Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e4l2lDgAdZTXovl1Ap4mnz359Gw.cer
File:                     e4l2lDgAdZTXovl1Ap4mnz359Gw.cer (raw, json)
Hash identifier:          ZcK+N67pZ3L/kAglKQAskdbJcIQJUmwyWTmnHarlWGI=
Subject key identifier:   7B:89:76:94:38:00:75:94:D7:A2:F9:75:02:9E:26:9F:3D:F9:F4:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B5D9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BE2CE/E2C4EAEC365F11EE9EA35B2FC4F9AE02/e4l2lDgAdZTXovl1Ap4mnz359Gw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BE2CE/E2C4EAEC365F11EE9EA35B2FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 09 Aug 2023 02:53:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 58962
                          IP: 103.27.208.0/22

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 20:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112089 (0x1b5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  9 02:53:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91BE2CE/serialNumber=7B89769438007594D7A2F975029E269F3DF9F46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:ab:f4:9a:aa:07:6d:d5:00:9d:7f:db:38:
                    ca:48:a6:80:7e:7a:d1:db:13:26:74:ad:cc:19:2e:
                    f2:f1:d1:cf:6b:11:ef:a7:af:bd:64:59:19:f6:24:
                    4e:8d:43:d2:b2:c0:d5:4b:94:cf:ba:73:bd:34:27:
                    5e:85:ee:7b:0c:20:34:db:73:ec:2c:0f:8f:72:f6:
                    bd:b5:71:82:84:e7:f3:26:98:f8:7d:93:e5:59:0c:
                    50:3f:07:b4:da:26:ec:de:da:ad:eb:27:b0:45:4d:
                    09:ab:75:79:98:13:1a:ca:8b:1f:11:57:01:51:3e:
                    79:a5:61:73:08:b3:5a:26:a2:4b:46:ac:a0:64:0b:
                    20:37:99:7c:7b:08:cd:11:e2:5f:c6:d6:1f:29:ae:
                    21:14:04:ec:7d:94:d3:64:a0:3d:71:15:e1:1a:a4:
                    dc:ba:23:9b:4d:8d:14:13:83:45:3a:39:61:53:9d:
                    6a:bf:07:7c:be:6b:48:19:19:7a:ba:48:3d:11:f6:
                    b6:16:48:56:09:96:5b:55:cc:2e:31:2f:aa:82:63:
                    9e:c7:4e:45:cc:d9:a3:b4:a8:f0:42:69:0c:a1:c9:
                    90:1d:94:79:ff:90:6c:ae:9c:af:74:53:82:60:d5:
                    f9:f8:0c:80:26:b1:fd:68:d7:aa:07:0b:b6:0f:eb:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:76:94:38:00:75:94:D7:A2:F9:75:02:9E:26:9F:3D:F9:F4:6C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE2CE/E2C4EAEC365F11EE9EA35B2FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE2CE/E2C4EAEC365F11EE9EA35B2FC4F9AE02/e4l2lDgAdZTXovl1Ap4mnz359Gw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58962

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:62:ff:ad:c5:87:2d:2a:f9:ca:3d:57:4c:b7:b2:7e:74:cd:
         6c:18:d6:44:8d:2f:c8:6f:16:b0:a4:b9:8c:bb:a3:86:07:65:
         af:75:a5:76:32:24:d8:7f:56:6d:62:e6:e7:7d:59:c6:c1:6d:
         83:8a:08:97:fb:a7:b6:45:15:c5:00:2a:33:af:6f:34:e4:d1:
         5e:26:ef:68:ce:7d:ab:c9:94:00:78:ac:d5:39:90:93:4a:a8:
         fd:fe:ac:57:df:98:3d:de:8a:95:f5:d7:81:e6:87:b9:9a:db:
         ef:8d:8e:ef:21:2a:f4:1f:78:56:01:7d:9b:dd:a8:39:78:e0:
         94:d7:cc:1d:3c:07:e3:b7:a3:42:61:f3:3a:17:8c:c8:b0:c1:
         4e:da:be:ee:9b:90:bd:6f:18:86:7b:e5:0c:98:4a:bb:96:cf:
         0b:61:7b:6d:48:d0:3f:a3:87:34:49:3b:e6:ef:e3:c3:5f:d5:
         3d:c8:ea:8f:43:b4:3e:7e:b6:53:ca:ac:d2:da:02:f5:fb:71:
         b8:87:73:d0:66:c2:5f:47:78:f5:16:52:d5:d3:36:31:5d:db:
         81:65:ec:2a:1c:7e:20:20:f2:02:97:ce:22:d9:6f:83:40:64:
         25:a9:52:aa:97:97:84:38:37:1f:c6:da:23:75:f5:e5:e7:20:
         14:ac:53:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:36:57 2024 by rpki-client on console-fra.rpki-client.org