Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxixthyqS2gIV7Xb2T3NPm3TFrU.cer
File:                     jxixthyqS2gIV7Xb2T3NPm3TFrU.cer (raw, json)
Hash identifier:          xEIvgh24u0Vd2Pn5iIXK+9JtrXg1jf9O/QFND7t1rjw=
Subject key identifier:   8F:18:B1:B6:1C:AA:4B:68:08:57:B5:DB:D9:3D:CD:3E:6D:D3:16:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B0B5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 05:05:14 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.114.128.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110773 (0x1b0b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 18 05:05:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91B84BD/serialNumber=8F18B1B61CAA4B680857B5DBD93DCD3E6DD316B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:c4:24:10:dd:35:3f:85:32:2e:40:16:e6:
                    d4:e4:3d:68:ad:7e:03:95:87:9d:76:65:bc:12:2d:
                    99:e4:f7:7c:42:81:a6:d5:04:97:61:47:94:3c:99:
                    30:f6:8b:28:69:9d:2e:83:00:8a:04:49:a6:60:88:
                    9e:96:bb:e2:d2:4f:cf:cb:b3:77:19:b8:6f:b4:59:
                    8d:3b:4b:a3:93:3e:2e:ff:fb:56:04:20:82:3e:57:
                    08:60:5d:d5:85:27:c4:21:a9:0e:77:05:2b:9a:42:
                    2c:15:f5:f1:20:01:6d:1b:b3:4d:7f:27:93:ee:e3:
                    54:4b:c7:0a:c9:df:0e:e7:a2:29:54:79:8a:41:f8:
                    96:d2:bb:51:f5:a4:44:ca:63:21:36:b0:5d:4a:6a:
                    78:2d:a9:1f:1c:ad:ee:46:a9:2d:49:5b:de:e4:16:
                    20:ae:7b:19:e3:37:6f:1f:af:d8:12:3a:60:42:ff:
                    37:3b:af:c6:88:29:7b:3e:b0:4a:27:bd:a9:44:86:
                    4a:a0:eb:43:fb:5c:a3:18:0d:95:1f:22:4c:71:60:
                    16:e0:42:a5:04:d5:7a:4b:d7:72:50:d7:72:2b:19:
                    2e:b3:44:bf:f3:80:e6:13:09:c9:2c:18:69:22:db:
                    6b:8d:57:1c:72:45:2c:59:ab:3a:51:b5:08:5c:bf:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:B1:B6:1C:AA:4B:68:08:57:B5:DB:D9:3D:CD:3E:6D:D3:16:B5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:ee:c2:a7:7d:08:11:f1:fd:55:eb:2c:44:f7:60:cf:37:09:
         16:ba:70:a8:b1:f6:ee:1f:2a:9e:86:0c:1b:ec:9c:7d:91:38:
         da:95:5a:dc:45:36:c7:4f:c6:30:c5:66:a1:8d:88:5c:86:ea:
         d8:ad:6f:a2:b0:fb:3a:09:ea:e2:d5:9e:23:99:51:b3:c8:98:
         5b:12:60:fb:ff:8a:66:62:47:c9:77:cd:f2:1b:8f:65:c5:6e:
         fd:45:09:93:e4:84:a0:8d:6c:73:5c:5d:fc:96:04:75:93:d2:
         6f:e7:8a:07:2e:1d:20:b2:0a:a0:9a:77:4f:6a:53:bd:14:3d:
         67:05:9a:46:4e:bc:f6:91:f9:b2:b3:b0:84:19:ea:5d:13:2a:
         52:21:6e:84:95:dd:5d:c9:75:7a:13:ac:d2:33:92:10:b7:cb:
         fb:1d:6e:1b:61:ac:39:f7:51:c0:1f:64:98:fc:77:e6:c3:ea:
         40:fd:6a:49:aa:3d:18:8a:65:9f:36:d9:0c:33:13:72:19:51:
         84:e0:f4:4b:b0:2b:18:cb:da:1d:fe:82:47:bc:6c:0d:88:2b:
         ec:37:75:9e:e2:fd:50:3c:b1:61:a4:a7:f2:4a:b2:9d:d1:dd:
         53:b3:49:22:e6:7f:df:7b:fa:68:52:81:7d:0b:79:fe:a4:cb:
         5d:46:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org