Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdvX2oBp8-PS0A_KQVoWQFO32qY.cer
File:                     pdvX2oBp8-PS0A_KQVoWQFO32qY.cer (raw, json)
Hash identifier:          uZ/0eOjVabsOpDfnm/0gmpFlSfpJNQSx8fMJkJv3Znc=
Subject key identifier:   A5:DB:D7:DA:80:69:F3:E3:D2:D0:0F:CA:41:5A:16:40:53:B7:DA:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A883
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 06 Jun 2023 14:33:30 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 135343
                          IP: 103.214.192.0/22
                          IP: 144.48.140.0/22
                          IP: 2001:df1:b200::/48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 14:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108675 (0x1a883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  6 14:33:30 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9143BD2/serialNumber=A5DBD7DA8069F3E3D2D00FCA415A164053B7DAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:94:87:f9:93:7f:de:eb:e5:d4:92:1e:a3:
                    51:72:ab:e4:9b:dd:b7:42:ea:bf:45:01:49:19:03:
                    1b:8f:bc:b9:86:b7:4d:9b:1a:a3:ca:23:80:9e:53:
                    82:3d:de:76:71:85:62:70:85:9b:22:8d:b9:23:8f:
                    59:1c:ef:77:3a:81:34:cb:9a:74:0c:41:57:ee:1d:
                    0e:ad:21:69:19:70:aa:9e:01:97:c3:71:2c:0a:74:
                    68:c4:77:55:97:3d:4a:4f:bf:5f:52:ed:f8:9a:3f:
                    04:14:e9:2b:5b:28:e7:ba:a6:08:3d:27:63:41:91:
                    ad:29:b9:52:ab:e6:7f:5f:17:86:95:79:bc:f0:62:
                    78:78:10:8c:00:5a:f4:a0:77:80:21:ef:78:43:93:
                    2a:e7:85:a7:77:10:c8:20:5d:9f:0f:9d:89:5a:ce:
                    5f:f0:4a:46:26:6a:8f:d6:d7:cb:30:23:04:c3:34:
                    c5:c4:87:b1:a7:ec:0e:34:e8:ab:a6:76:b2:de:e6:
                    f0:bf:0a:97:8a:93:1c:b0:4e:b6:1d:7b:35:00:ff:
                    d9:1e:fd:72:db:d8:e0:33:7d:c1:b1:8b:93:c4:bc:
                    ab:bc:ee:e5:d9:37:3c:4f:85:c3:45:13:e8:04:2a:
                    c7:af:75:47:df:f4:3d:7b:c7:4d:c3:dd:22:28:9d:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:D7:DA:80:69:F3:E3:D2:D0:0F:CA:41:5A:16:40:53:B7:DA:A6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135343

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.192.0/22
                  144.48.140.0/22
                IPv6:
                  2001:df1:b200::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:cb:b6:a2:f0:32:85:3c:db:09:74:36:5b:21:7f:2e:d0:
         42:7f:01:f5:16:13:34:0a:67:94:a8:85:5e:41:df:97:f8:b4:
         fd:94:84:fd:b6:17:08:c6:20:55:98:d0:31:5f:37:15:9b:0d:
         39:0b:25:a0:c7:69:48:80:c7:b8:ba:02:6d:e4:98:7f:45:bc:
         90:7c:f7:cd:b7:40:d4:0e:a4:3f:46:f4:88:6e:bf:b2:2a:a5:
         f5:ec:a5:c4:5d:87:b2:1e:ae:1e:60:73:b8:89:eb:46:bd:54:
         be:34:1d:1c:53:1a:66:d6:5f:f3:0b:97:41:92:43:fb:9d:75:
         a6:12:ac:7a:21:37:22:14:b7:80:35:aa:c7:0c:cd:5a:0f:d0:
         da:83:62:f6:9c:6c:aa:91:0f:5d:15:09:55:91:d6:73:9f:59:
         86:44:14:5e:a1:6e:3e:dc:01:8c:2f:95:b4:5c:e3:5c:0b:11:
         b7:6a:49:a4:15:bb:b6:dc:7a:dc:84:be:f8:77:b3:17:00:b7:
         7c:d3:ec:68:30:f8:44:5b:c7:31:08:a7:e5:ea:3b:87:6e:43:
         85:49:6b:5c:b5:9f:d9:1e:1e:f8:7f:7c:21:a4:b0:85:5c:fb:
         57:be:64:52:3a:13:f4:cc:07:a1:47:39:bc:54:62:57:b0:96:
         f7:af:6f:8b
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAaiDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDYwNjE0MzMzMFoXDTI0MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDNCRDIxMTAvBgNVBAUTKEE1REJEN0RBODA2OUYzRTNEMkQwMEZD
QTQxNUExNjQwNTNCN0RBQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvpJSH+ZN/3uvl1JIeo1Fyq+Sb3bdC6r9FAUkZAxuPvLmGt02bGqPKI4CeU4I9
3nZxhWJwhZsijbkjj1kc73c6gTTLmnQMQVfuHQ6tIWkZcKqeAZfDcSwKdGjEd1WX
PUpPv19S7fiaPwQU6StbKOe6pgg9J2NBka0puVKr5n9fF4aVebzwYnh4EIwAWvSg
d4Ah73hDkyrnhad3EMggXZ8PnYlazl/wSkYmao/W18swIwTDNMXEh7Gn7A406Kum
drLe5vC/CpeKkxywTrYdezUA/9ke/XLb2OAzfcGxi5PEvKu87uXZNzxPhcNFE+gE
KsevdUff9D17x03D3SIonVr5AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUpdvX2oBp
8+PS0A/KQVoWQFO32qYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQzQkQyL0QwNzdDNEE2OUI1MDExRUI5QjY5QjUyNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0M0JEMi9EMDc3QzRBNjlCNTAxMUVCOUI2OUI1MjVDNEY5QUUwMi9wZHZYMm9C
cDgtUFMwQV9LUVZvV1FGTzMycVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhCvMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCZ9bAAwQCkDCM
MA8EAgACMAkDBwAgAQ3xsgAwDQYJKoZIhvcNAQELBQADggEBAElNy7ai8DKFPNsJ
dDZbIX8u0EJ/AfUWEzQKZ5SohV5B35f4tP2UhP22FwjGIFWY0DFfNxWbDTkLJaDH
aUiAx7i6Am3kmH9FvJB89823QNQOpD9G9Ihuv7IqpfXspcRdh7Ierh5gc7iJ60a9
VL40HRxTGmbWX/MLl0GSQ/uddaYSrHohNyIUt4A1qscMzVoP0NqDYvacbKqRD10V
CVWR1nOfWYZEFF6hbj7cAYwvlbRc41wLEbdqSaQVu7bcetyEvvh3sxcAt3zT7Ggw
+ERbxzEIp+XqO4duQ4VJa1y1n9keHvh/fCGksIVc+1e+ZFI6E/TMB6FHObxUYlew
lvevb4s=
-----END CERTIFICATE-----
Generated at Wed Jan 31 17:49:57 2024 by rpki-client on console-ams.rpki-client.org