Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
File:                     47HZfOdeyYZ3YetS4rDrCaqWuQY.cer (raw, json)
Hash identifier:          a/yHD4fky8H2tHF2Bnf1AU3Au2w8Q/wkPBHKyLrRITU=
Subject key identifier:   E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FA03
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 12:59:57 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 131466
                          IP: 103.248.228.0/23
                          IP: 2401:2120::/32

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 07:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129539 (0x1fa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 12:59:57 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:cb:23:30:64:ea:ae:0d:a7:4e:5d:c5:72:
                    35:e5:13:18:1d:b7:3b:1f:a1:b7:dc:5a:c2:64:19:
                    5b:0d:54:26:35:61:b6:0b:b0:9e:39:a7:80:e1:6d:
                    b0:d8:fd:3e:0c:81:b3:65:5b:4b:fd:f8:dc:a1:70:
                    03:d7:5d:93:0f:19:c1:12:41:b8:44:87:8e:75:92:
                    66:b2:8b:b1:0e:fa:d6:36:bf:3d:ba:81:1c:03:8e:
                    e6:42:99:0f:2f:3c:b7:33:34:fc:2d:94:f2:5c:e3:
                    27:1a:6f:51:d2:a8:d0:da:02:3c:82:b7:b1:93:86:
                    c3:c0:69:d1:96:14:a2:38:82:7d:74:dd:89:ec:3f:
                    7b:8b:f8:a3:d2:7a:cf:86:64:56:b4:55:5d:ee:eb:
                    62:6f:9f:90:82:88:af:3b:93:4d:2d:63:be:35:1c:
                    8d:00:48:d8:5e:7f:5d:8a:3e:d4:19:52:c5:d4:d0:
                    37:13:70:55:57:4e:0b:b3:83:fb:71:e2:fa:18:47:
                    df:76:bc:f9:92:35:11:10:ea:a9:e0:e5:ea:68:00:
                    29:7b:b9:23:52:83:d2:e5:c8:bb:e7:ec:e9:4d:46:
                    81:46:4c:0b:4a:73:65:6f:d1:5d:e9:9e:70:ee:88:
                    46:fe:d1:75:e2:70:c9:76:60:8b:e4:2c:20:6a:b4:
                    0e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131466

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.228.0/23
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:f4:a3:27:05:1b:79:b0:26:5e:2b:7c:8e:d3:84:d9:79:8a:
         28:ed:e6:25:22:6c:16:c0:13:bc:f4:08:59:42:07:af:47:e2:
         69:c4:27:9d:ae:b6:ce:73:e4:93:ea:d0:ad:0c:95:94:ad:88:
         da:bb:f6:7b:2e:be:92:c2:6e:35:a2:01:4e:bd:21:bc:30:5b:
         d7:37:fe:b9:20:3c:7e:cf:41:e8:73:b2:f2:a8:25:d4:b2:94:
         42:09:91:f0:af:15:ef:8f:d9:38:b6:b4:d5:a3:8e:07:c1:8c:
         cd:5b:54:a8:07:1c:01:17:56:e3:40:cc:02:b6:63:4f:b5:8e:
         7b:a8:b5:3c:41:ed:76:01:a7:c2:9b:32:d1:d3:42:53:71:12:
         dd:07:43:c5:e5:42:36:d4:15:3d:9a:f1:3c:01:a8:a1:c3:56:
         1c:02:20:2a:cf:20:96:54:f1:27:a1:54:61:1f:51:96:c8:b1:
         9b:3f:ea:c1:50:0b:a2:ad:3a:cb:5b:4b:49:0e:d2:5d:bf:29:
         a7:73:ec:14:88:2f:f8:6e:a1:83:9c:86:b1:b7:2b:14:97:6a:
         88:96:55:79:6e:a7:cc:42:2b:a0:47:16:0f:15:68:ee:c5:f7:
         a7:c8:7a:4f:e6:2b:65:18:12:2a:9c:8e:d4:ad:17:1a:d3:60:
         70:0b:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----