Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggS2HYRXI2CIuphgUCUnSi23JAM.cer
File:                     ggS2HYRXI2CIuphgUCUnSi23JAM.cer (raw, json)
Hash identifier:          QEyiZ5nOMZ04Oh/GVNMMjS1wx4Pl7wXFH1yks1fT9II=
Subject key identifier:   82:04:B6:1D:84:57:23:60:88:BA:98:60:50:25:27:4A:2D:B7:24:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E1AF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F98DF/C8BE1CACDA3811EBB8301750C4F9AE02/ggS2HYRXI2CIuphgUCUnSi23JAM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F98DF/C8BE1CACDA3811EBB8301750C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 01:14:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2400:8140::/32

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 22:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123311 (0x1e1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 01:14:01 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91F98DF/serialNumber=8204B61D8457236088BA98605025274A2DB72403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:3c:cb:9e:79:e4:1d:cc:c3:08:a9:dd:1b:
                    96:f6:d7:8a:af:c1:c6:e9:9f:d4:78:50:fc:40:64:
                    64:ea:ac:92:b8:d8:9c:31:88:70:a3:21:9d:0e:ac:
                    fd:8c:59:0a:3f:47:9b:2d:86:cb:d7:a2:0b:ba:21:
                    1e:ec:0c:37:d1:06:fb:c9:cb:60:c2:98:ed:58:14:
                    5b:0c:4c:c2:b9:9a:95:db:a4:dd:ac:2d:b0:13:77:
                    b2:d2:5a:d8:b5:de:0b:23:e1:c5:21:31:a7:b9:4b:
                    a8:90:17:ba:27:e2:a6:07:55:9e:bb:10:62:01:20:
                    c6:bc:b8:64:39:b3:d1:12:46:57:af:16:2b:a3:ce:
                    2d:25:17:8f:e0:39:6e:3e:d7:01:f7:ed:30:6f:06:
                    e8:88:8a:8b:e7:8e:8c:4b:e4:39:b4:0d:be:75:e7:
                    60:9d:ce:be:38:55:ed:bb:17:b2:86:34:88:0c:cc:
                    a5:e7:bc:a9:c2:1d:fa:d8:c5:f9:d8:64:e4:9e:9d:
                    8f:e0:40:f6:42:9e:b6:ec:2c:92:a3:b3:e2:95:2d:
                    a3:5a:77:ac:83:52:2e:27:4e:75:f7:ce:94:58:31:
                    c9:4c:0e:fd:57:ff:a6:82:4a:a7:62:90:1a:fd:49:
                    13:6d:a2:df:b0:4a:37:61:0f:3b:b1:2d:4c:fe:e5:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:B6:1D:84:57:23:60:88:BA:98:60:50:25:27:4A:2D:B7:24:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F98DF/C8BE1CACDA3811EBB8301750C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F98DF/C8BE1CACDA3811EBB8301750C4F9AE02/ggS2HYRXI2CIuphgUCUnSi23JAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:e7:54:d4:a7:18:fb:57:47:6e:84:7a:04:c1:4d:03:99:
         85:fb:30:bc:f8:35:40:35:a2:9b:d7:7a:66:13:c8:4d:4f:fe:
         ee:2c:c3:3f:6c:99:5b:68:b7:76:b8:39:b4:f7:3a:bd:d2:33:
         ce:07:f6:c9:6f:c7:a4:b0:1c:a1:16:e8:b1:81:0f:cb:89:65:
         b2:7b:02:83:55:1f:fc:48:30:fd:53:a1:e3:b3:6a:5a:a6:e0:
         15:a6:98:9f:26:1f:69:9b:0f:57:04:a4:33:12:f4:92:ab:b3:
         2b:19:6a:90:7c:dc:bf:88:50:51:88:63:52:fc:47:af:25:e2:
         2a:57:55:67:c3:df:07:b8:eb:04:27:33:43:cf:23:9f:5f:6f:
         26:a6:65:3b:dd:9c:a8:f3:f8:7b:f5:a9:44:bc:12:ba:0f:cf:
         1e:0d:ea:8a:d1:d7:1c:3b:92:46:3d:08:d5:d7:dc:55:5b:3c:
         2c:d1:8c:19:d8:ec:50:7f:4e:2f:38:49:b1:5f:78:3a:7f:31:
         14:21:39:c0:2e:01:ed:e5:52:3a:91:98:dd:ed:e8:3f:c0:e0:
         08:8e:01:35:fa:c9:ec:01:df:18:b6:d9:ce:2d:ce:e2:75:e4:
         56:4b:4c:ef:1a:92:ce:0e:b0:ec:7e:19:6b:65:c0:03:c3:3e:
         92:e0:6f:14
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAeGvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwMTAxMTQwMVoXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjk4REYxMTAvBgNVBAUTKDgyMDRCNjFEODQ1NzIzNjA4OEJBOTg2
MDUwMjUyNzRBMkRCNzI0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOLDzLnnnkHczDCKndG5b214qvwcbpn9R4UPxAZGTqrJK42JwxiHCjIZ0OrP2M
WQo/R5sthsvXogu6IR7sDDfRBvvJy2DCmO1YFFsMTMK5mpXbpN2sLbATd7LSWti1
3gsj4cUhMae5S6iQF7on4qYHVZ67EGIBIMa8uGQ5s9ESRlevFiujzi0lF4/gOW4+
1wH37TBvBuiIiovnjoxL5Dm0Db5152Cdzr44Ve27F7KGNIgMzKXnvKnCHfrYxfnY
ZOSenY/gQPZCnrbsLJKjs+KVLaNad6yDUi4nTnX3zpRYMclMDv1X/6aCSqdikBr9
SRNtot+wSjdhDzuxLUz+5X+TAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUggS2HYRX
I2CIuphgUCUnSi23JAMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY5OERGL0M4QkUxQ0FDREEzODExRUJCODMwMTc1MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOThERi9DOEJFMUNBQ0RBMzgxMUVCQjgzMDE3NTBDNEY5QUUwMi9nZ1MySFlS
WEkyQ0l1cGhnVUNVblNpMjNKQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAIFAMA0GCSqGSIb3DQEBCwUAA4IBAQButudU1KcY+1dHboR6
BMFNA5mF+zC8+DVANaKb13pmE8hNT/7uLMM/bJlbaLd2uDm09zq90jPOB/bJb8ek
sByhFuixgQ/LiWWyewKDVR/8SDD9U6Hjs2papuAVppifJh9pmw9XBKQzEvSSq7Mr
GWqQfNy/iFBRiGNS/EevJeIqV1Vnw98HuOsEJzNDzyOfX28mpmU73Zyo8/h79alE
vBK6D88eDeqK0dccO5JGPQjV19xVWzws0YwZ2OxQf04vOEmxX3g6fzEUITnALgHt
5VI6kZjd7eg/wOAIjgE1+snsAd8YttnOLc7ideRWS0zvGpLODrDsfhlrZcADwz6S
4G8U
-----END CERTIFICATE-----