Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP9Wtr1Om4Hmbco7v6cZHTWgsY8.cer
File:                     vP9Wtr1Om4Hmbco7v6cZHTWgsY8.cer (raw, json)
Hash identifier:          8S90nzS/g35jvuozLq+YBqJJLV29VbvgIlHgHuOZiCk=
Subject key identifier:   BC:FF:56:B6:BD:4E:9B:81:E6:6D:CA:3B:BF:A7:19:1D:35:A0:B1:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F8AF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://9ceb41facfe5/rpki/srg2/vP9Wtr1Om4Hmbco7v6cZHTWgsY8.mft
caRepository:             rsync://9ceb41facfe5/rpki/srg2/
Notify URL:               https://9ceb41facfe5/rrdp/notify.xml
Certificate not before:   Wed 12 Jun 2024 13:04:29 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 11:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129199 (0x1f8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 12 13:04:29 2024 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870007/serialNumber=BCFF56B6BD4E9B81E66DCA3BBFA7191D35A0B18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:a5:96:68:41:ee:53:af:6c:42:b2:d6:f3:
                    cd:85:c9:e2:fa:ac:25:ff:a3:1f:70:5b:f2:56:a2:
                    5b:d1:3f:d3:d5:ff:a7:20:b5:4d:7c:45:5a:2e:e6:
                    40:c3:b9:25:f5:6b:43:aa:69:15:b0:29:80:3a:7c:
                    c2:05:4c:62:fb:34:7b:c7:10:e9:38:e3:63:26:93:
                    a3:ae:52:78:d0:05:dd:a7:3a:ff:a5:bd:5a:96:9c:
                    3d:68:3f:68:7e:07:96:7f:ac:c4:d6:f6:5e:db:a5:
                    21:34:37:1e:9e:ca:b9:54:46:3e:4c:ce:f8:6b:ce:
                    de:d3:47:eb:5f:4b:7a:58:63:92:bf:ef:c8:59:07:
                    fb:9c:d4:71:39:06:f1:9d:17:04:ac:00:6e:23:41:
                    18:13:64:c8:55:68:97:27:07:56:86:32:19:ac:41:
                    af:8d:a7:72:0e:77:11:ec:6d:bc:b6:60:f1:b6:f6:
                    69:e8:e1:68:71:c9:e3:fc:52:3d:19:54:67:11:1c:
                    8e:87:63:81:43:93:7e:c0:bb:61:bc:57:b8:09:55:
                    fe:da:54:eb:a0:01:f6:f5:28:a4:0d:08:5d:51:43:
                    55:dc:05:e2:39:dc:16:a8:5c:60:bc:3f:a2:73:ca:
                    f9:06:5e:ce:f3:ee:d2:46:d2:23:56:9d:0e:8e:08:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:56:B6:BD:4E:9B:81:E6:6D:CA:3B:BF:A7:19:1D:35:A0:B1:8F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://9ceb41facfe5/rpki/srg2/
                RPKI Manifest - URI:rsync://9ceb41facfe5/rpki/srg2/vP9Wtr1Om4Hmbco7v6cZHTWgsY8.mft
                RPKI Notify - URI:https://9ceb41facfe5/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:dd:53:bd:8a:40:0e:f4:73:ba:43:5b:83:e1:86:ee:80:44:
         a2:19:a2:ad:97:63:ea:81:65:b6:71:3c:28:ec:1a:39:31:13:
         5c:3b:f4:fd:79:b0:3c:1e:ea:50:36:f9:8e:b1:79:09:47:da:
         86:ba:a3:06:a4:bd:c6:20:d3:05:1a:40:06:8c:0b:15:56:44:
         ac:5a:fb:8b:34:71:56:2f:67:56:84:a1:9a:50:7b:5b:ed:58:
         27:cf:01:53:22:d1:ed:d1:ed:6b:50:ad:c3:2d:5e:ba:08:df:
         37:e8:e1:ae:fc:4a:34:28:4d:68:89:19:2e:aa:cd:e9:99:1b:
         09:1d:7b:18:8d:02:f7:22:fa:05:4a:fb:8f:98:05:fb:84:12:
         2d:a7:8d:47:b5:c7:f8:85:34:e9:aa:ea:d5:7f:55:48:10:ad:
         4d:ce:fc:a9:fd:62:d7:99:e9:12:cf:51:2c:17:26:49:1c:95:
         8c:22:fb:cb:4e:95:44:3a:77:fb:bf:bf:f0:2e:99:3e:17:a3:
         bb:a8:0e:77:71:55:9a:05:a9:30:84:73:e1:e5:9b:ad:84:eb:
         36:bc:81:36:32:9e:0b:94:c0:49:40:6f:a8:f1:b4:4f:76:95:
         28:01:f5:89:cd:59:0c:12:a4:cc:86:f4:37:a4:96:72:ef:a2:
         45:fe:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org