Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
File:                     se6IcQY6AQgzW9-qPjoT-cnHkN4.cer (raw, json)
Hash identifier:          qwZvZUFPfRlX0+ELthx6QDmeDbDHAA6sPV/R4SkM6aI=
Subject key identifier:   B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C363
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 11 Oct 2023 11:06:37 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 149850
                          IP: 103.188.92.0/23
                          IP: 2001:df0:c540::/48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 19:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115555 (0x1c363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 11 11:06:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:cb:db:c0:ab:b0:c4:61:6c:57:65:ab:3a:
                    9e:93:f0:27:8a:75:23:8c:f9:6e:0a:ae:ce:1e:02:
                    03:cb:84:4d:b6:02:b7:20:e5:73:2d:97:df:c5:37:
                    4f:bd:16:a2:a9:9f:90:2f:2f:7b:e3:5c:91:6c:6a:
                    ce:35:1e:e5:5b:52:37:d3:d1:58:07:45:73:a3:95:
                    8b:aa:dd:7d:bb:fd:40:fd:96:15:5a:0c:70:01:b1:
                    7a:9b:6e:58:b7:27:45:e9:78:7a:08:ba:3f:c5:f8:
                    e0:66:34:85:67:6e:41:27:f3:b2:4a:52:d6:b6:62:
                    63:87:36:2e:88:d7:bf:99:08:9d:b3:c2:fe:e6:4e:
                    4c:ac:0a:28:20:8e:fe:e7:4c:8a:f2:6c:c8:6d:21:
                    bf:a0:1f:99:2f:cb:06:2f:dd:95:a9:87:0c:9d:76:
                    11:80:d5:0b:f0:2d:67:b4:0c:7f:f5:b8:01:64:86:
                    62:03:ad:03:16:5e:a6:38:ea:84:5e:ce:9c:2a:19:
                    f5:65:cc:0f:31:75:d5:69:19:d3:d7:27:46:39:fa:
                    91:60:bd:23:d3:cb:d4:96:e3:f1:c7:91:e4:61:3c:
                    d0:b9:1b:f6:53:dc:09:97:c3:53:b2:29:19:c7:0e:
                    c2:b6:91:1e:69:f1:c3:a2:65:b6:0a:30:b4:b9:28:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149850

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23
                IPv6:
                  2001:df0:c540::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:83:b4:97:d7:b9:c6:8e:2c:99:94:be:50:56:e1:52:79:
         fa:f4:2c:8e:28:b9:a2:88:8a:b8:05:1c:a1:ee:8b:2c:a4:47:
         55:12:4f:2e:7f:59:51:ca:28:13:7a:c6:63:f9:94:fa:c6:75:
         64:f6:ed:f8:a8:77:56:38:4f:a5:08:40:7a:c2:ec:bc:08:f9:
         9c:93:5c:62:d3:af:81:6f:aa:97:eb:95:92:82:be:59:f1:18:
         76:bb:c3:4a:1d:5e:cf:fb:80:db:94:76:8e:b6:92:da:09:96:
         17:ff:70:b5:b6:a9:d9:7f:a5:87:96:15:82:17:5c:b5:e6:67:
         27:50:12:84:08:36:7c:bd:38:75:7b:86:2e:ed:63:c5:69:c5:
         be:b8:5e:5c:04:58:f9:1e:50:70:84:ce:a9:ef:e2:55:2b:92:
         ed:c1:57:63:2a:d4:d5:00:c1:23:df:3a:1f:05:a3:77:85:47:
         9d:2f:9e:75:52:aa:71:0b:3d:ba:04:0e:a0:d4:cf:9d:71:7e:
         a9:c0:6d:e5:76:31:dd:f2:b1:32:17:a6:4d:5c:fe:41:b8:29:
         4d:0b:59:e7:cb:cc:8e:83:63:13:8a:32:e6:39:c8:60:08:9c:
         7e:19:4b:ee:b6:12:d1:05:23:4e:25:81:4e:57:20:c8:53:64:
         cd:82:04:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:54 2024 by rpki-client on console-fra.rpki-client.org