Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
File:                     j4ta_C0ziN3SUYrpoHOQj4-loKU.cer (raw, json)
Hash identifier:          F617CfAx1pD/1nPj3Dgz6d5sdlF3CjvkByuLVhkiuW8=
Subject key identifier:   8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020A32
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Aug 2024 19:26:54 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 140712
                          AS: 149876
                          IP: 103.152.26.0/23
                          IP: 2001:df3:f280::/48

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 16:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133682 (0x20a32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 19:26:54 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:ca:6f:cc:3b:d6:2d:e7:f5:b1:a6:67:39:
                    db:b2:cc:a1:65:ae:2b:5e:3c:ea:c5:70:e3:c7:e0:
                    77:65:82:2b:00:f8:29:42:b1:79:7f:49:1c:d5:bc:
                    29:05:a5:2d:c3:54:37:81:aa:3e:cb:ff:79:b4:11:
                    6f:9c:91:33:3c:86:5b:e8:37:2f:06:90:3c:d4:f5:
                    ff:e1:1f:c3:7e:52:43:18:c1:71:00:a1:b1:80:a2:
                    e6:22:d0:15:25:2e:ff:9e:17:d3:93:81:87:6b:8b:
                    6f:12:d5:46:c8:b8:b1:61:2b:d3:7e:d0:bb:14:30:
                    06:d2:6c:5e:c2:c0:bb:00:09:3c:c8:a9:f5:f1:e5:
                    83:54:04:ec:f6:b1:86:0e:d2:93:ee:61:99:68:74:
                    a4:a0:2a:4b:9e:0a:bb:19:fe:a8:30:e6:3b:41:61:
                    c1:71:95:5e:8c:7c:d1:95:43:ba:fe:52:7d:62:dc:
                    31:df:4f:d3:77:1c:80:bb:b2:a9:03:17:2f:8b:83:
                    e4:dc:10:f6:f3:b3:d6:cc:42:49:a3:f2:d9:30:99:
                    41:7b:5c:b9:48:31:bb:27:65:68:88:ac:76:90:fb:
                    b7:f9:f5:84:88:ea:e8:fe:c0:89:67:58:e0:3f:a7:
                    43:37:58:68:b4:57:a9:f0:9b:15:e1:7b:5c:44:65:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140712
                  149876

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.26.0/23
                IPv6:
                  2001:df3:f280::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:de:a3:77:50:b4:59:14:00:b1:ac:cf:25:2e:03:93:72:5c:
         48:46:e8:a1:0e:31:a9:db:0f:9b:55:c0:e4:40:03:b1:1e:7c:
         10:9d:9f:7b:d3:a4:0f:8f:92:ee:7b:ae:ac:8f:3d:16:f9:4c:
         26:65:81:b8:b2:78:06:c7:ad:bb:bf:ff:68:54:ee:bd:2e:f7:
         11:ea:39:24:87:b9:60:bf:47:4e:4b:60:21:9f:28:7a:78:74:
         87:7d:cb:53:15:83:de:57:63:fe:33:09:3c:e3:ee:9c:81:70:
         fe:33:f7:d6:91:5a:fe:cf:04:eb:9e:31:3b:84:b2:0d:7c:91:
         33:b8:b9:d8:b3:78:9a:7e:37:a8:3b:d7:6f:7a:53:0d:79:63:
         bd:10:30:ba:ad:c4:79:e3:9d:e1:46:5c:63:6c:9c:8d:7d:e5:
         e7:e7:99:ab:37:60:3f:cf:17:16:92:15:f5:67:c1:18:9f:d6:
         26:d0:32:80:4a:88:a1:48:a3:2b:1d:ea:43:9c:5f:53:ca:80:
         3a:b6:26:14:0a:e0:c3:ae:c0:a4:8a:4a:18:f1:19:88:d8:24:
         18:ac:e3:1b:93:3f:c3:12:f7:1b:82:ac:fb:e1:bf:a3:9d:35:
         b0:eb:2d:d6:96:5b:ab:79:17:5e:bb:e3:e0:bb:99:2d:94:ba:
         2e:1f:45:7c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAgoyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgzMDE5MjY1NFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODE3RTYxMTAvBgNVBAUTKDhGOEI1QUZDMkQzMzg4REREMjUxOEFF
OUEwNzM5MDhGOEZBNUEwQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1r8pvzDvWLef1saZnOduyzKFlritePOrFcOPH4HdlgisA+ClCsXl/SRzVvCkF
pS3DVDeBqj7L/3m0EW+ckTM8hlvoNy8GkDzU9f/hH8N+UkMYwXEAobGAouYi0BUl
Lv+eF9OTgYdri28S1UbIuLFhK9N+0LsUMAbSbF7CwLsACTzIqfXx5YNUBOz2sYYO
0pPuYZlodKSgKkueCrsZ/qgw5jtBYcFxlV6MfNGVQ7r+Un1i3DHfT9N3HIC7sqkD
Fy+Lg+TcEPbzs9bMQkmj8tkwmUF7XLlIMbsnZWiIrHaQ+7f59YSI6uj+wIlnWOA/
p0M3WGi0V6nwmxXhe1xEZSxPAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUj4ta/C0z
iN3SUYrpoHOQj4+loKUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgxN0U2LzU1NzQwRTcwQjNCMzExRUFCMTk4Q0UwREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0Mw
emlOM1NVWXJwb0hPUWo0LWxvS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAiWoAgMCSXQwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnmBow
DwQCAAIwCQMHACABDfPygDANBgkqhkiG9w0BAQsFAAOCAQEAEN6jd1C0WRQAsazP
JS4Dk3JcSEbooQ4xqdsPm1XA5EADsR58EJ2fe9OkD4+S7nuurI89FvlMJmWBuLJ4
Bsetu7//aFTuvS73Eeo5JIe5YL9HTktgIZ8oenh0h33LUxWD3ldj/jMJPOPunIFw
/jP31pFa/s8E654xO4SyDXyRM7i52LN4mn43qDvXb3pTDXljvRAwuq3EeeOd4UZc
Y2ycjX3l5+eZqzdgP88XFpIV9WfBGJ/WJtAygEqIoUijKx3qQ5xfU8qAOrYmFArg
w67ApIpKGPEZiNgkGKzjG5M/wxL3G4Ks++G/o501sOst1pZbq3kXXrvj4LuZLZS6
Lh9FfA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:33 2024 by rpki-client on console-ams.rpki-client.org