Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaSsa0cxezvlDDmbqunLvF3w7oI.cer
File:                     KaSsa0cxezvlDDmbqunLvF3w7oI.cer (raw, json)
Hash identifier:          XyaJ8GDuY0TGzOI0CodGMsVcPB8vZgnR2HosVtZkwRk=
Subject key identifier:   29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015748
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 26 May 2022 13:08:54 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 103.97.154.0/24
                          IP: 103.97.168.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87880 (0x15748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 26 13:08:54 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A9148979/serialNumber=29A4AC6B47317B3BE50C399BAAE9CBBC5DF0EE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:9c:88:82:45:05:c6:f2:e2:be:d3:8a:8a:
                    4d:9c:8b:c6:3e:70:40:42:9e:b7:a7:fc:00:35:e9:
                    09:01:1f:04:32:70:da:cb:7c:c9:51:17:03:b1:7e:
                    9f:69:e1:18:b1:3b:00:51:c2:58:12:db:6c:a0:b3:
                    24:29:24:f8:21:00:d3:5f:a9:30:5b:fa:69:09:03:
                    77:34:53:bd:37:e3:a1:a0:d1:39:12:9e:68:8b:d1:
                    7f:3d:14:46:28:19:b4:ba:79:5e:d3:ef:bc:1d:2b:
                    e0:b9:db:c4:33:47:44:02:5e:02:69:6b:51:87:d4:
                    2b:c1:38:f0:7c:81:2a:a7:b1:c1:48:5a:e7:fe:3c:
                    7b:51:76:73:62:4d:26:fa:77:2c:98:a0:0b:82:1f:
                    84:9e:3b:0a:a9:b1:7b:48:dc:c8:7e:8f:0e:a2:e5:
                    36:f6:5c:0e:2b:b9:20:49:04:58:5c:6c:e3:4d:98:
                    e7:c6:94:b5:16:ad:5a:ad:2d:96:ea:09:44:2b:66:
                    63:65:4f:c6:28:c5:eb:0c:25:91:36:40:04:47:56:
                    4e:48:3a:59:42:5e:fc:d4:54:8f:6d:19:f5:7a:9c:
                    b3:28:6a:b9:3b:ac:cf:74:36:c9:a9:ab:68:62:dc:
                    63:f2:27:ff:fc:a7:e9:bc:df:36:f3:d1:e7:7f:fb:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.154.0/24
                  103.97.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:cc:f9:84:48:0b:ac:1f:e8:6b:95:23:f5:22:85:7b:7f:28:
         5f:8c:d8:fe:65:bf:03:1d:79:4d:82:8f:7f:f2:cd:5c:7b:80:
         65:dc:d6:31:a8:cd:b3:88:35:cf:1a:cc:a6:d4:23:25:7b:c1:
         bb:30:4e:0b:6f:66:00:56:05:4b:e2:14:67:9f:ed:d4:d0:b1:
         26:db:d0:ca:b4:fe:77:05:06:0b:70:78:9c:8b:40:b9:a8:0a:
         84:15:f9:5e:d7:51:96:73:38:c5:63:9f:56:2a:5c:db:48:c1:
         cf:ca:fc:c3:ab:93:94:c7:45:b9:52:11:53:ac:07:44:3d:61:
         86:aa:24:bb:91:f7:8f:cb:1a:3c:fc:12:60:c5:84:25:a7:a5:
         37:7e:df:ed:cc:9a:4a:70:de:50:b5:db:57:a4:d2:46:89:48:
         3a:19:63:7e:58:a9:0c:06:80:40:f5:a3:ec:bd:34:7e:0e:f4:
         35:f6:7b:43:fa:ca:e1:0b:51:4d:e2:9a:3e:25:30:0f:53:7f:
         b2:2d:6a:1d:00:fb:78:a1:8d:fe:48:d6:ad:42:1f:7b:66:1d:
         d0:34:c3:c5:28:f4:b0:15:e6:ee:9d:96:b9:60:12:4c:6b:76:
         1f:88:3d:0c:94:cf:c2:86:2c:bf:1b:f9:23:a5:96:31:32:bd:
         5a:d0:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----