Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer
File:                     xKVYu3wj5_co1s5omYU0FMh2f0c.cer (raw, json)
Hash identifier:          UbCdT732Zw/pU320LuncGsUxsA4CkqBPAmPO3Uv4t5I=
Subject key identifier:   C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020A26
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Aug 2024 18:01:27 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 136765
                          IP: 2404:5a40::/32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133670 (0x20a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 30 18:01:27 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:50:89:06:f2:70:5e:21:54:1a:ce:cb:1b:
                    39:f9:95:c2:5f:7c:af:d3:22:3c:c4:ef:0b:92:cb:
                    09:aa:9c:44:a3:85:f1:93:13:41:ad:da:11:0f:d7:
                    cd:91:ff:6d:d9:0b:a8:34:e7:15:0a:4b:37:7e:00:
                    c2:1e:c8:c3:f7:f5:de:ab:eb:06:2b:60:7d:0a:86:
                    c5:e1:b0:72:cf:df:85:b1:da:6b:52:96:55:ba:77:
                    0e:68:1c:cc:fe:7f:56:bf:ee:34:6f:6e:17:2e:44:
                    81:56:c5:6d:c8:ef:b8:86:b7:46:92:bb:09:e7:33:
                    49:52:5c:36:84:2c:ed:f2:cc:f7:52:ac:07:6c:dc:
                    d5:49:db:ba:28:6d:11:b9:6c:1e:1e:a3:dd:40:8b:
                    7f:78:b4:2f:fc:81:6d:ab:ac:af:3a:1a:62:e4:52:
                    53:63:12:db:10:c9:ff:a7:cc:c5:f2:fb:16:b2:9a:
                    ae:ef:b0:14:f2:94:e9:77:47:d6:e3:22:50:55:88:
                    64:9c:69:a9:cf:6c:c1:27:14:73:bb:52:fa:4b:3e:
                    e2:ee:df:eb:fa:0a:31:21:f1:65:2b:a8:09:78:c5:
                    8b:c0:88:68:ef:5f:2a:53:69:9d:5a:b6:b2:f2:9a:
                    91:73:7e:03:e9:1a:61:bc:82:ba:2f:57:fa:c9:37:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136765

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:43:f7:35:ca:10:19:b5:c2:12:74:cc:77:62:d3:3c:07:69:
         44:b0:56:e3:0f:40:f7:16:5c:f0:02:5b:d8:f1:f1:90:08:38:
         e5:c6:14:f9:31:67:04:6c:46:31:40:32:2e:45:f9:68:ca:bf:
         f2:bc:64:28:0f:1d:7a:de:e4:7f:b3:c7:db:14:cb:82:89:2d:
         6e:8f:50:94:02:58:5a:40:f1:b6:fe:1a:24:53:69:c5:0f:51:
         d4:cd:96:e9:35:13:5c:4a:d2:79:df:41:ee:e5:c6:07:74:f3:
         a3:0c:92:ed:0c:4e:52:ce:7e:7e:27:53:38:07:cc:17:45:b0:
         aa:38:52:26:bb:2e:37:f0:0e:32:8a:7a:6a:d5:d7:76:31:0c:
         e5:eb:63:fd:37:d8:3a:3f:39:3d:82:4e:69:c6:57:6d:f5:3a:
         24:29:9c:bf:9b:86:fc:84:44:06:f2:0c:12:d3:f0:9c:06:c8:
         44:c1:df:79:95:b1:5f:bc:d0:14:c2:c7:2b:89:8d:16:8e:d3:
         05:5a:1a:2e:87:1b:3b:b1:4d:b9:4c:7a:30:eb:74:f2:7e:da:
         5b:83:7b:e8:ac:f0:01:a3:f1:26:a1:56:cc:5d:1d:a8:7a:97:
         73:06:05:cd:aa:39:6e:79:5b:19:fd:43:33:41:13:fa:b9:44:
         67:7e:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 17:39:50 2024 by rpki-client on console-fra.rpki-client.org