Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CvZtq_rRAiJpAForcJ2XbQ0cNQ0.cer
File:                     CvZtq_rRAiJpAForcJ2XbQ0cNQ0.cer (raw, json)
Hash identifier:          HkIQViIVvIyA2jr79WkVHvCvQ/QIs4vApE3h4MtemvI=
Subject key identifier:   0A:F6:6D:AB:FA:D1:02:22:69:00:5A:2B:70:9D:97:6D:0D:1C:35:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02000D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/CvZtq_rRAiJpAForcJ2XbQ0cNQ0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:51:49 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131085 (0x2000d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 13:51:49 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=0AF66DABFAD1022269005A2B709D976D0D1C350D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:48:25:47:4c:05:8e:b1:96:e8:e6:63:25:
                    cd:36:7f:b8:b1:8c:d5:23:35:b0:0f:e6:77:88:61:
                    30:6e:39:cc:04:d8:de:f3:f8:1c:f9:42:80:aa:67:
                    98:32:03:ce:c0:95:b9:4d:31:92:a9:a5:d3:d0:5b:
                    c5:44:dc:d9:6c:2d:d4:1c:64:18:ad:29:e6:38:7b:
                    bc:12:86:3b:34:61:7e:54:cd:bc:e6:9e:0c:64:10:
                    f1:1d:15:55:b0:e2:0b:e1:a4:34:0f:45:95:d9:ea:
                    49:d2:01:12:1e:c5:e9:0b:09:4d:e5:07:b0:58:9f:
                    41:a4:f9:96:c7:72:14:9b:50:6a:c2:76:28:43:18:
                    3a:c2:94:77:64:24:c3:6d:7d:5a:b9:a4:52:d4:e5:
                    c6:84:98:ab:84:af:85:d7:46:30:d1:cb:9f:a4:0d:
                    bd:62:c4:b6:86:fc:98:4e:92:da:c6:e9:30:92:57:
                    65:e5:e0:de:fb:52:a0:70:66:a8:be:4f:79:7f:15:
                    48:eb:55:2c:9b:0f:fb:d1:c5:7e:ad:35:8f:b0:b0:
                    95:bd:a0:3e:a7:ec:ca:e2:d3:41:43:01:a9:cc:2a:
                    39:47:0a:52:9c:94:1f:96:6b:e5:0c:70:21:4a:c9:
                    47:95:36:0b:d3:4c:b4:57:f1:f9:ab:38:ec:0a:2c:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:6D:AB:FA:D1:02:22:69:00:5A:2B:70:9D:97:6D:0D:1C:35:0D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/CvZtq_rRAiJpAForcJ2XbQ0cNQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e3:c5:49:2e:fb:bb:f7:83:b7:8f:f1:dd:f9:27:8a:16:3c:
         e7:b9:64:3e:b2:f5:76:cd:c9:dc:6a:7a:0b:06:f9:3f:54:cd:
         dd:b4:08:40:8c:67:76:39:d8:fe:2a:58:fb:3e:fb:e3:fe:17:
         9a:c0:28:cc:0b:ab:71:01:88:7d:5e:08:15:06:c7:c0:6f:af:
         d6:e5:01:ed:9d:ed:8b:8a:a7:0a:16:4d:88:23:2e:95:36:c0:
         37:c1:27:d1:b9:27:0d:77:a2:23:5e:24:57:a8:5a:22:8f:ee:
         82:51:6c:75:4c:3c:70:a9:11:2f:46:c8:63:39:5a:cc:05:6e:
         ab:47:77:1b:3b:5f:b3:1d:34:ed:60:c0:7f:13:bc:74:8c:ce:
         c6:d7:7f:95:45:d4:12:29:94:3c:5e:a6:e7:ef:c6:dc:9d:4b:
         ab:47:db:60:7e:52:71:1d:71:4f:b3:1e:96:1b:17:0d:78:4d:
         b9:ec:c5:d3:c0:b9:94:31:d5:e0:ef:4d:34:e5:c2:e4:10:6d:
         ee:66:d6:4d:5a:e3:8f:f2:50:7c:6a:d2:33:46:be:f5:6a:0b:
         e9:06:a0:b4:85:ce:9d:c6:7f:af:01:c3:7e:b1:94:6b:e9:41:
         b7:d9:cd:84:a1:d9:3f:93:35:24:cd:f7:92:7c:4a:fe:1f:74:
         01:ac:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----