Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IvMDxK4rvcwel2UQbSNenzL_VP0.cer
File:                     IvMDxK4rvcwel2UQbSNenzL_VP0.cer (raw, json)
Hash identifier:          KWmkhgDYtl0WA90OobtAwds38AXbqU5epDxPLWwiUD0=
Subject key identifier:   22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B06E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/IvMDxK4rvcwel2UQbSNenzL_VP0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 08:55:30 +0000
Certificate not after:    Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 137245
                          IP: 103.106.0.0/22
                          IP: 2402:38c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110702 (0x1b06e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 17 08:55:30 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=A91FAE47/serialNumber=22F303C4AE2BBDCC1E9765106D235E9F32FF54FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:f8:da:27:01:13:f7:6f:16:df:34:08:c9:
                    17:88:05:df:6b:46:76:85:b4:68:cc:33:68:95:fe:
                    7a:96:02:8e:20:84:99:5b:f5:c7:6d:d5:cf:2e:ba:
                    49:01:ed:3a:31:67:d8:6e:8d:50:93:c9:12:76:57:
                    e9:db:8d:43:f1:a8:88:5d:c1:4a:2c:62:b2:ee:84:
                    c6:74:db:71:78:bf:9c:88:96:56:35:a8:ea:43:e1:
                    03:3a:8f:88:a4:cf:b4:0b:73:4b:12:c2:b7:39:5a:
                    07:02:a7:41:df:3a:40:a0:57:5f:3c:de:62:aa:b4:
                    73:ae:f0:3a:38:a2:7f:49:eb:8b:94:51:22:2c:38:
                    c8:68:26:3e:a4:25:22:5e:46:4c:68:3d:ad:71:0e:
                    7e:ad:08:5e:49:06:3c:d3:82:52:a6:85:73:42:e5:
                    f8:fd:37:18:3e:bf:cb:19:bc:47:81:f9:f2:3f:f7:
                    5a:81:54:40:de:a9:72:d9:ef:4b:d2:1a:85:6a:79:
                    5d:82:b9:e4:65:ad:ea:ae:5f:51:59:4f:41:1b:7d:
                    95:f6:cf:6b:4a:0f:8a:2b:55:4e:9a:c5:a5:82:90:
                    13:e2:aa:27:cb:e6:d9:9b:54:a3:0b:83:c3:13:a2:
                    96:08:5b:8a:9d:17:a5:16:07:5d:cb:72:7f:6c:12:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/IvMDxK4rvcwel2UQbSNenzL_VP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137245

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.0.0/22
                IPv6:
                  2402:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:54:d5:0c:91:8f:12:10:57:01:73:94:c4:64:97:b6:62:
         b8:f1:aa:9b:ef:c7:7d:87:39:2d:9c:08:3d:4d:06:49:70:35:
         08:ac:72:e4:bd:bb:4c:ec:d2:3b:2c:d3:dd:f7:c8:d0:2a:ba:
         47:15:22:2c:df:34:b6:e2:55:5c:1e:7d:ba:bb:43:e6:bd:1d:
         d1:ae:ce:ec:9c:0b:34:ff:5a:99:99:98:21:72:47:9c:aa:8e:
         f9:23:eb:f1:d3:b4:10:ab:db:c1:74:e5:2f:7d:6b:e6:d9:15:
         51:a3:fc:50:14:9c:3a:58:d8:dd:68:4e:1a:94:87:ad:d8:78:
         17:37:c0:4a:ba:d0:44:48:56:2a:61:cd:d1:71:76:45:84:52:
         a7:c1:70:ae:11:52:03:ec:15:be:83:45:7f:f8:a1:79:11:6d:
         07:14:be:6a:5f:5d:c8:79:82:5a:cb:c4:a9:2b:73:cd:be:4c:
         b9:43:b0:51:92:44:bc:b6:40:88:d2:13:ae:a4:07:6c:58:ce:
         d8:a0:a1:0b:4c:e4:ea:f1:aa:d1:b2:bd:ce:49:03:c6:41:db:
         e8:de:8d:67:f2:e2:99:77:df:f2:8e:49:ca:d0:7c:55:ac:69:
         78:cf:e9:27:48:f7:9d:71:12:bf:d3:5e:4e:ff:08:09:48:c0:
         f5:85:0d:b2
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAbBuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcxNzA4NTUzMFoXDTI0MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRkFFNDcxMTAvBgNVBAUTKDIyRjMwM0M0QUUyQkJEQ0MxRTk3NjUx
MDZEMjM1RTlGMzJGRjU0RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbvPjaJwET928W3zQIyReIBd9rRnaFtGjMM2iV/nqWAo4ghJlb9cdt1c8uukkB
7ToxZ9hujVCTyRJ2V+nbjUPxqIhdwUosYrLuhMZ023F4v5yIllY1qOpD4QM6j4ik
z7QLc0sSwrc5WgcCp0HfOkCgV1883mKqtHOu8Do4on9J64uUUSIsOMhoJj6kJSJe
RkxoPa1xDn6tCF5JBjzTglKmhXNC5fj9Nxg+v8sZvEeB+fI/91qBVEDeqXLZ70vS
GoVqeV2CueRlrequX1FZT0EbfZX2z2tKD4orVU6axaWCkBPiqifL5tmbVKMLg8MT
opYIW4qdF6UWB13Lcn9sEoVZAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUIvMDxK4r
vcwel2UQbSNenzL/VP0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUZBRTQ3Lzk3NEQ2RDdFNDhGMDExRUE4ODZFQjQ0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGQUU0Ny85NzRENkQ3RTQ4RjAxMUVBODg2RUI0NDVDNEY5QUUwMi9Jdk1EeEs0
cnZjd2VsMlVRYlNOZW56TF9WUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhgdMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2oAMA0EAgAC
MAcDBQAkAjjAMA0GCSqGSIb3DQEBCwUAA4IBAQBtR1TVDJGPEhBXAXOUxGSXtmK4
8aqb78d9hzktnAg9TQZJcDUIrHLkvbtM7NI7LNPd98jQKrpHFSIs3zS24lVcHn26
u0PmvR3Rrs7snAs0/1qZmZghckecqo75I+vx07QQq9vBdOUvfWvm2RVRo/xQFJw6
WNjdaE4alIet2HgXN8BKutBESFYqYc3RcXZFhFKnwXCuEVID7BW+g0V/+KF5EW0H
FL5qX13IeYJay8SpK3PNvky5Q7BRkkS8tkCI0hOupAdsWM7YoKELTOTq8arRsr3O
SQPGQdvo3o1n8uKZd9/yjknK0HxVrGl4z+knSPedcRK/015O/wgJSMD1hQ2y
-----END CERTIFICATE-----