Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v0SityIz_0i6eTAorF-voCrc_9A.cer
File:                     v0SityIz_0i6eTAorF-voCrc_9A.cer (raw, json)
Hash identifier:          CYV+pxI9MWWWvB0agZT9VJfk5EdBhvhwrZjTmo4QeD0=
Subject key identifier:   BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D220
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Dec 2023 22:52:12 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 59243
                          IP: 103.254.36.0/22
                          IP: 2001:df0:b800::/48

Validation:               Failed, certificate revoked on Sat 02 Mar 2024 05:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119328 (0x1d220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 14 22:52:12 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91FBECF/serialNumber=BF44A2B72233FF48BA793028AC5FAFA02ADCFFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:e4:97:1b:0c:23:8a:e4:bd:87:7c:57:30:
                    cd:d1:4c:d8:cb:ee:03:81:00:a6:55:11:d2:40:b1:
                    30:f7:e6:c0:1b:17:33:1c:5a:e4:84:96:87:de:c1:
                    16:7f:7a:68:d1:19:ee:b7:17:9b:38:17:89:98:7d:
                    f5:fb:98:07:ce:c6:a8:3e:51:8e:69:4d:ce:7c:59:
                    1f:17:c2:0c:c3:54:b0:3b:78:c5:c4:f8:51:26:a1:
                    a6:29:fc:8d:a5:9e:ba:1a:2d:1f:3d:8e:26:16:20:
                    07:c4:a7:9b:8a:fa:db:dc:33:bc:28:66:21:7e:86:
                    39:bb:a8:ef:d4:3e:ee:4b:97:94:55:be:37:c6:c9:
                    b0:18:51:04:60:db:53:08:26:00:5b:22:40:56:b6:
                    32:bb:08:95:f5:ea:e2:cc:88:9e:be:1b:d5:53:37:
                    50:75:37:48:72:8f:78:9b:41:24:aa:ec:2b:68:93:
                    5c:6c:52:57:c4:8d:ac:85:61:5b:52:c8:a3:a7:49:
                    b9:63:ca:45:ea:7a:60:48:1e:63:00:67:74:0a:f1:
                    7e:17:ea:e4:f2:76:66:7f:aa:ae:94:af:03:0d:b1:
                    52:32:48:b3:9e:6d:c0:ef:f6:2a:ef:fb:42:28:97:
                    ed:e4:24:f9:1d:77:93:db:3c:c3:de:a2:08:24:8b:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59243

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.36.0/22
                IPv6:
                  2001:df0:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:1d:24:33:43:cc:0a:fc:ac:33:27:80:83:99:f6:9e:b6:60:
         8b:f2:5e:de:45:f6:4a:c5:82:b5:b2:c7:82:d6:c5:11:a3:4b:
         da:2e:55:91:0d:ef:3b:a8:93:ce:c8:3e:04:05:16:3f:1e:3c:
         a1:63:a3:7d:42:e0:34:b8:a9:8a:13:e8:e1:e8:46:f1:ee:58:
         92:bf:a6:46:f3:d8:57:0f:33:62:7a:b5:33:b1:15:f1:bd:67:
         4f:96:83:63:ab:61:63:ce:11:86:06:36:a5:6a:23:e2:80:04:
         df:61:da:ae:41:9e:c8:1c:29:62:18:8e:1d:81:3c:5d:5c:2a:
         36:0e:ed:41:3c:b1:cf:c1:b9:1c:70:7b:da:4f:4f:09:41:76:
         a0:6b:83:36:fb:42:2a:a5:f2:36:38:c3:6e:63:c1:22:f2:20:
         ee:2d:37:9e:e6:a2:96:51:e1:cd:4e:31:e5:82:89:f1:3e:39:
         72:b7:b0:cf:93:08:2e:b1:75:5f:b0:6f:30:bd:f0:11:6d:8b:
         50:b2:ad:25:8c:13:3f:50:80:09:b4:24:99:64:d9:3e:23:10:
         0c:3c:4f:33:2d:12:5c:4a:4f:c0:22:3a:ef:fd:1a:b2:13:f9:
         0a:e5:22:33:6b:bf:5b:80:45:7f:eb:72:20:37:0a:16:9f:e5:
         0c:8b:de:59
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAdIgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIxNDIyNTIxMloXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkJFQ0YxMTAvBgNVBAUTKEJGNDRBMkI3MjIzM0ZGNDhCQTc5MzAy
OEFDNUZBRkEwMkFEQ0ZGRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvCOSXGwwjiuS9h3xXMM3RTNjL7gOBAKZVEdJAsTD35sAbFzMcWuSElofewRZ/
emjRGe63F5s4F4mYffX7mAfOxqg+UY5pTc58WR8XwgzDVLA7eMXE+FEmoaYp/I2l
nroaLR89jiYWIAfEp5uK+tvcM7woZiF+hjm7qO/UPu5Ll5RVvjfGybAYUQRg21MI
JgBbIkBWtjK7CJX16uLMiJ6+G9VTN1B1N0hyj3ibQSSq7Ctok1xsUlfEjayFYVtS
yKOnSbljykXqemBIHmMAZ3QK8X4X6uTydmZ/qq6UrwMNsVIySLOebcDv9irv+0Io
l+3kJPkdd5PbPMPeoggki6hxAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUv0SityIz
/0i6eTAorF+voCrc/9AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZCRUNGL0MwNjRGOEM4MTgzQzExRUJCOTQ1RUMwQkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQkVDRi9DMDY0RjhDODE4M0MxMUVCQjk0NUVDMEJDNEY5QUUwMi92MFNpdHlJ
el8waTZlVEFvckYtdm9DcmNfOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOdrMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ/4kMA8EAgAC
MAkDBwAgAQ3wuAAwDQYJKoZIhvcNAQELBQADggEBAM4dJDNDzAr8rDMngIOZ9p62
YIvyXt5F9krFgrWyx4LWxRGjS9ouVZEN7zuok87IPgQFFj8ePKFjo31C4DS4qYoT
6OHoRvHuWJK/pkbz2FcPM2J6tTOxFfG9Z0+Wg2OrYWPOEYYGNqVqI+KABN9h2q5B
nsgcKWIYjh2BPF1cKjYO7UE8sc/BuRxwe9pPTwlBdqBrgzb7Qiql8jY4w25jwSLy
IO4tN57mopZR4c1OMeWCifE+OXK3sM+TCC6xdV+wbzC98BFti1CyrSWMEz9QgAm0
JJlk2T4jEAw8TzMtElxKT8AiOu/9GrIT+QrlIjNrv1uARX/rciA3Chaf5QyL3lk=
-----END CERTIFICATE-----
Generated at Sat Mar 2 07:15:13 2024 by rpki-client on console-ams.rpki-client.org