Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
File:                     DcieXpxIj0GsgRFjdFTGVLetqPI.cer (raw, json)
Hash identifier:          i2OjNY4aIBGNa5EIDAYazyzyx7piEbN3xFGjoCS/gyg=
Subject key identifier:   0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017E47
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 07 Dec 2022 01:14:53 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 2001:df5:4e00::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97863 (0x17e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  7 01:14:53 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:94:1a:22:12:da:d5:33:3e:0d:17:ce:cb:
                    4e:37:46:6b:a0:64:44:3e:5a:f1:cb:9c:7d:19:6d:
                    00:67:44:27:7f:d4:ed:29:bf:e8:f1:5f:89:6c:9c:
                    a5:88:3e:4d:0a:e2:15:3d:dc:ac:46:8b:64:f6:f4:
                    f8:2b:70:48:f6:50:e8:d7:47:60:93:b7:4f:34:ae:
                    1d:7a:57:60:e7:f4:ec:f7:9d:73:87:65:54:78:4e:
                    90:c4:72:68:03:8b:0d:60:07:1f:86:ea:52:2f:9b:
                    c1:8c:ae:98:ad:b3:cf:a4:aa:e5:30:b6:3b:b2:95:
                    d1:44:5d:54:27:4e:a3:92:1b:d6:f8:b5:e7:42:77:
                    c3:92:1d:6a:b4:ae:3e:ba:a6:6d:2f:5c:a0:a3:6b:
                    13:a5:d6:14:58:2c:83:e6:98:17:6e:75:40:46:28:
                    ab:ec:6d:48:93:88:33:60:b2:3a:38:1a:74:5f:76:
                    7e:22:69:6d:aa:a4:90:ed:f4:1e:14:40:b0:41:92:
                    9e:4f:a3:90:a3:ef:cc:59:be:13:e0:11:4a:42:f9:
                    77:67:f5:26:cc:c5:6c:59:ce:f4:e0:56:a9:15:ce:
                    aa:70:70:10:5e:40:46:22:c2:a6:d4:75:07:e0:ac:
                    17:f4:a9:37:e4:88:af:5e:59:f0:47:69:7a:0b:3a:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:4e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:d8:5e:b7:43:14:ab:6c:0a:bf:8a:9d:3e:f9:03:63:dd:
         69:c9:69:05:de:50:96:29:dd:02:29:7a:c5:4b:e6:c4:a9:d9:
         d0:33:21:44:d6:4a:1d:61:70:44:4c:a4:4d:65:3b:02:ce:aa:
         3b:a8:aa:31:d0:af:59:38:6c:53:3b:a6:9d:fb:1d:46:2b:c8:
         81:ba:e7:d7:da:6a:7c:e5:1c:d3:3a:16:14:3f:ff:f5:27:4f:
         61:f1:96:c5:9c:b7:f2:3d:1d:e5:b8:28:c3:89:98:4b:c5:d4:
         02:9c:73:aa:94:01:a6:97:02:25:c0:f3:b7:79:6d:b4:cb:e7:
         c1:c0:e2:9d:d8:23:9d:4a:c2:a9:97:99:06:96:0e:e7:b0:43:
         4a:76:d0:a3:39:22:18:75:67:e2:42:40:c0:54:89:22:a8:f2:
         ab:ca:10:1a:89:24:a0:3a:2c:d2:d6:4c:8e:ec:74:53:02:f1:
         56:f9:32:57:27:21:d8:28:54:2d:69:d2:39:97:2f:ba:fa:44:
         d3:2f:15:61:fa:c2:25:10:33:19:09:e8:ed:3d:d3:1e:75:63:
         d1:45:09:47:72:0d:8f:ce:66:69:f1:25:d6:73:af:9e:12:e0:
         02:a2:e5:84:ad:ac:f2:29:a2:2d:18:8e:e0:4f:00:e1:9c:c7:
         1f:86:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----