Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer
File:                     8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer (raw, json)
Hash identifier:          RT7geJWs2LsQbc2tDu+41oKqJeaJbwWn0EVzEwBZbXo=
Subject key identifier:   F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A7B2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 07:12:09 +0000
Certificate not after:    Sun 01 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 7607
                          IP: 103.178.98.0/23
                          IP: 2001:df0:3940::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108466 (0x1a7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 07:12:09 2023 GMT
            Not After : Oct  1 00:00:00 2023 GMT
        Subject: CN=A91E7C52/serialNumber=F0EF61C96FD69D1AF14E800C7C16C7A65D58E25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f3:06:a3:ec:6f:91:3e:fb:cf:38:17:19:1d:
                    d7:d4:6d:f9:e7:00:17:18:ae:33:67:81:aa:68:28:
                    08:eb:52:55:65:62:a3:05:ed:61:61:75:70:41:fa:
                    08:1b:2a:81:f8:2d:0f:18:42:56:47:11:fd:82:2a:
                    da:3d:ed:b8:81:b8:57:c9:2c:e9:3d:10:58:75:d1:
                    c8:8f:a7:da:d5:85:ab:55:02:69:15:72:3f:1e:91:
                    57:ff:b3:1c:3e:46:91:af:89:c8:e1:f5:05:63:e0:
                    f1:84:14:0c:fe:f6:4c:c3:39:85:b2:e4:a2:ad:e8:
                    50:01:54:1f:03:55:5c:e7:63:af:07:dc:f4:47:6f:
                    95:04:03:b1:5e:a9:f6:0b:c0:7e:6d:d0:5b:46:84:
                    7f:bf:07:48:50:00:41:98:bd:ad:47:9d:c7:20:63:
                    41:cd:19:b3:70:3e:b6:d2:7b:93:25:c7:28:e2:eb:
                    d6:34:4f:e3:21:97:46:64:e6:3f:16:bc:01:24:47:
                    da:c5:27:3e:7d:c3:bb:16:ec:50:af:0c:37:7f:cd:
                    4e:b3:19:58:7a:0d:ea:71:b6:47:ad:39:55:7d:d8:
                    46:80:04:91:1a:57:38:d1:07:dc:84:d9:1a:1d:a6:
                    2e:3b:b6:58:50:a6:7f:cd:bc:9c:b5:81:3e:36:e2:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7607

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.98.0/23
                IPv6:
                  2001:df0:3940::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:47:29:0c:84:2b:3e:2e:3b:cb:33:fb:3b:f3:b6:c1:dd:e8:
         9c:64:f1:49:a9:fe:06:03:04:d6:94:2a:93:44:d5:c7:d0:7f:
         a4:3a:9c:0c:ca:2a:aa:c0:9e:26:d1:fe:34:a8:0d:62:63:a5:
         a5:b1:5d:eb:7c:9d:2e:be:a2:8f:02:a0:8f:d9:85:d7:ff:d4:
         92:be:10:11:92:9d:80:b9:0f:e2:fd:b3:8f:28:20:dd:db:2f:
         de:f3:a7:80:1b:1e:82:01:f0:8f:d3:4d:32:1f:8f:89:8e:ff:
         46:7a:2a:0e:af:6d:e7:1d:00:28:28:a4:d6:40:be:47:36:7a:
         89:f0:b4:5a:30:22:9a:c2:37:eb:e9:e1:ae:b6:41:08:7c:8e:
         a0:27:92:c6:3d:89:1b:8a:76:0d:62:3b:a3:25:eb:54:6a:3f:
         b6:7f:c4:ec:66:63:ed:dc:9f:c7:d9:77:3a:53:ee:fa:d6:1c:
         3e:1c:56:49:26:d5:77:c0:1f:82:9f:fe:ec:f4:60:5f:fe:16:
         29:61:e0:34:1c:81:8c:57:c3:90:e9:9b:36:6a:04:ff:52:9c:
         7a:4b:10:ea:92:aa:2c:9d:2a:d9:3b:a9:99:5e:4a:8e:72:04:
         2b:00:d1:fc:ac:d2:d2:f6:c3:ab:98:e2:7a:b8:04:2a:2c:3c:
         44:28:b8:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----