Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lajkH6X1mpAJtE-jUsaxb8RQEE.cer
File:                     9lajkH6X1mpAJtE-jUsaxb8RQEE.cer (raw, json)
Hash identifier:          +7F6S6pjastrmXqn91krhz4JL6PUcL1WOJ20s8RU4Dc=
Subject key identifier:   F6:56:A3:90:7E:97:D6:6A:40:26:D1:3E:8D:4B:1A:C5:BF:11:40:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020018
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/9lajkH6X1mpAJtE-jUsaxb8RQEE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:56:56 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131096 (0x20018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 13:56:56 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=F656A3907E97D66A4026D13E8D4B1AC5BF114041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:f7:4b:c9:c5:1b:69:be:7a:b2:2a:88:58:
                    b5:2d:c5:62:d5:9a:75:63:3a:d7:be:b7:a2:9c:af:
                    95:85:6d:31:2a:ec:65:36:ac:4a:a8:8b:51:dc:0f:
                    16:fb:4b:0e:28:33:53:a5:43:4c:06:6f:64:0f:8f:
                    aa:c0:a6:27:eb:6d:de:96:b5:3c:f3:b3:e0:60:13:
                    31:48:cd:05:f6:cf:95:dd:68:12:de:75:fa:f2:4d:
                    8d:d6:6c:58:d1:09:a2:21:ef:96:fa:a3:51:1c:ae:
                    34:bf:71:76:b2:e7:e5:76:db:17:38:ce:cf:65:8c:
                    8a:c0:04:21:fa:60:98:c5:6c:f7:62:ef:0d:95:d7:
                    fd:fe:68:d0:e7:7f:c0:9a:aa:6b:fb:65:36:46:49:
                    14:43:f3:06:1a:d1:c0:a1:60:9b:1e:f9:4c:39:76:
                    91:dc:80:21:10:d4:1d:a4:91:89:26:39:90:cc:64:
                    d5:e4:04:d1:20:fd:d0:77:d2:91:c2:1a:80:30:d1:
                    67:56:60:71:84:58:33:f5:37:d0:1c:b4:10:f2:2d:
                    41:c5:bb:24:e2:ca:7e:d7:8b:03:71:2b:cd:e5:4c:
                    f3:e4:cb:98:48:c3:f2:e0:be:77:7c:19:f9:17:7e:
                    dc:23:17:92:b3:bc:16:3a:2b:0f:9a:47:8b:22:26:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:A3:90:7E:97:D6:6A:40:26:D1:3E:8D:4B:1A:C5:BF:11:40:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/9lajkH6X1mpAJtE-jUsaxb8RQEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:75:89:85:9d:5f:c9:d6:2a:6b:16:66:0c:cc:e1:69:15:
         48:89:4f:ac:55:44:d4:b5:ce:11:11:5c:29:4c:3a:df:14:2e:
         33:db:c3:79:cb:2f:67:83:bf:0f:ca:c0:6b:30:d0:82:b9:c9:
         a6:33:10:08:06:1b:81:ec:ab:bc:c2:f3:54:f3:db:e3:7c:18:
         df:27:ee:ca:5a:88:96:6c:92:cf:64:e9:2e:ef:59:e3:c2:e5:
         61:23:dc:b3:3e:e0:b0:b2:62:e2:62:4d:24:9d:86:fc:3b:21:
         10:87:e6:c9:f1:9b:7e:f7:2b:56:00:cf:06:1e:55:f1:1a:9c:
         35:bd:c1:1e:d9:de:bc:ea:0d:94:6b:49:6b:5c:02:d8:71:ae:
         1b:4c:b4:1b:dc:64:c8:b1:36:c7:64:76:74:ea:f0:8a:6e:f6:
         b8:f1:b0:ef:7d:7b:4e:b4:3c:3e:cf:57:00:3a:12:d5:f9:07:
         5b:06:63:e4:df:75:97:1e:3c:fd:33:d3:55:81:c0:52:0f:cf:
         69:82:d2:9d:6b:b5:37:81:c4:45:a6:38:46:c5:73:59:e4:55:
         f2:c5:ea:ae:50:63:f6:49:4a:fa:79:42:be:28:2d:c1:44:8a:
         a5:d8:0a:ab:c7:7a:78:da:6a:ad:bc:73:8e:bc:e4:69:a5:80:
         27:21:14:b4
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAgAYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDcxNTEzNTY1NloXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjBEODgxMTAvBgNVBAUTKEY2NTZBMzkwN0U5N0Q2NkE0MDI2RDEz
RThENEIxQUM1QkYxMTQwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOXvdLycUbab56siqIWLUtxWLVmnVjOte+t6Kcr5WFbTEq7GU2rEqoi1HcDxb7
Sw4oM1OlQ0wGb2QPj6rApifrbd6WtTzzs+BgEzFIzQX2z5XdaBLedfryTY3WbFjR
CaIh75b6o1EcrjS/cXay5+V22xc4zs9ljIrABCH6YJjFbPdi7w2V1/3+aNDnf8Ca
qmv7ZTZGSRRD8wYa0cChYJse+Uw5dpHcgCEQ1B2kkYkmOZDMZNXkBNEg/dB30pHC
GoAw0WdWYHGEWDP1N9ActBDyLUHFuyTiyn7XiwNxK83lTPPky5hIw/Lgvnd8GfkX
ftwjF5KzvBY6Kw+aR4siJldDAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU9lajkH6X
1mpAJtE+jUsaxb8RQEEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIwRDg4LzQxQkRDODYyNDI2NjExRUZBMTcyQzM0REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMEQ4OC80MUJEQzg2MjQyNjYxMUVGQTE3MkMzNERDNEY5QUUwMi85bGFqa0g2
WDFtcEFKdEUtalVzYXhiOFJRRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlSPMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyjFyMA0EAgAC
MAcDBQAkAZhgMA0GCSqGSIb3DQEBCwUAA4IBAQC2+3WJhZ1fydYqaxZmDMzhaRVI
iU+sVUTUtc4REVwpTDrfFC4z28N5yy9ng78PysBrMNCCucmmMxAIBhuB7Ku8wvNU
89vjfBjfJ+7KWoiWbJLPZOku71njwuVhI9yzPuCwsmLiYk0knYb8OyEQh+bJ8Zt+
9ytWAM8GHlXxGpw1vcEe2d686g2Ua0lrXALYca4bTLQb3GTIsTbHZHZ06vCKbva4
8bDvfXtOtDw+z1cAOhLV+QdbBmPk33WXHjz9M9NVgcBSD89pgtKda7U3gcRFpjhG
xXNZ5FXyxequUGP2SUr6eUK+KC3BRIql2Aqrx3p42mqtvHOOvORppYAnIRS0
-----END CERTIFICATE-----