Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hM5QgJLVCeD8TvukITIwQbB6lA.cer
File:                     5hM5QgJLVCeD8TvukITIwQbB6lA.cer (raw, json)
Hash identifier:          zMf86HekSZBXtxv0JeWvQh1VqI17g1fESV7LDD3/p3A=
Subject key identifier:   E6:13:39:42:02:4B:54:27:83:F1:3B:EE:90:84:C8:C1:06:C1:EA:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B53F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 06 Aug 2023 01:56:32 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 203.8.161.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111935 (0x1b53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  6 01:56:32 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9160175/serialNumber=E6133942024B542783F13BEE9084C8C106C1EA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:f7:d0:c2:a4:69:42:9e:ce:cf:91:67:fd:
                    f7:77:62:1d:88:a3:d9:8e:da:51:8e:dc:e8:9e:f0:
                    8c:7f:02:08:ad:e1:7a:20:62:0b:a1:6f:17:04:e5:
                    f9:3e:30:24:fc:a9:fc:f5:be:b0:0d:0d:ff:a2:92:
                    d0:28:e2:84:b2:b4:71:f7:17:93:87:04:7d:eb:9a:
                    0e:6d:fa:aa:8a:c0:2a:2b:6f:8b:64:5c:b5:2e:5a:
                    d2:cc:e1:87:a9:f4:11:e1:6c:2e:7a:77:15:0f:22:
                    ec:24:eb:71:87:55:a6:02:fc:25:33:fb:07:c8:4f:
                    d3:56:80:04:61:7e:ab:9f:55:ce:2a:74:ad:72:8a:
                    7a:d6:bf:5e:19:44:ad:a9:8d:f5:7e:ad:d8:6f:0a:
                    85:4a:2b:3c:59:4e:13:43:cd:a3:4d:19:92:9a:7b:
                    09:3d:dc:dc:36:ae:71:ba:ba:2c:0a:f3:fe:15:2d:
                    2d:6a:e3:6b:4d:74:33:ec:d3:12:5e:fb:5e:fc:a0:
                    69:f6:80:6c:b0:3d:80:3c:f0:34:4a:e0:d8:25:99:
                    21:b4:55:51:d4:c5:2e:c8:c7:22:a8:f3:c3:20:f7:
                    e9:0a:10:68:7a:d5:4a:d9:99:88:e8:78:e6:c2:75:
                    de:a9:b8:24:ea:e9:6a:33:dd:29:a1:7a:61:3e:42:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:39:42:02:4B:54:27:83:F1:3B:EE:90:84:C8:C1:06:C1:EA:50
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.8.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ae:54:c1:df:07:79:2f:a0:3f:fb:af:ee:60:43:26:bf:3d:
         c8:b8:00:0f:96:f2:78:0c:c3:bf:d2:c7:32:55:15:d4:03:33:
         14:96:b6:5e:02:e5:bf:5f:4f:7c:e7:c2:6a:90:97:11:de:8d:
         ca:c4:43:55:e5:58:f7:44:c7:36:77:e0:0a:b4:7e:b4:52:83:
         6c:88:ce:cb:e9:50:d0:0e:bd:40:c3:dd:a4:46:d8:f1:0b:c2:
         4c:2a:4b:91:63:37:7b:a5:d9:d7:1f:fd:34:09:10:0d:bd:44:
         69:2b:a5:9d:72:44:3c:9c:5f:76:39:fd:f8:23:48:5b:9b:eb:
         65:61:3f:55:27:c3:53:b3:3b:f8:0f:ce:49:37:14:32:da:e4:
         1e:dd:96:64:ec:40:0d:04:96:e6:63:a7:97:6a:b1:f0:cf:a2:
         c1:a3:04:a7:f6:50:80:09:86:03:6d:a4:91:a2:32:6a:51:5c:
         82:5e:65:b5:42:9b:c4:9a:dd:00:17:ee:85:25:57:3d:e4:a3:
         d7:a9:4e:17:8a:24:5c:a5:ac:0b:7b:bd:1f:a2:4e:a0:de:52:
         f7:dc:5d:3b:7b:16:a4:42:ed:7c:c4:71:fd:db:a3:4e:82:0c:
         e7:42:33:29:af:0c:54:ae:88:69:77:f2:03:d3:b6:d5:9a:34:
         a4:96:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----