Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer
File:                     g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer (raw, json)
Hash identifier:          hH2+aMFEV6XJW8XT2hE0Fw01Zeu1L/A+d3v0RLAqYog=
Subject key identifier:   83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A5DE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 29 May 2023 14:18:28 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 142033
                          IP: 103.216.52.0/22
                          IP: 157.119.176.0/22

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 13:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107998 (0x1a5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 29 14:18:28 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9134AAF/serialNumber=83B5A4DDC1C4E2F499B662C81D343F1A511B8826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:88:f1:16:d2:f6:c1:88:c5:e1:cf:59:01:
                    49:5e:56:60:49:2e:fb:d8:5a:9a:f6:de:c4:35:12:
                    f5:ff:af:f3:14:8a:f1:89:b2:15:7a:e3:b9:9c:26:
                    3e:f6:c2:55:eb:83:ec:34:39:3a:15:46:96:88:a8:
                    a0:c9:b3:00:f2:b3:25:14:57:4a:d1:7a:7f:f3:c1:
                    9a:23:04:74:31:7d:86:b6:9c:21:1e:47:8c:d5:a5:
                    2f:15:8b:c1:26:31:fd:7a:3f:60:8f:92:cf:fa:66:
                    0d:17:5f:22:79:74:17:0b:41:ee:77:70:64:b3:5f:
                    9f:fa:fd:f6:c5:f1:c6:07:b8:a0:e8:dd:5a:d1:05:
                    b4:2b:c2:0a:9e:ba:84:5e:5e:8d:cb:45:ef:79:97:
                    2b:7d:ef:50:5d:68:e3:d7:f0:0f:25:f4:fb:4f:04:
                    f3:3a:47:a1:92:01:cf:da:d8:28:a2:e2:d8:66:07:
                    38:e5:90:f8:b8:71:da:74:ff:5f:1b:1e:06:a0:0f:
                    ae:8e:29:15:00:c3:5d:ea:28:f3:7b:9b:22:dd:64:
                    0f:64:d6:d6:97:df:55:be:31:3f:60:fc:bf:a6:57:
                    ea:1f:04:95:4c:53:a2:7d:4f:06:a8:92:3f:50:3f:
                    a4:51:71:b8:fd:7f:3f:c3:d0:ad:c7:30:f7:6d:3f:
                    d0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142033

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.52.0/22
                  157.119.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:dc:56:4a:f4:df:9e:4b:3d:c0:33:1f:6d:a6:7c:5c:90:
         67:92:69:ac:c3:d6:ce:69:f6:3e:df:9d:fa:dc:fc:55:21:27:
         4f:5a:84:2a:08:56:e4:8c:cd:71:c6:1c:5d:e1:6e:93:4b:11:
         57:d4:30:2a:60:9b:fd:4e:a4:54:50:bc:11:83:48:c9:55:58:
         aa:f3:cd:ed:44:b4:21:f0:69:8b:a9:e0:77:02:43:40:91:22:
         ad:fb:b2:f6:ae:0d:88:3f:f7:9d:ab:69:71:68:34:17:76:1e:
         fa:4c:49:59:bf:d6:59:fb:9f:3e:4f:b4:cc:f7:98:8e:b5:4a:
         a8:02:c2:9c:76:0d:b6:bd:48:9e:27:97:ef:49:6b:84:e3:34:
         3f:c6:ef:59:b8:db:db:25:c6:36:75:8b:97:6f:f2:c4:c8:30:
         27:8c:6d:79:62:ee:e6:12:1f:bd:7a:80:1f:a8:ad:5c:5a:90:
         18:33:09:bf:26:28:69:e2:91:b3:48:3b:cf:15:c6:fd:95:dc:
         7a:52:9d:bc:e3:f6:f0:5b:7e:d4:4d:a1:cb:74:98:07:0e:7a:
         ce:36:c9:12:ae:04:94:be:3f:35:3c:42:7e:29:de:a5:6b:9f:
         0f:2c:53:ab:50:b5:f8:eb:1e:d5:41:c7:8d:55:68:a9:d0:d5:
         65:e7:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:54 2024 by rpki-client on console-fra.rpki-client.org