Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFzrebDV25_E539RL2cjCF8-0bk.cer
File:                     FFzrebDV25_E539RL2cjCF8-0bk.cer (raw, json)
Hash identifier:          FLvrKMyzjeJmpAIwQfVOLXBOY9r968CRStZMl9m4ZSU=
Subject key identifier:   14:5C:EB:79:B0:D5:DB:9F:C4:E7:7F:51:2F:67:23:08:5F:3E:D1:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0163AB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 Jul 2022 04:46:54 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 103.9.192.0/22
                          IP: 103.73.96.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91051 (0x163ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 25 04:46:54 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A9149E94/serialNumber=145CEB79B0D5DB9FC4E77F512F6723085F3ED1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:6f:77:a0:af:12:81:0f:cf:74:f3:a0:cc:
                    b7:3d:72:ae:c5:28:5c:cc:21:e8:b1:35:10:f5:ef:
                    e6:c3:3a:cd:c9:ad:a9:b1:13:15:94:45:9c:ae:4b:
                    a0:2d:32:ec:da:15:9a:9f:bc:bb:b9:37:3d:fe:02:
                    23:cf:cb:01:0f:0f:eb:42:b9:e2:8c:cb:be:2d:9d:
                    b2:7c:2a:7c:93:86:e6:6a:04:f0:c8:49:cf:e8:e0:
                    ce:2e:de:49:f5:f1:9e:a3:53:01:42:6f:c2:21:7d:
                    ee:ed:b7:12:23:44:b6:f9:a0:c0:73:04:45:01:76:
                    77:a8:5f:3d:27:3b:a6:f5:f1:2c:f0:a3:f2:f8:8e:
                    5b:17:29:31:97:2d:8e:b9:e1:63:5b:65:0e:08:de:
                    78:fa:f8:51:e2:2b:11:d9:cd:5f:1e:73:a2:4a:93:
                    03:0e:83:9a:af:7b:4d:ab:aa:a5:e5:3d:66:58:29:
                    af:fc:7f:ea:61:55:8a:c6:2e:25:96:16:a7:87:e8:
                    55:5f:a4:58:42:61:48:7e:fc:95:0a:5e:6e:e6:03:
                    a2:2b:3e:48:3a:59:ff:8c:11:da:53:04:11:5d:93:
                    9f:14:12:1b:a8:4a:4b:a1:db:67:e9:4f:8a:6a:f0:
                    e8:79:3d:4d:71:da:34:e8:61:09:03:7f:9d:71:72:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5C:EB:79:B0:D5:DB:9F:C4:E7:7F:51:2F:67:23:08:5F:3E:D1:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.192.0/22
                  103.73.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:81:30:4e:49:8d:95:57:37:b2:0c:bd:e6:b2:1c:dd:11:
         29:a0:ab:f7:cf:54:b6:b4:77:d4:1a:84:ee:64:c2:14:66:06:
         8a:42:03:45:ad:09:17:05:52:90:7f:2f:7d:11:9c:0c:2d:c8:
         e8:6d:39:95:7b:02:cf:08:eb:5a:e8:2b:47:60:4b:f5:f2:c7:
         07:2b:9e:b8:46:c1:6e:87:27:9b:50:fe:78:2f:f3:2f:dc:50:
         71:8a:19:08:2b:b6:f0:ce:df:40:31:50:63:1c:d4:6f:75:81:
         98:4e:4a:e4:25:7f:42:8f:5c:0d:25:80:7f:71:bb:2b:4c:64:
         3d:87:8e:e3:93:30:e6:4d:36:23:93:77:51:65:4d:84:35:f0:
         c7:8b:f3:a1:0f:3d:4e:35:c5:0e:e1:df:fd:ee:d1:5d:e6:90:
         5e:d2:7e:1b:d3:33:9f:49:57:b1:46:e7:0a:58:e3:3c:4d:9f:
         6a:6a:cf:8b:34:ca:7c:be:b6:79:cf:8f:a4:fb:25:4a:8b:3d:
         4b:78:c0:c5:19:60:db:fa:a2:ff:2d:19:50:ae:dc:9d:bd:d6:
         40:d3:dc:3d:5d:5b:a8:6d:99:46:71:0f:6c:93:5e:4a:76:9c:
         2a:2d:1f:67:86:b0:53:28:0c:dc:b9:96:61:b4:41:2f:92:b1:
         87:86:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----