Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiFoU3lvqVHTLgH04xheOj-CbJY.cer
File:                     FiFoU3lvqVHTLgH04xheOj-CbJY.cer (raw, json)
Hash identifier:          GkgX+FpuKuZse1aPYq4AlT0UHxomztNKoNKRS/yWFfI=
Subject key identifier:   16:21:68:53:79:6F:A9:51:D3:2E:01:F4:E3:18:5E:3A:3F:82:6C:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020026
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/FiFoU3lvqVHTLgH04xheOj-CbJY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:04:16 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131110 (0x20026)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:04:16 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=16216853796FA951D32E01F4E3185E3A3F826C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:99:e1:fe:38:79:0c:e5:cd:30:9f:c9:9c:
                    f9:2c:c1:2c:0e:19:c9:6c:96:0a:2e:6f:af:74:d3:
                    e8:17:8e:33:14:e9:31:c6:ff:93:dc:a0:67:a5:03:
                    d8:e5:a4:c1:b2:09:2d:50:75:f8:6f:02:88:e7:c7:
                    f7:b2:00:6f:19:b5:dc:1f:18:2c:2c:5b:81:09:5d:
                    6f:0c:ef:9e:d2:05:92:70:27:90:65:7e:3d:a6:45:
                    6a:f6:81:f0:3f:36:00:4a:bb:1c:07:f5:3f:81:40:
                    35:f5:f8:10:e0:fe:85:af:de:de:8a:81:3f:40:b3:
                    7c:30:dc:e7:ca:10:81:35:48:56:a8:5e:66:2a:6b:
                    68:c7:6e:78:12:cb:c7:88:4d:f0:23:1d:b4:ac:eb:
                    a5:39:28:f9:bf:67:ec:ab:b9:5c:f6:fd:50:ce:c2:
                    ae:48:e2:96:c1:d7:ed:bc:91:97:fb:c4:fb:e5:fa:
                    ba:dc:60:aa:2b:e6:79:bf:62:a6:4f:48:d0:f6:20:
                    3a:c2:4b:96:c9:c0:8a:08:c8:48:09:5f:d5:89:69:
                    32:ce:f7:01:d8:e3:54:8c:e4:1a:cb:eb:b3:25:c4:
                    53:90:5d:3b:6c:15:89:a8:19:ce:ae:4e:2c:4c:a7:
                    c3:f9:d3:41:8c:c2:8d:63:02:e6:f2:96:0e:6e:a2:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:68:53:79:6F:A9:51:D3:2E:01:F4:E3:18:5E:3A:3F:82:6C:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/FiFoU3lvqVHTLgH04xheOj-CbJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:d8:4a:ec:54:fd:10:d5:2f:f5:fc:4c:cc:2e:33:64:8f:
         b5:18:2a:2e:7e:c2:5b:c4:2e:54:d4:08:99:ca:f7:1e:20:9e:
         92:91:76:1d:0b:10:a7:73:e4:48:04:ea:21:06:e0:50:66:92:
         81:ee:2e:4f:2e:b7:b8:7a:95:12:9a:e5:3e:de:f2:20:0a:95:
         17:c7:29:f5:fb:df:75:57:38:9b:72:d5:6b:3a:40:d6:a0:e5:
         a8:82:53:fd:57:8f:a8:3f:a0:cb:ab:46:3e:9d:11:e4:54:13:
         45:23:f9:ae:83:8a:c8:e8:9d:7a:1b:fb:ef:a2:41:44:c2:94:
         a8:4f:bd:b5:37:c3:03:15:b8:87:35:4e:61:b4:f3:1e:19:9a:
         15:08:d5:43:39:b0:86:e5:60:59:f3:b6:33:30:39:c8:46:b7:
         99:df:8b:fd:26:de:6f:02:86:0f:f1:ef:88:66:68:c1:c1:08:
         75:7e:fa:9e:ca:1b:16:f5:da:8c:13:69:98:2d:27:a3:99:73:
         ca:f5:b4:13:bd:c0:c6:26:98:b7:fd:5d:d2:3b:cd:e3:cf:f7:
         49:e6:20:8d:3e:d0:f5:bc:d9:ff:6e:98:3e:ad:87:d7:a0:68:
         52:83:f6:e1:d7:95:0e:ba:01:09:bf:c7:5e:58:d7:01:08:6e:
         bf:46:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----