Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.cer
File:                     Cg_u24ly0pISj5wzAv0WPZ19Z3o.cer (raw, json)
Hash identifier:          309RetKKwhfB/CGDg9Znulnyg+9YALQRnYXSPQyaTTY=
Subject key identifier:   0A:0F:EE:DB:89:72:D2:92:12:8F:9C:33:02:FD:16:3D:9D:7D:67:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01590A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jun 2022 04:41:09 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 23937
                          IP: 203.175.112.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88330 (0x1590a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  1 04:41:09 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A91134BB/serialNumber=0A0FEEDB8972D292128F9C3302FD163D9D7D677A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:90:97:cf:7b:f4:61:6e:06:41:50:9b:3b:
                    3c:6e:55:3c:65:c9:e2:0e:1c:b6:2d:a0:ba:72:37:
                    e2:87:a7:35:a0:e5:bf:54:74:3c:52:6d:88:81:31:
                    d1:78:c3:f0:19:10:0d:83:98:d6:a6:70:cb:ab:3f:
                    1f:cf:08:0e:ba:19:c4:e5:7c:51:6a:af:cd:c4:09:
                    3e:2a:24:83:da:86:dc:33:45:57:e2:76:5c:0a:79:
                    d4:8e:b5:e5:ca:54:ee:e1:5c:ef:9f:fb:2b:00:6a:
                    9a:9e:ec:48:df:52:42:e5:28:23:5d:c9:73:a1:7d:
                    f5:7f:c9:82:0e:61:af:84:5e:80:ed:d2:d8:e1:a1:
                    a4:d6:a0:4e:f1:73:47:0b:8e:c2:63:f9:d6:8a:5c:
                    c5:21:e8:22:db:9a:5b:c5:c9:e9:c2:fc:81:57:73:
                    02:6d:b1:16:50:2e:3a:7a:5d:58:a7:30:75:96:a7:
                    dc:62:1c:fb:98:a2:80:1e:f7:97:4e:d8:78:3a:09:
                    65:83:30:42:82:d7:dc:08:eb:c5:73:33:8b:58:f7:
                    00:af:e5:af:d4:c1:18:be:8d:6b:a9:e2:8e:9e:d8:
                    61:23:f3:6d:ec:c2:92:63:dd:9b:82:c7:07:bd:4e:
                    ee:4f:f5:55:9e:69:95:44:77:fe:e4:00:cd:41:c7:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:EE:DB:89:72:D2:92:12:8F:9C:33:02:FD:16:3D:9D:7D:67:7A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23937

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:72:c4:3a:b8:25:ae:9a:ff:8f:08:75:6d:20:76:5e:ab:dd:
         aa:f0:de:c9:6b:6a:b8:14:92:e8:36:f3:2b:33:b3:e0:29:16:
         ac:82:05:d6:e9:e3:68:c4:60:65:22:66:a0:09:f0:f6:02:c5:
         2c:cc:43:a9:8c:a5:09:62:6a:38:b6:0a:c8:cf:48:75:92:92:
         f4:1a:08:9e:0d:cd:8c:54:dc:c8:bd:59:50:a6:6e:fa:56:3b:
         0c:fc:e2:4f:5d:6d:07:30:ab:51:b2:61:c3:21:b5:85:2e:52:
         57:87:f1:1a:be:b5:f1:b4:c5:53:80:2c:a5:94:6f:5d:34:76:
         d8:8d:2c:a2:51:d3:62:ca:60:85:cc:14:b9:9b:22:6b:a9:d0:
         00:b0:9c:f0:63:c9:cc:f9:be:60:b2:05:e3:c1:02:29:e3:4c:
         4d:04:39:49:56:e6:95:07:0d:06:0c:b8:71:31:b4:d5:4f:39:
         4e:13:de:32:a6:a5:07:20:e2:8b:46:c4:f8:b3:bf:a9:98:a2:
         ed:28:a6:ed:03:c5:af:df:c8:1a:d7:87:a3:ed:93:23:95:ae:
         a3:82:dd:eb:4d:dd:25:7b:ba:18:ea:4f:42:df:08:64:7f:dd:
         74:4a:2b:c3:f4:78:19:65:e2:4d:84:6a:7d:6f:30:18:4c:63:
         90:ea:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----