Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer
File:                     rruT6novxp4sGczngu713bHKMr0.cer (raw, json)
Hash identifier:          vLnTXc+10+L/giphn3YpFjbD0yZwIWsgoBY016SK9w8=
Subject key identifier:   AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0201BD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 23 Jul 2024 12:56:34 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:df4:1500::/48

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 12:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131517 (0x201bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 23 12:56:34 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A911DFB8/serialNumber=AEBB93EA7A2FC69E2C19CCE782EEF5DDB1CA32BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:14:22:cd:8a:c4:f1:d5:98:1a:02:9e:e7:
                    01:93:21:5e:6e:3a:61:4d:30:c3:a6:a3:b8:77:55:
                    18:2c:02:94:5c:27:56:d4:28:cb:74:2d:3a:d4:1c:
                    c2:43:0e:ef:c3:91:55:18:c2:9c:fb:90:c0:74:09:
                    1b:9c:e3:9f:b3:01:1d:26:7d:ce:0b:ca:5e:44:bd:
                    9e:ea:a2:f3:de:a4:8a:fa:28:c8:49:50:b6:ea:e4:
                    84:15:1c:b1:16:a0:df:80:b4:fa:bf:15:a9:3a:3c:
                    5a:cc:84:59:37:34:bd:98:57:fb:ca:c8:04:d9:ee:
                    69:82:61:1d:24:44:98:a3:44:c5:b0:2f:85:e9:f4:
                    a1:9d:27:1d:e3:ba:b5:0c:c3:db:12:70:31:44:79:
                    67:40:81:e9:21:cb:de:5e:e0:d6:17:ff:3f:51:4d:
                    04:af:dc:e5:17:eb:88:dc:b6:91:f4:40:32:e9:d0:
                    53:f5:4f:54:25:87:d7:5f:2e:de:1d:1f:db:85:8f:
                    5a:6a:24:1a:37:0f:1c:1d:38:1e:ac:c3:97:82:03:
                    ea:2f:91:6b:d9:b9:00:bf:a5:88:fe:7d:9a:89:ac:
                    c4:1d:00:d9:70:16:03:b3:d3:82:56:80:41:2c:b6:
                    9e:06:ae:83:c4:13:12:ed:c2:84:65:85:1d:e6:8a:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:6f:e1:d1:2d:3d:c8:20:c4:e2:23:0b:08:15:d3:f3:e3:64:
         02:49:08:e2:ed:b1:6c:30:23:0e:7a:2e:aa:93:08:0c:d7:ce:
         dc:f6:9e:d4:68:13:0b:83:f1:77:d4:c4:67:f9:5b:16:ef:a6:
         d9:b9:95:f4:86:e0:49:40:cf:f4:8f:6f:19:13:57:2f:4d:92:
         e9:f1:0e:9e:9f:9e:74:3e:17:dd:bb:61:a2:6a:80:b6:23:26:
         78:89:fc:30:2e:05:26:c4:75:07:1a:59:a3:71:60:ac:ce:cb:
         4f:1c:5e:c6:c9:de:f0:49:5c:83:04:ca:4d:bd:89:6e:3c:95:
         b5:1e:6f:99:63:b6:a2:14:57:ec:5a:b9:1e:c5:56:06:fa:71:
         d5:bc:61:f7:7a:22:cf:25:2c:19:a4:ca:a8:48:6a:8e:b1:c6:
         f1:4a:0b:86:e8:d2:bd:ce:57:7c:82:9a:99:b9:ab:84:88:72:
         e6:d6:b1:cf:62:4d:d8:f3:ea:c0:7d:bc:6a:ed:36:06:4d:33:
         2c:6c:fc:db:30:d7:2d:a8:d7:46:96:6d:ba:75:e3:fa:54:bc:
         f2:22:ee:91:68:7f:af:72:b1:9b:99:a0:ca:e8:be:06:21:74:
         85:fb:ec:89:d6:2d:3a:ce:f1:19:19:59:97:e7:68:af:a1:e6:
         0e:fa:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:32:39 2024 by rpki-client on console-fra.rpki-client.org