:2d:
                    71:33:e5:8b:d4:26:fd:7b:54:94:b6:36:2a:81:2c:
                    61:a0:8e:ab:2d:e5:59:10:c1:cb:7e:93:59:f4:9e:
                    6e:f5:81:d0:ee:ef:3b:aa:ab:53:31:fd:1f:14:01:
                    c9:d3:b8:bf:48:24:43:b7:1a:35:e3:02:f4:aa:27:
                    98:46:fe:11:0d:d8:11:39:7f:98:51:2b:dc:dd:e3:
                    6b:39:a8:c4:01:e0:7c:c8:e4:68:16:5f:6a:ae:44:
                    e8:7d:54:0a:b6:c8:a5:bd:57:c5:d7:ea:6f:03:05:
                    72:fb:8b:73:17:75:30:89:c9:a1:22:70:9d:1a:89:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:8e:c9:39:ad:fe:55:07:7f:f0:91:59:db:fd:ed:5c:7d:
         04:02:bd:75:67:ab:b4:57:b4:b1:5c:b6:7e:ee:f1:45:b3:04:
         a9:ff:c4:aa:3c:33:59:13:72:28:4d:f2:12:6f:8c:33:67:3f:
         f7:e1:4b:cd:47:bd:43:90:f8:27:af:9b:21:8e:1f:9d:50:e6:
         18:cc:bd:80:c9:50:23:5c:df:07:be:ac:82:21:53:94:42:7c:
         4c:fe:da:23:d6:05:5e:ef:e0:dc:d9:77:9a:70:54:3f:b3:75:
         86:e8:1c:39:b5:de:99:ae:ef:21:60:16:aa:6c:ec:a2:4a:ae:
         22:11:1e:48:78:92:75:34:4d:92:1d:f1:3c:65:56:85:8d:c6:
         ee:0b:b2:89:5f:cb:b2:70:87:f7:a7:4d:ea:04:a4:35:72:7b:
         3f:56:e6:59:e7:46:62:c2:89:a0:18:6e:d1:2c:b0:fa:04:5a:
         02:88:eb:f6:85:7e:a6:a8:49:8b:00:19:6f:64:7f:36:32:ea:
         5b:fe:25:f9:d9:cb:3c:bd:8a:e5:b4:e9:d2:be:ac:22:78:30:
         20:eb:7c:17:78:7b:1f:ec:37:ec:2b:48:72:75:8a:e7:d6:e8:
         11:64:5a:01:5b:21:18:b4:ba:07:e0:6c:1c:48:dc:ef:e2:c9:
         d6:48:4b:1b
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAbpLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgzMTA1MTIxNFoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjg5NjMxMTAvBgNVBAUTKDdCNUZCNjk3MEQzNzRCRkY3NTg3MkVC
ODdEQkI0MDMwNDM3QTYxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1+hYh6GF+m0pSYjUOx3gKWx/a7fdjZy0UB9NuIEQQsMcccz+jlvDWU0nk4hW+
1LpZM0p2kajPccxev6rD5Bha4FGA1pnDlWeR52BcF8UYqucfTQ/iyHFPCu2jKtXA
lklfb01e9ZVf0fYnBmCOm3aORndl6lb2XIdBnWEk1Bz6O0xLfdD/LXEz5YvUJv17
VJS2NiqBLGGgjqst5VkQwct+k1n0nm71gdDu7zuqq1Mx/R8UAcnTuL9IJEO3GjXj
AvSqJ5hG/hEN2BE5f5hRK9zd42s5qMQB4HzI5GgWX2quROh9VAq2yKW9V8XX6m8D
BXL7i3MXdTCJyaEicJ0aiXGdAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUe1+2lw03
S/91hy64fbtAMEN6YYgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4OTYzLzk4NkIxODY0OERGQzExRTk5MDIzMTY0OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyODk2My85ODZCMTg2NDhERkMxMUU5OTAyMzE2NDhDNEY5QUUwMi9lMS0ybHcw
M1NfOTFoeTY0ZmJ0QU1FTjZZWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAIt+jwwDQYJKoZIhvcNAQELBQADggEBAAWsjsk5rf5VB3/wkVnb
/e1cfQQCvXVnq7RXtLFctn7u8UWzBKn/xKo8M1kTcihN8hJvjDNnP/fhS81HvUOQ
+CevmyGOH51Q5hjMvYDJUCNc3we+rIIhU5RCfEz+2iPWBV7v4NzZd5pwVD+zdYbo
HDm13pmu7yFgFqps7KJKriIRHkh4knU0TZId8TxlVoWNxu4Lsolfy7Jwh/enTeoE
pDVyez9W5lnnRmLCiaAYbtEssPoEWgKI6/aFfqaoSYsAGW9kfzYy6lv+JfnZyzy9
iuW06dK+rCJ4MCDrfBd4ex/sN+wrSHJ1iufW6BFkWgFbIRi0ugfgbBxI3O/iydZI
Sxs=
-----END CERTIFICATE-----
Generated at Thu Aug 31 14:30:12 2023 by rpki-client on console-fra.rpki-client.org