Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iw2zCXST33DLraAwru5RCu092O8.cer
File:                     iw2zCXST33DLraAwru5RCu092O8.cer (raw, json)
Hash identifier:          EfOU+OTU+jr3D1aEQdl/nk42oynELAJguEtqutyzhWo=
Subject key identifier:   8B:0D:B3:09:74:93:DF:70:CB:AD:A0:30:AE:EE:51:0A:ED:3D:D8:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FF15
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 01:06:22 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137275
                          IP: 103.106.146.0/23

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 20:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130837 (0x1ff15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 10 01:06:22 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91C0443/serialNumber=8B0DB3097493DF70CBADA030AEEE510AED3DD8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:46:76:1c:92:d0:58:19:1f:81:49:e0:6a:
                    56:b6:5a:24:5e:c1:38:c1:b5:24:71:d9:02:85:91:
                    dd:4c:fa:c0:20:cb:ae:83:3a:f6:2a:2d:eb:07:e9:
                    c0:46:b9:f6:2e:6a:b3:b1:ce:48:79:4c:9c:c4:7b:
                    f9:56:94:e6:af:2a:42:a8:db:24:dc:76:03:ef:a0:
                    2f:c9:88:d6:20:e5:e1:70:6e:9d:f6:5e:24:a3:20:
                    ac:5c:ad:08:5f:16:4d:7b:bb:6b:4a:a0:84:1a:38:
                    92:58:e9:c9:2e:42:5d:9c:ec:45:ad:56:22:fa:31:
                    89:77:81:d7:08:ec:55:05:d5:71:54:57:25:c6:02:
                    20:d9:97:90:49:bf:9a:2b:e9:be:c2:27:25:6a:e0:
                    cc:74:8f:7e:e0:f9:1f:72:04:f6:f0:d8:89:70:33:
                    50:19:20:03:ce:7e:51:86:6d:57:19:5a:f8:70:59:
                    75:05:26:db:0f:96:47:b5:ef:dc:05:87:ce:4c:fa:
                    2b:6a:3b:91:cf:2a:f8:f7:e1:3c:1c:d9:47:7b:93:
                    2f:38:a2:fb:68:fd:f8:29:bf:a2:bb:b8:58:22:54:
                    97:0a:c3:db:2c:40:3a:35:27:6f:60:2c:f0:d1:a5:
                    02:be:0a:12:0d:8f:bf:55:7e:e4:5a:68:d1:84:f2:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0D:B3:09:74:93:DF:70:CB:AD:A0:30:AE:EE:51:0A:ED:3D:D8:EF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/iw2zCXST33DLraAwru5RCu092O8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137275

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:bf:22:80:96:11:96:f3:e2:f1:f4:78:f8:9b:fa:33:c7:
         08:7d:24:3a:fe:a4:f4:66:08:ff:01:cd:8f:4f:62:90:5c:a1:
         b4:d6:93:c2:85:c5:87:c7:26:6c:c1:fb:25:b9:6a:c1:83:1a:
         34:de:bd:fe:50:f9:42:87:de:55:70:23:7e:88:c9:00:0f:ff:
         f0:37:8c:53:87:ca:28:38:9b:6a:9a:01:90:2d:f8:a3:fa:e0:
         df:31:de:0f:d1:37:e6:a9:d4:f5:e1:c9:fa:c2:bd:fa:66:33:
         d8:48:71:28:60:bc:c3:6e:96:dd:69:8b:3a:98:f5:6c:97:6b:
         e1:ac:43:aa:12:36:53:0c:04:2d:19:a8:c5:60:21:8b:27:9c:
         ea:c4:bf:98:32:07:18:92:b5:18:81:67:43:1c:00:36:e5:25:
         42:55:87:78:2d:f8:55:13:23:01:2d:6f:40:9e:36:31:77:a3:
         80:b4:ad:79:ab:29:c4:b0:2b:d9:d6:8f:fa:0f:58:22:9c:47:
         a2:97:52:43:e1:68:4f:40:dc:d6:45:3c:1e:9c:01:26:43:db:
         4d:99:ab:1d:13:68:ff:50:5a:27:8b:ff:9c:ce:4f:20:a9:0f:
         64:b1:22:49:22:df:28:ca:14:85:cc:e0:ec:d1:ab:dd:55:03:
         37:a4:39:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org