Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oizFwqDIeu3_fi0U3q4aYD930hc.cer
File:                     oizFwqDIeu3_fi0U3q4aYD930hc.cer (raw, json)
Hash identifier:          by0WgcjfI3qasB6mghTNQVwBwd5wGShPEIk02m/BvbY=
Subject key identifier:   A2:2C:C5:C2:A0:C8:7A:ED:FF:7E:2D:14:DE:AE:1A:60:3F:77:D2:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D969
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/oizFwqDIeu3_fi0U3q4aYD930hc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 07:31:32 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 132083
                          IP: 103.70.88.0/23
                          IP: 2001:df1:f300::/48

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 06:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121193 (0x1d969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 19 07:31:32 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A918377D/serialNumber=A22CC5C2A0C87AEDFF7E2D14DEAE1A603F77D217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:b6:16:f1:2c:9d:72:dc:27:fc:54:eb:6b:
                    46:c5:77:30:6a:de:96:ea:ef:f0:37:c0:cb:a0:cd:
                    61:1f:0f:e6:12:99:f7:c7:1e:1e:44:ba:29:fd:1c:
                    82:d3:ba:a0:2a:a3:53:9a:45:01:f6:26:55:91:67:
                    58:be:26:ea:26:4b:97:cf:35:e1:19:aa:7d:80:d4:
                    63:2b:a0:10:6c:e1:1a:f1:8e:a6:5c:06:92:6a:df:
                    d3:60:01:2f:23:d6:9e:e3:bc:59:68:17:90:e4:c9:
                    5f:d5:ff:8f:9f:cb:dd:37:28:e8:1f:65:db:90:25:
                    3c:79:f4:a7:cd:0d:17:2c:e9:48:57:c1:f5:a1:07:
                    e6:9e:60:c8:fc:e6:fc:93:0b:8b:ad:ca:66:a1:6a:
                    b4:81:03:a8:9b:d5:b4:e5:f8:b7:38:83:d4:1d:c8:
                    de:b8:a8:0a:e2:3a:b9:6e:73:11:bc:5f:7f:00:30:
                    c3:2f:4a:c0:24:cf:73:55:4f:bf:d7:0e:29:5c:9c:
                    00:f2:3c:bd:b2:ba:70:52:a6:52:e9:78:a7:4e:16:
                    e9:94:1f:11:45:27:9a:ab:14:e0:47:33:41:70:49:
                    70:40:28:44:9e:f6:5a:6c:2e:6a:2a:a7:fa:75:cb:
                    0c:af:84:2a:55:31:d9:4f:d8:19:fd:6c:4e:5f:06:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2C:C5:C2:A0:C8:7A:ED:FF:7E:2D:14:DE:AE:1A:60:3F:77:D2:17
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918377D/9F7C8152B4B111EEB0ADE352C4F9AE02/oizFwqDIeu3_fi0U3q4aYD930hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132083

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.88.0/23
                IPv6:
                  2001:df1:f300::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:c7:30:9a:27:4c:e3:91:b8:e8:b9:63:4f:34:3b:0f:0f:
         b1:2a:83:22:ac:af:6b:7c:65:fa:fd:49:0b:57:e2:4c:f4:1b:
         49:42:61:66:14:ec:fa:75:4d:f6:fd:20:85:f7:49:66:db:5e:
         c7:ab:39:db:da:f6:a9:00:04:43:05:90:b8:b2:e1:33:cb:17:
         68:65:26:9a:f7:74:ae:b7:26:19:cf:38:21:02:8a:dc:3b:ea:
         41:6d:35:1a:6d:39:c7:43:88:ac:7e:eb:a4:8b:9b:98:d5:de:
         cd:be:52:b6:dd:46:d9:11:7b:f6:85:21:72:b0:12:cb:19:31:
         96:78:23:64:78:d5:60:31:0a:86:5d:67:43:af:0c:f6:f2:7d:
         15:9a:dc:47:b6:72:b1:89:dc:a6:13:92:52:16:08:bc:03:df:
         3b:bf:8d:b9:dc:2c:3a:31:c2:d2:c6:da:37:c3:d8:c9:2e:25:
         6e:a9:90:03:23:84:f6:a6:3e:d3:3d:82:ee:65:98:f0:97:44:
         05:0e:ea:71:60:6e:87:4c:78:0c:0d:c0:b2:ad:56:7f:b0:48:
         dd:e7:29:41:28:14:1b:c8:2f:3d:ef:77:35:c2:e1:44:63:15:
         1d:b0:64:4d:83:7b:4b:ba:47:b9:ad:90:af:19:66:95:ae:2f:
         8d:cc:0f:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:44 2024 by rpki-client on console-ams.rpki-client.org