Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L9LEibG_ugEA6mSH630nzk7GdJM.cer
File:                     L9LEibG_ugEA6mSH630nzk7GdJM.cer (raw, json)
Hash identifier:          nZ76ArjVAgizsxKMa0a7nAIU0tJDEH81gpPPXKwA0UQ=
Subject key identifier:   2F:D2:C4:89:B1:BF:BA:01:00:EA:64:87:EB:7D:27:CE:4E:C6:74:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01416C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918C287/81B4CD3C1D6E11E286A612B008B02CD2/L9LEibG_ugEA6mSH630nzk7GdJM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918C287/81B4CD3C1D6E11E286A612B008B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Jan 2022 03:12:24 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/31
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82284 (0x1416c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 28 03:12:24 2022 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C287/serialNumber=2FD2C489B1BFBA0100EA6487EB7D27CE4EC67493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:cc:c4:01:2a:62:e9:95:84:e7:08:59:48:
                    21:f0:63:0b:8a:f5:e8:64:94:bb:6a:8a:63:c9:5e:
                    4f:26:bd:bd:cd:da:fd:db:18:ea:a6:6c:a1:cf:60:
                    29:11:f9:fe:42:ab:88:39:13:77:0c:c4:59:7b:6d:
                    ba:ad:4d:5e:46:62:7a:65:f9:9e:7e:c6:16:7d:c0:
                    f1:a9:a3:95:97:ee:62:23:07:7f:0a:d2:78:f5:60:
                    96:f6:30:f7:e1:32:ff:ff:6a:82:07:58:7b:8f:5d:
                    16:74:96:30:f0:1c:47:ee:b6:6d:17:63:a9:82:44:
                    06:b6:aa:6c:8c:2b:05:f2:10:ac:89:01:d6:77:62:
                    09:d3:70:cc:03:d3:aa:4c:48:ba:18:52:d1:8e:a5:
                    b6:95:87:14:fc:1d:95:18:54:32:af:c2:3c:6e:88:
                    5c:21:ea:4c:44:a7:33:2b:89:e7:4f:a1:f1:7f:ab:
                    be:aa:a7:ac:3d:8f:2f:79:12:1e:09:12:bc:07:ef:
                    c7:1b:47:ff:66:8d:a5:f0:b0:46:1a:61:23:20:85:
                    6d:e6:0b:6a:cb:3b:7c:c3:90:f2:52:8a:86:6d:8e:
                    a9:d1:75:8b:27:87:0d:31:6d:ed:32:09:5b:e0:2e:
                    e3:6f:74:5e:8d:98:50:6f:0c:48:66:e9:31:ff:c8:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D2:C4:89:B1:BF:BA:01:00:EA:64:87:EB:7D:27:CE:4E:C6:74:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/81B4CD3C1D6E11E286A612B008B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/81B4CD3C1D6E11E286A612B008B02CD2/L9LEibG_ugEA6mSH630nzk7GdJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/31
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:05:64:ac:ff:42:16:c6:5b:9a:7c:82:b9:fa:d6:12:bf:
         06:8c:d3:47:87:a9:d0:ee:08:de:16:99:e5:71:39:01:ac:70:
         de:f7:f8:d4:d3:ce:3e:a4:af:f5:a8:85:92:32:ab:75:e2:04:
         ef:61:7a:22:b9:ce:1d:9f:66:c2:21:51:90:33:eb:b2:85:1d:
         22:c2:c3:bd:3d:65:89:68:f6:27:57:31:9a:af:b2:b1:db:f9:
         85:4b:fa:cc:6d:e7:c2:4b:95:dc:f3:9a:d3:c4:ad:54:ba:ab:
         2e:b0:a6:3c:bd:ac:95:d5:52:b9:6e:f7:87:ee:63:22:79:a6:
         52:6b:5d:bd:bb:20:77:78:04:ca:3a:0d:0b:ee:0a:60:36:82:
         4c:ca:bb:aa:3e:94:9e:59:ef:c8:a3:ed:e3:6f:57:77:d7:30:
         96:4d:ed:3e:23:e8:74:2a:62:af:5a:42:b6:5e:14:87:66:5d:
         8a:3e:ef:ed:81:6b:13:ab:15:65:0b:a0:81:1e:42:51:09:84:
         1d:1f:7c:d5:0d:b4:3b:df:3f:77:7e:47:cf:77:7e:6c:f9:3b:
         1f:82:c8:b8:02:f2:ac:de:69:1f:f7:21:bb:9a:a2:d9:e5:1b:
         6b:61:a9:87:9c:83:c8:d9:05:87:8b:a4:ef:71:06:c7:4d:70:
         15:99:ca:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----