Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wB3vfRVDVz3_A92iBOREns4z3Tc.cer
File:                     wB3vfRVDVz3_A92iBOREns4z3Tc.cer (raw, json)
Hash identifier:          VecEfThwiIvDkjL3+H3MSJ/TF0jtn4BxBMgjx3vp98g=
Subject key identifier:   C0:1D:EF:7D:15:43:57:3D:FF:03:DD:A2:04:E4:44:9E:CE:33:DD:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020F7C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A917447B0000/1/C01DEF7D1543573DFF03DDA204E4449ECE33DD37.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 14:05:53 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 153346
                          IP: 2001:df4:5140::/44

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 16:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135036 (0x20f7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 25 14:05:53 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A917447B0000/serialNumber=C01DEF7D1543573DFF03DDA204E4449ECE33DD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f6:4b:7b:8a:ca:3c:9d:dd:dd:89:63:5a:da:
                    dd:9f:27:87:7f:b6:5e:bb:34:09:dd:74:d7:a3:0e:
                    0d:45:03:87:ed:5c:5e:7a:0a:07:83:83:83:0a:bd:
                    06:dd:9d:06:b0:f0:91:d7:cd:d2:8f:e8:d9:07:8e:
                    d6:72:82:02:f8:6b:6d:ab:23:11:85:9c:a7:3e:e5:
                    d9:c9:53:49:bf:e1:fe:b3:9f:ae:20:99:51:95:65:
                    f5:dc:a5:7b:8c:8e:fc:3c:b3:6c:e9:9c:69:79:41:
                    20:fc:c2:76:ea:d8:2e:33:fd:d4:b7:27:de:74:5b:
                    f7:11:11:cc:16:18:66:f3:91:67:be:9a:43:0f:df:
                    fa:bd:dd:fd:4a:6c:1c:c3:a8:85:81:88:95:1b:4e:
                    4e:8e:31:3e:c8:12:42:e2:02:f3:28:f3:03:5a:c6:
                    21:b8:4b:a5:5d:f8:f9:8e:c6:ce:ea:74:23:1d:9e:
                    f9:ae:20:c5:9e:d6:a2:2a:15:75:5c:c8:60:1c:5c:
                    49:d8:b4:d2:0c:92:76:a9:6f:ca:84:a2:3e:97:88:
                    30:66:ee:42:cc:42:be:d4:ab:6d:44:18:50:c5:59:
                    3a:33:ca:19:67:78:f6:25:3b:30:c2:e5:7c:f2:14:
                    08:75:f4:11:89:0b:c5:81:09:d6:ae:ad:87:17:5d:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1D:EF:7D:15:43:57:3D:FF:03:DD:A2:04:E4:44:9E:CE:33:DD:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/C01DEF7D1543573DFF03DDA204E4449ECE33DD37.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153346

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:5140::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:ab:4b:f3:78:21:5a:db:53:98:a8:07:48:9e:4e:ef:5b:f7:
         e5:c0:16:17:b3:4b:3f:4a:ed:f0:12:5c:b6:81:aa:47:20:77:
         ef:d5:8a:b9:ec:73:b2:04:5f:a1:2b:13:07:2e:1a:68:2d:d8:
         96:de:3b:cf:46:a9:23:38:f5:ef:41:68:f7:de:5d:8c:5a:40:
         ef:6c:5f:ac:6b:3e:b8:71:f2:fd:b3:1b:8c:ff:55:6f:64:a2:
         dc:ad:d4:ea:5f:d8:3c:38:3f:5f:53:49:0a:bb:6a:3a:23:e9:
         ea:48:b6:64:7e:21:6e:bd:6f:7b:46:47:d7:ed:28:87:08:cb:
         13:d2:3d:08:40:85:14:6d:f2:c1:29:83:5e:54:04:5b:e0:f5:
         56:44:0e:20:89:3c:9d:f7:02:bb:e3:e5:53:97:f1:ee:70:0c:
         5d:76:47:0c:a5:63:79:d2:1b:87:6b:33:53:bf:b9:fe:7a:dd:
         f9:2b:bd:c6:5f:82:e9:1c:a3:ec:e8:7e:c3:33:91:c4:99:6c:
         4a:35:f9:da:ec:5a:58:db:e6:93:21:3f:dd:89:66:65:f7:1d:
         a7:4b:f5:82:6b:96:de:4f:dd:36:5d:4b:8a:58:25:e8:fd:15:
         ca:cf:b2:e9:80:ac:29:0c:43:c1:56:66:d8:ad:9f:e3:5f:6e:
         03:ff:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:26:44 2024 by rpki-client on console-ams.rpki-client.org