Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruaPo9Y90vHvVYBQupplhCzBy-A.cer
File:                     ruaPo9Y90vHvVYBQupplhCzBy-A.cer (raw, json)
Hash identifier:          oyZyomyZePeOJ/azaSp2vYZyNhh507/WHbC8g4/kHsY=
Subject key identifier:   AE:E6:8F:A3:D6:3D:D2:F1:EF:55:80:50:BA:9A:65:84:2C:C1:CB:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019536
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/ruaPo9Y90vHvVYBQupplhCzBy-A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Apr 2023 14:00:28 +0000
Certificate not after:    Tue 01 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 133324
                          IP: 43.243.20.0/24
                          IP: 45.122.231.0/24
                          IP: 45.124.110.0/23
                          IP: 103.38.145.0/24
                          IP: 103.38.148.0/23
                          IP: 103.224.162.0/24
                          IP: 2401:7e80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103734 (0x19536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  1 14:00:28 2023 GMT
            Not After : Aug  1 00:00:00 2023 GMT
        Subject: CN=A913B673/serialNumber=AEE68FA3D63DD2F1EF558050BA9A65842CC1CBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:30:df:54:57:8c:eb:6c:73:55:67:ad:e0:
                    19:fe:a8:c4:b6:d6:61:2e:23:6c:0a:f7:80:af:f6:
                    8c:d7:2e:40:49:02:7c:54:85:68:ed:f9:1e:6c:9f:
                    db:81:c6:49:ad:83:30:2a:ac:cd:b8:50:ad:3b:bb:
                    d6:29:63:2f:9b:39:8a:e8:e5:e7:d3:23:b9:47:80:
                    b7:43:c8:29:24:fb:4d:42:ec:a1:7f:a7:82:cb:19:
                    8f:04:2a:e5:86:39:5e:a7:70:ec:87:c3:70:ea:04:
                    b9:5b:2e:1d:06:a9:48:d5:93:cc:ca:59:5f:cb:0a:
                    dd:45:b9:a1:79:2a:5e:24:2f:89:ae:fd:e8:f8:70:
                    7e:e0:a3:4f:e9:ac:b3:c0:65:c1:47:1f:62:fb:7a:
                    3d:d7:22:4b:1f:6e:a6:b8:96:5b:52:d0:3c:03:9a:
                    cd:7d:56:ea:c0:35:f5:ee:4a:0a:78:31:be:0e:c6:
                    90:07:56:4a:44:e6:9e:00:bd:fb:c1:6a:ee:01:a6:
                    f3:4e:c8:66:8b:f7:a3:71:72:28:ef:34:ec:09:fc:
                    66:e9:5a:7f:20:56:0c:b5:f9:e3:45:76:56:e7:26:
                    df:df:1c:88:25:b2:98:c0:3d:f8:ff:c4:ab:c9:10:
                    58:92:95:0c:3c:98:26:7b:c8:35:55:75:e5:60:38:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E6:8F:A3:D6:3D:D2:F1:EF:55:80:50:BA:9A:65:84:2C:C1:CB:E0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/ruaPo9Y90vHvVYBQupplhCzBy-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133324

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.20.0/24
                  45.122.231.0/24
                  45.124.110.0/23
                  103.38.145.0/24
                  103.38.148.0/23
                  103.224.162.0/24
                IPv6:
                  2401:7e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:33:83:70:40:64:fd:b1:a2:0b:bb:f3:e0:80:6d:73:2e:85:
         5c:17:b9:34:e7:48:af:5d:d0:23:68:4b:24:a3:d3:29:dc:a3:
         b4:de:24:29:72:7a:b5:74:d2:70:f1:69:92:4e:48:50:d5:11:
         91:2f:1b:d9:4b:cc:23:65:2b:91:a4:95:68:19:88:70:11:ff:
         ea:09:b8:31:65:22:58:27:ae:14:ec:28:97:20:2e:e8:30:16:
         38:7d:6f:f4:ee:4c:58:f3:b0:4f:f5:b9:66:fd:7b:3c:a8:11:
         d1:0d:06:c9:fc:16:8f:19:16:e1:c2:03:c6:14:f8:4c:db:50:
         b4:20:c6:fa:11:46:a8:03:19:3b:c2:35:62:a4:66:f8:3b:20:
         85:d7:62:2d:92:f7:9b:f1:fa:13:7d:91:74:da:f5:d5:4a:c3:
         f0:b8:2e:9e:0d:34:3d:f9:a3:6a:47:61:2d:a0:1d:d4:ba:53:
         fc:60:d6:9b:57:8d:35:6b:1c:0a:8f:22:79:57:78:6c:f0:3f:
         ce:1c:f0:ab:1d:e5:b1:26:4d:b0:77:f1:4f:ed:46:97:42:e2:
         dc:fb:fe:41:fc:69:88:d4:e5:d9:19:28:e2:86:4c:d7:22:df:
         19:46:d6:f1:9e:e0:7c:6b:31:ae:57:1f:78:95:42:ff:29:a0:
         1a:c2:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-ams.rpki-client.org