Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
File:                     H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer (raw, json)
Hash identifier:          /vowRk95YF4Pl2DOFYpbubyJyzSz0ZzJNLLxy2mY6v8=
Subject key identifier:   1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A9A5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A918C2870000/0
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 03:54:24 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108965 (0x1a9a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 13 03:54:24 2023 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:df:2a:00:f0:5b:2a:df:97:62:bc:e0:6e:
                    c3:9e:84:03:1d:59:e7:3f:7b:1c:77:28:2a:15:be:
                    4e:0a:72:4d:be:37:63:68:3a:44:37:a6:b0:c9:e3:
                    26:34:39:9a:ee:80:d4:cc:bb:19:68:ea:5c:71:8e:
                    17:49:4b:a4:eb:c2:a1:4a:c0:89:e9:35:d2:e1:ca:
                    d1:57:e1:72:3c:5e:cf:53:18:b7:61:98:70:21:4b:
                    26:c9:39:29:6d:54:58:40:3f:e9:dc:66:13:f8:1b:
                    6d:4d:54:7a:4e:59:2e:41:2e:54:54:42:01:bd:e6:
                    bd:d3:f6:37:fa:68:a1:c8:c0:b1:93:86:fe:f8:df:
                    c6:8e:dc:f7:80:63:63:af:5a:61:da:8b:54:80:97:
                    cc:e3:8e:7d:26:25:59:a1:25:13:45:b1:9e:54:17:
                    e2:e3:cb:43:e0:11:46:0a:aa:76:04:14:8d:89:a1:
                    04:82:27:7b:d4:66:fb:b4:b3:fb:8b:1a:41:12:7c:
                    8f:86:d1:cd:ce:48:48:3b:a4:ec:6d:9a:fe:b1:5c:
                    80:81:32:df:63:f8:01:a5:58:ed:73:6a:25:ce:67:
                    81:dc:e3:93:2a:8e:41:a1:dd:b6:8b:7e:d7:7c:25:
                    84:9d:a7:15:d1:3b:dd:c5:92:63:ad:68:58:fb:92:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:0b:e1:86:65:3d:77:b0:82:e1:ec:37:33:f2:6c:ac:f9:
         21:33:c5:40:f2:42:31:69:50:b7:f0:14:45:40:1b:29:8f:3a:
         5a:81:2f:09:b2:8d:1d:20:af:c4:bc:78:5a:13:31:ea:12:c9:
         4c:f4:85:93:f8:29:c0:f3:49:f6:20:05:40:5f:4c:21:7b:24:
         3e:1a:cf:f8:53:e2:83:68:13:64:61:bd:f7:69:1a:eb:e0:60:
         aa:95:22:f7:3e:92:9e:20:ed:d3:2f:36:c9:be:06:e5:55:13:
         73:a5:ad:09:ef:cc:b3:8d:4b:f8:8e:cb:9c:64:89:d2:4f:2c:
         04:28:b2:09:98:b5:7d:a8:61:a2:52:69:84:86:4f:d6:a7:de:
         c9:58:05:4d:34:82:fd:cd:50:ab:dd:dd:d9:b7:d9:88:38:b7:
         7f:76:5c:c8:e8:d6:c3:3e:ed:41:fa:c9:6e:b9:7a:c4:3a:33:
         92:37:d4:cc:64:ad:09:6d:43:ea:a5:53:27:b6:bd:ff:36:e7:
         90:8c:3c:b0:ed:10:7a:1e:3e:41:81:84:4f:6a:c8:d7:b7:aa:
         10:7a:00:29:34:bc:02:13:b7:8c:01:f0:40:6c:9f:6b:bf:41:
         fb:03:b9:87:91:fe:68:82:ed:3b:71:e7:90:4f:6e:78:80:54:
         2e:d8:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----