Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVEqFGBSt2FyP67Dku6DyvzZN6w.cer
File:                     BVEqFGBSt2FyP67Dku6DyvzZN6w.cer (raw, json)
Hash identifier:          aJdVi7pPkk+KzaFoxoTFSnh4M6nNBl2fMP/qExWDmsU=
Subject key identifier:   05:51:2A:14:60:52:B7:61:72:3F:AE:C3:92:EE:83:CA:FC:D9:37:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01957B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Apr 2023 00:37:02 +0000
Certificate not after:    Tue 01 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 138975
                          IP: 103.180.12.0/23
                          IP: 2400:5160::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103803 (0x1957b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  2 00:37:02 2023 GMT
            Not After : Aug  1 00:00:00 2023 GMT
        Subject: CN=A91E6057/serialNumber=05512A146052B761723FAEC392EE83CAFCD937AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:0d:28:29:5d:49:71:79:dd:4d:cb:0e:43:
                    3a:50:ab:5c:18:c0:cc:08:6f:2c:63:a4:e1:1b:0a:
                    0b:ed:c3:76:6e:76:83:ae:56:d5:5e:22:0f:d2:ba:
                    32:5c:2f:0d:41:90:a4:ef:96:30:03:93:2d:8f:d5:
                    56:57:39:44:3d:4d:16:90:17:71:4c:16:78:4a:f8:
                    c8:99:af:c1:b5:3a:a4:af:58:a2:be:ac:37:aa:83:
                    e6:df:11:6a:65:11:03:9a:e4:8e:8e:a4:94:80:4f:
                    5c:5c:a8:1e:69:f0:0e:5c:12:63:52:81:93:0e:b2:
                    a3:d7:fd:13:a3:a8:19:19:29:64:a1:3a:60:40:c0:
                    3c:f5:7f:94:fa:9f:83:bc:9e:2a:9f:61:7a:76:ee:
                    28:41:18:bb:e9:8e:d4:f8:4b:76:6c:e0:ec:4d:42:
                    1f:36:eb:1f:17:1b:df:f0:b6:63:86:99:62:d2:51:
                    d7:d4:94:6d:29:7c:9b:98:3d:bb:17:46:65:bf:2e:
                    30:13:c7:19:80:c1:0e:e3:40:05:8b:de:34:18:6a:
                    56:6b:8f:a0:34:7f:40:b3:1f:8d:6d:02:ad:57:f2:
                    98:b7:99:af:f0:24:72:aa:89:c0:85:1d:ae:c3:ed:
                    a0:f0:7e:ba:ed:0b:02:84:52:90:d9:f9:05:8c:d2:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:51:2A:14:60:52:B7:61:72:3F:AE:C3:92:EE:83:CA:FC:D9:37:AC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138975

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.12.0/23
                IPv6:
                  2400:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:24:8d:94:d6:6b:49:d2:f0:7a:dd:12:8e:83:0b:91:0b:fe:
         0c:23:61:2e:0c:3e:23:2e:ae:70:27:aa:16:e7:c9:c9:33:06:
         d9:d5:39:94:da:38:bc:38:12:3c:c7:e5:2d:62:34:bb:ef:4b:
         96:8b:f7:63:06:51:87:bb:2b:89:aa:70:c4:90:97:a1:7e:cf:
         1d:57:f3:df:00:c4:a7:ca:68:a5:91:a6:73:70:46:8a:31:05:
         c6:fe:d7:eb:8e:ad:65:a4:c8:3a:70:00:3c:b1:57:fc:dd:2b:
         77:d2:90:b6:60:7b:0f:b2:9f:9a:96:f1:31:e5:ad:97:6d:d2:
         23:a1:84:01:c6:2c:97:44:a5:1f:26:36:cd:1b:8f:1f:7a:ef:
         ba:2b:69:48:6f:cf:bc:09:9f:41:00:be:35:02:c7:b5:21:ed:
         a7:bf:b6:48:9a:96:91:a1:5f:32:5c:71:53:a6:b6:23:c4:89:
         71:ce:2e:80:4e:f7:ec:45:57:e0:68:31:b0:dc:8a:c4:e0:6f:
         7b:e6:95:8b:ed:8d:22:02:3f:0b:96:ed:80:1a:1f:aa:fa:d9:
         4f:90:e8:4e:1f:88:6a:ae:93:0d:6a:1b:e3:b0:ac:d2:32:a0:
         f5:b7:dc:25:28:82:07:78:e3:5b:60:03:4b:f8:a7:7c:b1:0c:
         f5:6b:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----