Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer
File:                     qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer (raw, json)
Hash identifier:          QSlyDU9YfyYquA1QzJuCr+HoEwdGkR9vHo4cleu0JpA=
Subject key identifier:   AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FC0C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 19:40:54 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 136914
                          IP: 2403:8440::/32

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 20:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130060 (0x1fc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 28 19:40:54 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91BF5C2/serialNumber=AB24AF5DBDC3AF0647853DAB199FA49FEB6D0735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:b7:7a:3a:e1:c9:ba:6a:d7:a9:e1:bb:a8:
                    7b:b0:7a:fd:9b:01:41:42:d8:e2:81:0a:47:fb:2b:
                    e3:41:a0:e5:1a:e6:6c:6b:60:e2:7d:2b:3d:fb:12:
                    cd:a6:d3:dc:e1:eb:18:57:b1:39:c2:92:bf:59:d5:
                    0c:49:f1:e4:36:57:06:bf:de:48:95:09:31:04:8f:
                    d0:02:11:ab:70:eb:56:da:5f:27:53:3f:4e:fc:78:
                    16:03:19:32:1e:12:11:a6:9f:ba:c3:5a:38:7a:d4:
                    10:7f:be:c2:bf:05:c9:a9:49:71:95:09:96:4f:68:
                    0f:5c:ca:0d:5f:77:09:9a:0c:bf:98:37:1c:fd:fd:
                    da:4d:2a:02:99:0f:69:bc:2d:25:24:68:35:e3:e2:
                    c7:35:d7:73:33:2f:a7:9d:0b:d5:8c:f2:3f:fa:49:
                    48:98:e9:4c:9e:3a:a4:bf:a4:3f:00:51:e0:3d:d2:
                    09:7b:62:3c:92:89:f1:99:14:4d:7c:f5:a0:07:1e:
                    03:da:b6:92:a2:c7:ee:2b:18:78:b9:81:d4:9e:72:
                    7e:55:e9:ee:03:a8:31:5f:ac:33:00:68:74:78:6c:
                    72:6a:23:65:06:f2:97:c0:2e:7a:45:27:75:71:4e:
                    16:77:30:81:13:88:71:f2:d1:5c:68:c3:77:f2:99:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136914

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:61:11:bd:47:98:3b:5b:b8:3f:7d:14:98:5c:8a:c9:2b:
         4f:b1:5d:15:22:a3:e1:78:05:1d:6c:d6:31:4d:9a:b9:59:09:
         59:55:74:e7:c8:57:b4:a0:3a:78:9c:b9:35:44:96:d4:ad:e3:
         2d:9a:c3:1d:c0:a0:f1:b8:c9:5c:b4:97:f0:a4:f3:90:29:92:
         17:40:9f:ea:5f:82:5a:99:51:8b:78:ef:66:ba:10:ed:17:e0:
         fe:0b:ad:bf:65:72:71:30:25:40:70:3f:59:d6:99:d8:67:e1:
         be:75:b9:6a:6e:2d:47:ce:28:e2:72:72:72:60:ae:d4:75:9e:
         a1:31:bb:6c:d8:98:c3:fa:18:86:8c:7a:ed:3b:33:a2:33:af:
         90:1a:f0:21:37:3b:2e:90:e9:5e:e1:38:f0:a2:c6:5e:19:95:
         87:be:24:75:ae:ba:50:d0:42:d2:7e:59:e3:71:d7:db:51:6e:
         19:12:db:82:a7:7a:a3:3c:b2:26:f0:ff:2b:4a:19:3c:9e:c3:
         26:ee:d8:9a:ee:90:e0:3f:db:72:26:ef:07:62:39:90:ce:88:
         4c:37:77:bc:80:a0:27:d2:c8:a0:b4:b0:c5:6b:b4:b9:9c:3f:
         e1:4c:0e:33:e5:d9:f1:66:af:bf:32:a8:fe:a9:21:87:59:39:
         97:59:be:4f
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAfwMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYyODE5NDA1NFoXDTI0MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkY1QzIxMTAvBgNVBAUTKEFCMjRBRjVEQkRDM0FGMDY0Nzg1M0RB
QjE5OUZBNDlGRUI2RDA3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzObd6OuHJumrXqeG7qHuwev2bAUFC2OKBCkf7K+NBoOUa5mxrYOJ9Kz37Es2m
09zh6xhXsTnCkr9Z1QxJ8eQ2Vwa/3kiVCTEEj9ACEatw61baXydTP078eBYDGTIe
EhGmn7rDWjh61BB/vsK/BcmpSXGVCZZPaA9cyg1fdwmaDL+YNxz9/dpNKgKZD2m8
LSUkaDXj4sc113MzL6edC9WM8j/6SUiY6UyeOqS/pD8AUeA90gl7YjySifGZFE18
9aAHHgPatpKix+4rGHi5gdSecn5V6e4DqDFfrDMAaHR4bHJqI2UG8pfALnpFJ3Vx
ThZ3MIETiHHy0Vxow3fymco7AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUqySvXb3D
rwZHhT2rGZ+kn+ttBzUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGNUMyL0IzN0UzQ0E4RTc0QzExRUFCRjVDQUExRUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRjVDMi9CMzdFM0NBOEU3NEMxMUVBQkY1Q0FBMUVDNEY5QUUwMi9xeVN2WGIz
RHJ3WkhoVDJyR1ota24tdHRCelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhbSMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOEQDANBgkq
hkiG9w0BAQsFAAOCAQEAXkJhEb1HmDtbuD99FJhciskrT7FdFSKj4XgFHWzWMU2a
uVkJWVV058hXtKA6eJy5NUSW1K3jLZrDHcCg8bjJXLSX8KTzkCmSF0Cf6l+CWplR
i3jvZroQ7Rfg/gutv2VycTAlQHA/WdaZ2GfhvnW5am4tR84o4nJycmCu1HWeoTG7
bNiYw/oYhox67TszojOvkBrwITc7LpDpXuE48KLGXhmVh74kda66UNBC0n5Z43HX
21FuGRLbgqd6ozyyJvD/K0oZPJ7DJu7Ymu6Q4D/bcibvB2I5kM6ITDd3vICgJ9LI
oLSwxWu0uZw/4UwOM+XZ8WavvzKo/qkhh1k5l1m+Tw==
-----END CERTIFICATE-----
Generated at Wed Aug 28 23:39:19 2024 by rpki-client on console-ams.rpki-client.org