Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer
File:                     zHLheXsiBNjsaeyYxBc5zIxmTJw.cer (raw, json)
Hash identifier:          QlaodVusQR1W+mAoyDwEyo/uS88J0E0jfxvkk+1EUy4=
Subject key identifier:   CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02116E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 06:45:02 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 134585
                          IP: 2403:5bc0::/32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 19:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135534 (0x2116e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  2 06:45:02 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:0a:53:51:5e:67:51:5d:23:ab:be:9b:ad:
                    56:07:e3:8b:8f:8b:00:41:68:9b:ab:49:3e:46:1d:
                    42:67:b9:e6:b5:17:03:96:82:f1:2f:f4:e0:da:b4:
                    32:27:1e:70:23:b0:ad:03:82:ec:e6:cc:af:f2:0e:
                    e7:8b:db:69:2e:52:74:d3:c9:e3:ae:ec:88:e7:b2:
                    89:ab:96:52:9c:71:9e:f0:a6:cf:82:61:8f:25:99:
                    53:9f:06:a3:2d:8e:32:a0:52:ca:41:f0:58:ab:02:
                    53:37:b0:9b:36:c5:ac:fa:33:74:75:67:23:53:b1:
                    3e:22:dd:6b:e8:82:05:95:ff:93:35:ea:8c:ae:21:
                    7e:9a:1b:1f:c9:86:fe:ce:f5:f0:20:12:71:e6:3d:
                    d1:b0:4b:77:ed:a6:3f:de:85:f2:88:23:7f:ab:fc:
                    15:d0:ae:de:de:c6:42:22:0e:6d:ca:d0:b6:05:9a:
                    ea:d1:04:f4:38:43:57:f7:01:84:59:10:56:0a:df:
                    7d:71:f3:81:75:dd:58:44:12:10:6e:f0:f4:9b:e6:
                    e4:1a:e0:85:10:ce:77:72:1d:6a:9c:2e:4f:90:ea:
                    d2:72:27:9e:fe:de:c2:52:c1:16:43:a5:b8:bb:ae:
                    89:e4:b0:64:84:1e:48:b6:06:83:bb:f7:8c:cd:a2:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134585

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:57:54:8b:49:8e:34:48:06:1f:43:38:80:6f:0c:cc:6d:85:
         f0:78:f2:fc:86:27:31:af:de:ad:f4:4b:88:82:2c:27:7d:1d:
         23:ee:11:ad:b2:db:85:d9:44:bb:d6:55:c7:68:a9:e9:c8:90:
         83:18:cc:10:fd:75:1a:40:b3:4c:c6:41:2b:aa:46:73:27:c8:
         08:c7:f1:54:54:74:a5:cf:46:69:41:a2:61:4c:f4:a0:dc:bb:
         ca:7d:f4:95:2d:49:80:fd:9f:b4:a3:4d:18:a9:f1:27:74:c5:
         6c:8d:d7:d4:aa:f1:27:7c:15:bc:22:e4:34:85:d4:d9:6d:6d:
         c7:17:03:e4:64:b5:12:3d:55:20:e8:32:e7:bb:3c:72:e7:12:
         ac:03:69:df:b0:66:fb:99:0c:5b:e0:0e:fb:9c:49:8f:12:fa:
         ab:db:70:96:1a:15:7d:9a:1c:2c:f6:30:f9:8f:f5:e3:10:71:
         7f:33:e4:82:5f:40:b9:5a:a1:27:24:35:dd:ee:0c:fe:ec:8c:
         b9:67:55:39:96:5e:5f:81:83:99:37:4a:c1:f5:5e:52:41:ea:
         54:b4:cc:5e:94:f7:60:f4:4e:db:72:0c:d8:15:0a:46:c1:18:
         09:c6:9f:de:77:5c:fe:9d:b4:69:df:3d:8a:e7:5a:16:5d:aa:
         f6:58:d9:ea
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAhFuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwMjA2NDUwMloXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzcyNUYxMTAvBgNVBAUTKENDNzJFMTc5N0IyMjA0RDhFQzY5RUM5
OEM0MTczOUNDOEM2NjRDOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCt4gpTUV5nUV0jq76brVYH44uPiwBBaJurST5GHUJnuea1FwOWgvEv9ODatDIn
HnAjsK0DguzmzK/yDueL22kuUnTTyeOu7IjnsomrllKccZ7wps+CYY8lmVOfBqMt
jjKgUspB8FirAlM3sJs2xaz6M3R1ZyNTsT4i3WvoggWV/5M16oyuIX6aGx/Jhv7O
9fAgEnHmPdGwS3ftpj/ehfKII3+r/BXQrt7exkIiDm3K0LYFmurRBPQ4Q1f3AYRZ
EFYK331x84F13VhEEhBu8PSb5uQa4IUQzndyHWqcLk+Q6tJyJ57+3sJSwRZDpbi7
ronksGSEHki2BoO794zNoo13AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUzHLheXsi
BNjsaeyYxBc5zIxmTJwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3MjVGLzRFOEQyQjVDNUQ0NDExRUE5NEM5N0QxMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNzI1Ri80RThEMkI1QzVENDQxMUVBOTRDOTdEMTFDNEY5QUUwMi96SExoZVhz
aUJOanNhZXlZeEJjNXpJeG1USncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg25MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJANbwDANBgkq
hkiG9w0BAQsFAAOCAQEAZ1dUi0mONEgGH0M4gG8MzG2F8Hjy/IYnMa/erfRLiIIs
J30dI+4RrbLbhdlEu9ZVx2ip6ciQgxjMEP11GkCzTMZBK6pGcyfICMfxVFR0pc9G
aUGiYUz0oNy7yn30lS1JgP2ftKNNGKnxJ3TFbI3X1KrxJ3wVvCLkNIXU2W1txxcD
5GS1Ej1VIOgy57s8cucSrANp37Bm+5kMW+AO+5xJjxL6q9twlhoVfZocLPYw+Y/1
4xBxfzPkgl9AuVqhJyQ13e4M/uyMuWdVOZZeX4GDmTdKwfVeUkHqVLTMXpT3YPRO
23IM2BUKRsEYCcaf3ndc/p20ad89iudaFl2q9ljZ6g==
-----END CERTIFICATE-----
Generated at Mon Oct 14 21:08:42 2024 by rpki-client on console-fra.rpki-client.org