Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LB8bJcF_UL4WDHMHV8KiIAK1V-U.cer
File:                     LB8bJcF_UL4WDHMHV8KiIAK1V-U.cer (raw, json)
Hash identifier:          Bm20wMujcHglIraDIYqYt9kfnXhESXstP+lg7opwscc=
Subject key identifier:   2C:1F:1B:25:C1:7F:50:BE:16:0C:73:07:57:C2:A2:20:02:B5:57:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0178A9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 08 Nov 2022 14:00:55 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 139331
                          IP: 103.141.78.0/23
                          IP: 2001:df0:f680::/48
                          IP: 2405:17c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96425 (0x178a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  8 14:00:55 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A919333B/serialNumber=2C1F1B25C17F50BE160C730757C2A22002B557E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:9e:35:f6:7a:01:10:ad:40:7e:1f:43:40:
                    75:4c:7c:81:ca:9a:01:85:0b:51:d9:ed:f3:f8:73:
                    f1:1f:43:16:b2:a7:d5:6a:59:d2:74:2a:78:a4:d4:
                    08:f1:0f:9f:1a:c0:d5:61:ce:35:09:53:40:29:68:
                    7b:d3:7e:25:32:3f:3e:e3:79:42:64:9b:89:55:65:
                    83:2d:dd:8b:1c:9c:e2:73:0e:40:cc:ad:45:b8:d4:
                    06:8e:ea:1c:0e:19:fd:71:ab:0d:4e:10:c1:d4:76:
                    d2:cd:d4:6e:b6:b6:42:ab:64:48:69:ce:05:b5:ed:
                    aa:04:5f:73:4f:49:3b:48:12:30:1f:bf:ca:9c:03:
                    3f:06:c0:62:92:e9:e4:48:39:26:49:ce:9a:b8:0b:
                    28:59:45:ba:4a:eb:a4:48:fa:8b:c9:1c:72:88:8b:
                    16:05:58:83:c1:03:76:1f:8c:d6:97:85:1d:a4:5c:
                    6b:5e:fb:b8:da:7c:58:7f:7a:1b:6d:b2:bb:32:0d:
                    99:88:45:0e:fd:b6:7b:2c:f4:a7:6d:c9:f2:0a:28:
                    dc:b0:48:97:72:a2:da:91:03:b3:71:79:c1:36:93:
                    77:bf:6a:dd:5c:7a:ce:91:14:5a:23:70:9e:28:65:
                    a7:38:a1:a9:b1:01:41:d9:7d:8e:6a:3f:58:1e:97:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1F:1B:25:C1:7F:50:BE:16:0C:73:07:57:C2:A2:20:02:B5:57:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919333B/32831FDCAD1011E987AD8327C4F9AE02/LB8bJcF_UL4WDHMHV8KiIAK1V-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139331

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.78.0/23
                IPv6:
                  2001:df0:f680::/48
                  2405:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:29:1d:9a:32:f1:d5:18:2d:83:3b:59:d2:52:81:ae:4b:
         4c:2d:b0:3c:df:91:d8:57:e3:d8:2a:30:56:9f:18:9e:96:12:
         2a:bf:ba:ca:8c:77:a6:cd:62:8e:81:86:55:95:44:90:90:dc:
         84:15:9f:27:3c:f7:15:92:da:fa:43:49:4e:53:06:d7:2e:e8:
         e5:5f:29:bb:a2:83:01:4d:72:25:09:06:e4:31:c4:c6:9e:56:
         49:93:aa:7d:39:e1:6e:15:46:93:f7:31:4e:e9:ee:19:1e:d8:
         c5:30:0b:3b:ee:18:2a:7d:0a:ca:3a:bb:0e:3e:91:ad:09:9a:
         0b:30:22:74:37:f4:e2:fb:03:3a:3c:97:f6:d3:24:29:c9:51:
         0c:b8:cb:4b:50:a3:c1:e0:12:58:77:c0:bf:05:6e:56:25:89:
         12:ed:50:b4:93:3a:79:47:fa:7a:1f:fa:86:a8:d5:5b:ce:95:
         63:e1:8f:a1:5b:4a:9e:0d:5b:60:e4:25:dc:6b:95:b5:c8:cd:
         3a:2c:b1:e0:03:6c:45:d1:e1:ea:2e:08:3d:29:ff:89:7b:4f:
         a0:22:55:d4:a5:c7:bb:b5:01:79:97:e8:9c:18:00:8f:c7:ff:
         a1:d9:dc:23:01:5d:1d:c9:5c:9a:5c:78:24:cc:42:22:85:d9:
         bc:97:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----