Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CH1dxie2Pja_nC99Bn6uMbSMeHg.cer
File:                     CH1dxie2Pja_nC99Bn6uMbSMeHg.cer (raw, json)
Hash identifier:          0Uoqt7eo2QIK2WAZyZogGhI5ZXLuHia2X7GKDjXygQw=
Subject key identifier:   08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD05
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 Sep 2023 16:08:30 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 45.123.220.0/22
                          IP: 103.192.76.0/22
                          IP: 2404:3780::/32

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 18:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113925 (0x1bd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 12 16:08:30 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91AC75F/serialNumber=087D5DC627B63E36BF9C2F7D067EAE31B48C7878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:4d:0a:f7:5d:16:c2:c8:ed:a3:77:c7:ca:
                    ee:c6:78:48:b5:90:8b:03:e4:d4:8d:a4:78:4c:73:
                    45:bf:7e:46:7a:0f:44:de:26:dc:67:0d:49:b4:3b:
                    b4:a0:52:97:64:fb:42:57:78:a8:dc:e4:f6:e4:9d:
                    1c:84:32:49:9a:1b:6f:08:41:4d:ed:3e:97:a7:41:
                    71:74:82:ad:8c:a8:a7:c3:b4:d6:6d:81:6b:5c:c9:
                    81:b5:a1:ae:69:e5:ba:35:8b:b9:e4:51:cb:1b:32:
                    e0:46:05:ab:73:59:dd:4b:fa:6f:8b:3c:d4:e6:6d:
                    27:87:39:44:48:c6:b0:e2:02:48:4b:bb:65:f4:df:
                    d1:09:67:a0:f4:29:b8:23:69:03:9c:69:e3:77:fe:
                    99:aa:0c:7f:21:ae:35:fb:6f:0b:64:e3:b4:13:a8:
                    08:83:66:35:fb:5d:7c:1f:d5:a3:df:96:52:e5:16:
                    6c:0e:e5:54:21:41:fe:f0:09:f1:e0:48:93:62:aa:
                    1e:97:2a:c8:b8:b8:40:43:36:e1:a3:8c:ad:d1:d8:
                    0f:ae:e6:67:e9:5a:19:7e:92:b6:f2:fc:75:02:9a:
                    65:aa:3a:b2:d8:b3:e6:4c:53:51:53:f3:8b:10:24:
                    57:5f:70:92:c4:31:ea:c6:54:02:81:ed:4e:af:7d:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.220.0/22
                  103.192.76.0/22
                IPv6:
                  2404:3780::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:69:f8:62:3f:b3:76:9d:44:00:52:87:96:f3:5d:65:12:59:
         2e:9a:f9:d6:00:67:3d:fc:e2:a3:71:f8:6a:5d:a8:88:42:59:
         fd:0a:9f:b9:7e:a6:29:57:df:a3:df:f5:50:41:03:71:11:16:
         55:75:d1:c3:e5:bb:df:76:43:aa:06:19:fb:47:6f:bd:71:52:
         89:cb:a4:d3:75:1f:d0:e4:8f:36:f9:cb:05:60:53:04:ae:14:
         da:31:08:c2:12:db:3f:05:9d:6d:8e:7e:6b:a4:86:87:81:ef:
         05:7e:f2:db:14:18:26:9e:c9:99:15:79:e7:c2:83:f6:c4:5e:
         ac:d4:6f:8f:7a:c9:d2:9a:0f:78:f6:e7:05:42:ab:69:a3:16:
         a5:62:e6:0b:91:8a:c8:54:d3:66:c4:10:29:4a:10:ec:cb:f3:
         fe:16:22:b8:1e:73:8c:d2:3b:78:9f:1e:60:20:83:40:ed:63:
         ec:67:2b:33:2d:5d:69:db:fd:41:65:1f:40:d7:4f:1b:e1:8d:
         eb:3b:39:f5:f3:90:f3:3e:12:03:9b:03:4c:6f:f1:56:db:07:
         6e:16:91:a0:be:05:62:33:c5:09:8d:eb:e2:78:1c:ff:f2:9a:
         ca:b3:06:ca:1e:ba:b3:83:da:34:f5:37:48:14:6d:8b:ff:b5:
         13:e1:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----