Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOScDDdN8NqhtjPZJ3rXKDL3SrQ.cer
File:                     LOScDDdN8NqhtjPZJ3rXKDL3SrQ.cer (raw, json)
Hash identifier:          Vt1WOyXOaQ2y3nJIFBVWAijo7r+LpB17hv/y23EgknQ=
Subject key identifier:   2C:E4:9C:0C:37:4D:F0:DA:A1:B6:33:D9:27:7A:D7:28:32:F7:4A:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020014
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/LOScDDdN8NqhtjPZJ3rXKDL3SrQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:54:56 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131092 (0x20014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 13:54:56 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=2CE49C0C374DF0DAA1B633D9277AD72832F74AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:fb:49:1f:44:ea:d0:c1:4d:1f:05:e0:d5:
                    d4:8d:37:c9:b9:0c:b0:90:11:95:ba:99:42:27:78:
                    48:42:a6:06:bd:a9:61:6b:b1:c2:ab:ec:c0:6c:4b:
                    7e:14:20:c0:c6:2b:8e:95:dc:55:a0:75:42:b9:31:
                    45:1c:fa:2c:05:d1:1e:b2:2e:9f:52:52:80:fa:e5:
                    9a:ee:f1:21:07:e6:1f:a2:9a:43:46:eb:e7:aa:91:
                    ab:7f:3e:8c:6e:7c:76:9e:ef:52:bc:c2:88:65:7e:
                    b0:4b:e8:61:32:41:95:ec:d0:e3:53:f7:4d:42:4e:
                    1a:b4:3e:ad:63:60:e8:4a:95:2d:8d:57:bf:50:25:
                    29:2d:41:5b:0f:61:ef:32:a9:b1:86:43:04:0e:92:
                    82:c8:c9:b9:44:6f:6b:7f:7f:ca:e0:96:63:f2:09:
                    e5:68:1f:74:b2:b4:dc:1b:80:6e:35:7c:fc:96:70:
                    0e:ec:ae:42:81:1e:c1:c4:8d:f8:e9:0a:3c:81:08:
                    b2:a6:91:38:f2:7e:81:5e:65:49:2b:7f:84:7b:ed:
                    98:49:86:03:89:8c:d2:9a:ab:1d:a5:fb:5b:cc:9a:
                    fb:dd:b4:e4:e4:9d:67:7e:72:37:d0:19:37:38:3d:
                    3e:6d:9a:b3:e6:c8:de:ba:85:2d:b6:e2:ea:1d:03:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:9C:0C:37:4D:F0:DA:A1:B6:33:D9:27:7A:D7:28:32:F7:4A:B4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/LOScDDdN8NqhtjPZJ3rXKDL3SrQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:95:80:72:43:e6:3a:ab:83:49:1d:2f:90:78:53:43:66:
         96:07:7a:2a:7c:e3:69:13:b7:e1:30:fd:b9:d4:b9:08:78:17:
         ab:a5:75:89:c7:22:19:54:07:7a:d4:8f:5f:ea:0e:4b:52:dc:
         79:11:8c:b0:e9:7f:f2:f3:a8:5f:b7:5e:b1:53:1d:be:5d:ca:
         fb:f3:8b:94:b8:b2:20:e2:14:61:68:f7:08:95:ec:79:93:97:
         7c:77:61:d1:be:a2:f3:ae:64:5d:a5:d1:67:4a:c9:bd:bb:b6:
         96:db:83:72:02:1b:38:f0:17:b5:79:84:f3:f9:d9:d5:30:99:
         31:74:47:f1:7d:25:f7:21:87:b5:ba:e6:e6:e5:82:5d:a9:68:
         4b:45:24:b1:cb:73:c4:02:54:9f:14:58:fc:ac:1c:75:c5:3e:
         92:23:03:46:f0:d5:3b:47:30:f4:9b:db:c3:4d:61:7c:f5:21:
         08:6f:8e:32:0d:3f:b7:07:b5:4e:ae:01:0f:b9:d7:b0:fd:8e:
         55:e9:22:15:11:af:2c:dc:bf:43:7f:2c:f0:84:8b:e8:76:58:
         b3:b0:ec:7e:29:65:d0:cf:de:20:fb:46:d5:f9:b3:18:2c:05:
         90:06:a0:d8:c9:94:1f:c7:53:d3:ab:45:3c:25:cc:e0:30:7b:
         18:94:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----