Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9Y6V-kAwid79Bf9qzMreMr5I-k.cer
File:                     -9Y6V-kAwid79Bf9qzMreMr5I-k.cer (raw, json)
Hash identifier:          TykpqxMSybpULeuwtQVBulCbXp0utJmgakJOZCxZQto=
Subject key identifier:   FB:D6:3A:57:E9:00:C2:27:7B:F4:17:FD:AB:33:2B:78:CA:F9:23:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019579
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/-9Y6V-kAwid79Bf9qzMreMr5I-k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Apr 2023 00:34:09 +0000
Certificate not after:    Tue 01 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 135650

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103801 (0x19579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  2 00:34:09 2023 GMT
            Not After : Aug  1 00:00:00 2023 GMT
        Subject: CN=A9117A99/serialNumber=FBD63A57E900C2277BF417FDAB332B78CAF923E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:a4:da:2c:19:5b:f7:f1:ea:50:d3:04:42:
                    b9:14:69:e5:27:81:74:2c:c5:a4:39:d3:37:8f:2c:
                    31:04:23:84:f2:4e:9f:28:f9:0c:fb:f8:30:42:10:
                    58:88:8e:33:d7:b0:18:56:91:86:66:01:75:e9:00:
                    0d:33:69:4c:5a:c0:ce:30:63:c5:ac:e6:a1:bf:24:
                    71:9f:54:c6:5a:a1:b8:63:ac:45:f5:ef:a7:34:6f:
                    c7:fe:ab:4c:03:21:18:e1:f7:44:cd:2d:0d:51:39:
                    16:ea:11:ca:39:81:0a:52:00:aa:02:f9:fd:99:2f:
                    f4:c8:9e:51:0f:5d:9e:a7:b6:8e:f2:e9:c5:b9:0c:
                    69:e0:c7:59:15:57:94:30:76:70:59:9e:03:48:9e:
                    42:20:fb:a0:44:49:07:65:18:5a:a9:85:51:fc:49:
                    6d:56:47:36:8f:4e:1d:48:2f:78:7e:cd:ff:48:bf:
                    99:d3:59:dd:47:60:c6:55:0f:59:31:a3:e0:4f:cf:
                    0e:31:d4:f1:73:b0:39:ea:72:12:05:89:bf:cb:cd:
                    30:d4:ae:85:e5:05:07:a5:8f:17:13:45:6a:6e:1c:
                    08:8f:05:cc:62:63:12:e6:38:19:ef:a1:78:da:b8:
                    de:28:a3:2d:02:b3:60:88:29:10:7d:e0:90:39:ea:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:3A:57:E9:00:C2:27:7B:F4:17:FD:AB:33:2B:78:CA:F9:23:E9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117A99/715A5556D9B711EBB1D53B20C4F9AE02/-9Y6V-kAwid79Bf9qzMreMr5I-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135650

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:dc:8f:44:56:29:f4:84:63:42:d7:03:2c:ad:25:1b:bd:
         7a:4f:fc:3b:23:4f:e7:82:fd:3b:c7:9e:f7:3c:d0:8a:a4:22:
         77:ec:13:9a:b6:a4:48:ba:dd:95:7c:6f:7a:24:e9:fe:e8:9e:
         cc:1c:e4:b0:bb:27:eb:42:b0:dc:05:09:fe:e6:a7:ff:04:60:
         fd:2c:2c:6a:4d:a1:7f:8e:59:de:37:cb:1e:7e:98:fc:ea:16:
         b1:ac:af:03:29:f6:d3:70:38:cf:ed:40:a3:f2:d6:66:d3:c6:
         97:8c:46:a0:ef:e2:bc:f8:bb:84:24:47:36:c9:30:fa:41:46:
         13:03:55:11:e2:5e:28:c9:0d:54:ce:db:c4:f8:cd:39:95:1f:
         03:fa:e8:6b:6b:1d:0f:8f:6f:78:fc:2e:66:5d:4b:74:42:02:
         cf:17:16:20:d9:d7:28:1c:d0:13:97:1c:e3:00:ae:da:9d:50:
         5a:7b:2b:4e:de:90:bc:b2:72:2f:b9:7d:70:a5:6b:45:99:41:
         8e:c7:6b:45:4a:7c:21:1f:fe:40:0a:8d:9b:b5:05:07:a9:31:
         7b:e3:9c:45:4f:ed:87:2a:b7:27:11:ce:9f:da:5b:9c:e0:cc:
         67:36:5a:f0:7a:a7:cc:05:16:31:97:9e:d2:91:a5:0e:8c:cb:
         2a:2e:7d:30
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAZV5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDQwMjAwMzQwOVoXDTIzMDgwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTdBOTkxMTAvBgNVBAUTKEZCRDYzQTU3RTkwMEMyMjc3QkY0MTdG
REFCMzMyQjc4Q0FGOTIzRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfo6TaLBlb9/HqUNMEQrkUaeUngXQsxaQ50zePLDEEI4TyTp8o+Qz7+DBCEFiI
jjPXsBhWkYZmAXXpAA0zaUxawM4wY8Ws5qG/JHGfVMZaobhjrEX176c0b8f+q0wD
IRjh90TNLQ1RORbqEco5gQpSAKoC+f2ZL/TInlEPXZ6nto7y6cW5DGngx1kVV5Qw
dnBZngNInkIg+6BESQdlGFqphVH8SW1WRzaPTh1IL3h+zf9Iv5nTWd1HYMZVD1kx
o+BPzw4x1PFzsDnqchIFib/LzTDUroXlBQeljxcTRWpuHAiPBcxiYxLmOBnvoXja
uN4ooy0Cs2CIKRB94JA56l7NAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQU+9Y6V+kA
wid79Bf9qzMreMr5I+kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3QTk5LzcxNUE1NTU2RDlCNzExRUJCMUQ1M0IyMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExN0E5OS83MTVBNTU1NkQ5QjcxMUVCQjFENTNCMjBDNEY5QUUwMi8tOVk2Vi1r
QXdpZDc5QmY5cXpNcmVNcjVJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhHiMA0GCSqGSIb3DQEBCwUAA4IBAQBqBNyPRFYp9IRjQtcDLK0lG716
T/w7I0/ngv07x573PNCKpCJ37BOatqRIut2VfG96JOn+6J7MHOSwuyfrQrDcBQn+
5qf/BGD9LCxqTaF/jlneN8sefpj86haxrK8DKfbTcDjP7UCj8tZm08aXjEag7+K8
+LuEJEc2yTD6QUYTA1UR4l4oyQ1UztvE+M05lR8D+uhrax0Pj294/C5mXUt0QgLP
FxYg2dcoHNATlxzjAK7anVBaeytO3pC8snIvuX1wpWtFmUGOx2tFSnwhH/5ACo2b
tQUHqTF745xFT+2HKrcnEc6f2luc4MxnNlrweqfMBRYxl57SkaUOjMsqLn0w
-----END CERTIFICATE-----