Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WgflIlV9NPG_2ZvGC01eZ_B65M.cer
File:                     0WgflIlV9NPG_2ZvGC01eZ_B65M.cer (raw, json)
Hash identifier:          dQ5mzxfk2M4V2puVKqubOFvSa4Sq7KuU2rTIy1YaKns=
Subject key identifier:   D1:68:1F:94:89:55:F4:D3:C6:FF:66:6F:18:2D:35:79:9F:C1:EB:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BE8B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/0WgflIlV9NPG_2ZvGC01eZ_B65M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 Sep 2023 13:40:12 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 151794
                          IP: 103.77.176.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114315 (0x1be8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 20 13:40:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A912294F/serialNumber=D1681F948955F4D3C6FF666F182D35799FC1EB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:aa:10:d8:6b:75:f2:08:d4:9c:1b:a4:22:
                    66:dc:4b:1f:0c:2b:cd:7c:ee:1d:cb:bf:62:94:33:
                    aa:ce:7b:df:c2:25:3d:51:eb:15:d8:fd:68:60:59:
                    cc:ba:26:1f:e5:ad:0d:2e:62:1c:89:13:97:2b:e3:
                    f4:e4:61:dc:89:37:28:f5:77:e3:56:51:5f:b8:46:
                    14:02:c5:2b:37:2c:25:5b:46:b6:1d:c7:b9:31:ff:
                    46:ab:ff:6f:07:37:df:e3:c7:32:cb:ae:21:5b:dc:
                    2c:4c:b3:4b:01:a5:d5:2a:7d:4c:ca:47:44:a3:bd:
                    79:6d:93:38:05:9f:ae:9f:e3:b9:3d:aa:b2:54:e2:
                    d7:db:bf:e9:ea:58:93:f1:4d:fb:13:0c:a1:b0:5f:
                    76:c4:8a:dd:1a:8a:59:e6:aa:6b:a7:0f:f2:29:9b:
                    64:4a:98:d7:0f:a4:a9:2a:04:21:39:86:be:d8:83:
                    fe:d1:88:08:54:e5:29:9c:64:41:be:3f:1b:06:32:
                    1c:ad:b7:df:ff:c9:2f:f2:3c:c5:74:1d:7d:74:d8:
                    d0:e2:03:79:b6:87:45:c9:39:21:37:de:39:f8:05:
                    f7:5c:15:7e:18:f1:18:2d:6d:d8:3f:67:ac:0f:97:
                    d5:ce:65:de:40:56:d3:aa:b4:59:e9:4a:95:e0:80:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:1F:94:89:55:F4:D3:C6:FF:66:6F:18:2D:35:79:9F:C1:EB:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/0WgflIlV9NPG_2ZvGC01eZ_B65M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151794

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:51:25:d9:33:94:c0:ae:8a:3f:64:0f:f6:aa:57:8a:f8:a4:
         79:77:17:1b:ee:6d:78:44:ff:73:c9:e7:81:64:41:66:6f:92:
         0c:98:d8:5c:11:c2:a3:d7:94:6f:2d:bb:bd:b4:eb:ac:2e:d1:
         1d:fc:9a:ce:3d:ea:7a:5f:a2:fa:35:1b:c4:ee:ef:fd:53:a8:
         24:fc:63:58:c3:2e:56:4f:ab:3a:04:a9:33:ba:65:a0:64:cc:
         a4:47:09:66:50:e1:25:65:84:dd:0a:0f:70:af:93:8b:d4:2f:
         0d:0f:9a:06:81:08:01:f5:84:ef:f5:61:29:eb:ca:a5:f3:11:
         e4:c5:ac:10:45:26:bc:3a:83:a6:29:8f:2b:8c:92:39:c2:04:
         f5:ee:94:0e:b9:b7:1b:7a:43:38:95:d8:11:92:f5:d8:28:30:
         97:85:97:88:b3:0b:ce:28:bb:ff:73:26:4b:b5:36:f5:b3:6a:
         09:d9:d9:f3:83:72:06:47:ba:f1:f7:70:02:1f:66:56:d2:05:
         33:54:c1:98:99:1b:9b:ce:c4:eb:55:21:1e:5d:86:02:70:e4:
         d0:d3:f4:45:b0:9b:19:a5:0e:79:28:39:05:0e:a2:5b:43:16:
         2f:e1:fb:d3:6e:df:df:ed:52:70:42:c5:0c:ba:12:34:49:5d:
         ed:0a:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----