Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uq93hmQ3VMBiZjIok5Zw2YBhSg.cer
File:                     2uq93hmQ3VMBiZjIok5Zw2YBhSg.cer (raw, json)
Hash identifier:          L2OftSDILTqyzn+u9hIvR6mpbaOI5+QPEzbZFGA2XnY=
Subject key identifier:   DA:EA:BD:DE:19:90:DD:53:01:89:98:C8:A2:4E:59:C3:66:01:85:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014F97
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/2uq93hmQ3VMBiZjIok5Zw2YBhSg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Apr 2022 08:36:59 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 203.18.30.0/24
                          IP: 2001:df0:a340::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85911 (0x14f97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 13 08:36:59 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A9154DE6/serialNumber=DAEABDDE1990DD53018998C8A24E59C366018528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:9d:fd:da:32:9b:e8:c6:e3:94:b1:8a:69:
                    df:02:f3:8a:7a:9a:72:24:cc:35:3c:02:06:fe:8d:
                    b8:d4:01:38:fa:76:d4:3b:ff:57:32:30:e6:7a:57:
                    4a:23:b6:87:90:a1:b8:d5:7f:c3:f9:36:be:52:29:
                    7b:18:fe:70:8d:c3:75:9f:ec:6e:4b:a1:cf:c9:df:
                    1f:a6:fe:85:b3:99:1c:93:63:42:80:92:62:2b:0b:
                    b8:c4:90:57:f4:7f:ca:d2:28:d6:41:6b:09:82:77:
                    df:ea:4e:9c:3d:03:2d:49:87:39:8c:1d:ef:45:da:
                    d5:45:8f:fb:7f:e8:3c:9c:41:ae:7c:60:3f:26:1d:
                    d0:33:32:b1:e1:57:f2:d3:41:7f:fe:57:ce:ed:db:
                    b5:6d:0e:fe:fc:7f:ae:02:9d:b2:7c:66:b0:04:11:
                    2c:7d:80:19:78:5c:b8:df:8b:85:82:ef:2d:e1:94:
                    85:4f:0b:a0:13:fe:9b:d3:10:bc:c8:55:3b:4b:32:
                    0a:a2:b2:ef:40:7b:68:39:e9:3f:1f:58:c0:99:f2:
                    b7:59:9f:bf:af:d0:89:ad:bf:42:d7:7c:08:ba:af:
                    8a:39:54:d0:63:82:69:48:c3:8a:20:cb:51:4b:31:
                    7c:67:88:68:bf:ee:3a:b0:09:05:4c:79:00:e8:81:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EA:BD:DE:19:90:DD:53:01:89:98:C8:A2:4E:59:C3:66:01:85:28
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/2uq93hmQ3VMBiZjIok5Zw2YBhSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.30.0/24
                IPv6:
                  2001:df0:a340::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:a5:e8:e3:50:04:a5:ef:18:76:0a:c2:d2:5d:44:0a:c1:
         57:03:99:b7:53:9e:7b:d6:61:98:f8:a1:48:05:65:1c:c6:39:
         6e:9d:9e:e3:3d:58:e1:f7:ee:6f:c8:6b:86:c5:60:18:2d:67:
         e2:be:0e:cc:7e:4d:c9:8c:75:e8:9f:ed:c6:f9:c6:02:1e:cd:
         8b:4f:a0:3e:8b:22:2a:63:55:7d:2d:9d:8b:ae:13:60:f8:7e:
         73:23:a2:aa:aa:a3:3e:8a:74:bf:81:8f:e1:a5:43:0e:e1:f5:
         32:d4:14:2e:a9:e0:52:e3:25:61:aa:90:53:bc:d7:03:fe:d8:
         95:6e:8c:a5:59:3b:27:04:71:9c:ea:b7:13:5c:42:df:01:07:
         1a:4e:37:fa:ea:c6:bc:45:d8:79:f3:80:15:c5:5e:8e:23:c5:
         9f:e2:7c:79:76:b1:8c:54:fe:97:9d:32:33:33:d2:52:3a:df:
         e5:07:5d:43:56:f2:53:8d:73:1c:d4:6a:37:dd:d8:e8:46:51:
         ef:da:fa:a9:9b:02:4f:e5:d8:5e:b6:85:82:e8:f6:16:b5:6d:
         50:ba:e4:a2:0b:3f:f9:4d:d0:69:35:e6:ec:c7:28:4d:e3:73:
         8c:90:eb:b1:62:c4:57:95:08:d1:e8:8b:e1:ca:bb:ca:90:72:
         6a:63:20:2e
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAU+XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDQxMzA4MzY1OVoXDTIzMDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTRERTYxMTAvBgNVBAUTKERBRUFCRERFMTk5MERENTMwMTg5OThD
OEEyNEU1OUMzNjYwMTg1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOZJ392jKb6MbjlLGKad8C84p6mnIkzDU8Agb+jbjUATj6dtQ7/1cyMOZ6V0oj
toeQobjVf8P5Nr5SKXsY/nCNw3Wf7G5Loc/J3x+m/oWzmRyTY0KAkmIrC7jEkFf0
f8rSKNZBawmCd9/qTpw9Ay1JhzmMHe9F2tVFj/t/6DycQa58YD8mHdAzMrHhV/LT
QX/+V87t27VtDv78f64CnbJ8ZrAEESx9gBl4XLjfi4WC7y3hlIVPC6AT/pvTELzI
VTtLMgqisu9Ae2g56T8fWMCZ8rdZn7+v0Imtv0LXfAi6r4o5VNBjgmlIw4ogy1FL
MXxniGi/7jqwCQVMeQDogTQ5AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU2uq93hmQ
3VMBiZjIok5Zw2YBhSgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0REU2L0UyNzkzNURFQ0ZCRTExRUI4RTY2NDExNUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NERFNi9FMjc5MzVERUNGQkUxMUVCOEU2NjQxMTVDNEY5QUUwMi8ydXE5M2ht
UTNWTUJpWmpJb2s1WncyWUJoU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBADLEh4wDwQCAAIwCQMHACABDfCjQDANBgkqhkiG9w0BAQsFAAOC
AQEASk6l6ONQBKXvGHYKwtJdRArBVwOZt1Oee9ZhmPihSAVlHMY5bp2e4z1Y4ffu
b8hrhsVgGC1n4r4OzH5NyYx16J/txvnGAh7Ni0+gPosiKmNVfS2di64TYPh+cyOi
qqqjPop0v4GP4aVDDuH1MtQULqngUuMlYaqQU7zXA/7YlW6MpVk7JwRxnOq3E1xC
3wEHGk43+urGvEXYefOAFcVejiPFn+J8eXaxjFT+l50yMzPSUjrf5QddQ1byU41z
HNRqN93Y6EZR79r6qZsCT+XYXraFguj2FrVtULrkogs/+U3QaTXm7McoTeNzjJDr
sWLEV5UI0eiL4cq7ypByamMgLg==
-----END CERTIFICATE-----