Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Or3gsw6sBBkoPopkyxGS_6C3CVE.cer
File:                     Or3gsw6sBBkoPopkyxGS_6C3CVE.cer (raw, json)
Hash identifier:          acIeOuoSanxPdAszfX0KWP4nhQMth5CF19JV5xbAsF8=
Subject key identifier:   3A:BD:E0:B3:0E:AC:04:19:28:3E:8A:64:CB:11:92:FF:A0:B7:09:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020A68
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E7319/B03A3134976C11EBB8F5BE12C4F9AE02/Or3gsw6sBBkoPopkyxGS_6C3CVE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E7319/B03A3134976C11EBB8F5BE12C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 31 Aug 2024 00:24:17 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 137939
                          IP: 2403:1b40::/32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 20:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133736 (0x20a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 00:24:17 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91E7319/serialNumber=3ABDE0B30EAC0419283E8A64CB1192FFA0B70951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:a2:2e:bc:9a:ca:a7:09:ca:4b:15:64:69:
                    01:84:ef:87:fa:ff:b0:79:1f:d6:51:7a:4d:70:f3:
                    47:51:a8:a6:1a:7b:3c:05:52:c0:58:31:49:ab:7e:
                    ad:d2:77:c7:99:d9:a2:f3:2e:bd:4a:15:b9:ba:70:
                    8d:24:c5:91:44:d9:dd:57:71:bf:99:f9:8b:c0:39:
                    d6:ed:af:83:0a:f0:d9:34:19:97:ba:f4:74:57:e4:
                    d2:90:cc:48:4b:36:75:6f:fb:02:86:fb:13:ab:47:
                    ce:5b:ad:dd:17:b7:ad:eb:40:5c:2e:95:ed:4f:f0:
                    f6:94:e9:4a:2e:da:cd:38:4a:8a:4c:14:04:86:20:
                    a0:fb:1e:f1:bb:73:1a:c0:71:02:b7:3b:f9:59:69:
                    c4:72:50:5c:0f:c8:4d:d1:b5:d4:09:f6:e1:2f:54:
                    1d:64:bd:32:58:3b:ce:80:b8:9d:b5:6e:7d:7d:ab:
                    54:73:65:7b:c4:3b:77:9c:a6:69:d2:72:de:7e:e4:
                    9b:2b:16:f6:0e:73:e3:de:38:bb:f6:c9:95:21:c2:
                    23:8d:28:bd:61:a6:ca:a6:15:a5:b9:ff:22:d6:4c:
                    d8:3c:40:eb:77:d1:f5:b0:71:31:da:b2:2a:74:42:
                    62:c4:31:ed:18:a3:72:ae:d5:ac:fd:5a:6c:73:52:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:E0:B3:0E:AC:04:19:28:3E:8A:64:CB:11:92:FF:A0:B7:09:51
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7319/B03A3134976C11EBB8F5BE12C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7319/B03A3134976C11EBB8F5BE12C4F9AE02/Or3gsw6sBBkoPopkyxGS_6C3CVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137939

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:02:6f:6a:2f:38:e9:5d:07:fa:ed:38:81:76:46:d3:4e:22:
         d8:57:57:d5:d6:2e:eb:ff:2c:10:a4:3c:b0:00:45:c4:c1:fd:
         d9:4a:c5:0f:f6:8f:67:7c:cb:00:22:92:d1:e3:ac:7a:8f:00:
         cc:2b:d7:c8:e0:36:c9:e4:0f:e1:70:1b:7c:51:8e:cf:67:ee:
         b2:5a:7c:c6:d0:43:88:a9:58:96:e3:3f:eb:48:3e:33:44:3e:
         7f:4f:b0:4a:55:b9:65:9c:43:e2:63:a8:a1:55:e7:2d:0a:ac:
         2e:7c:c2:c0:6e:11:2d:96:ed:13:af:e6:a2:75:fe:5a:fd:08:
         1c:dc:79:7d:81:97:94:ba:f3:3c:4a:fd:fa:17:2f:5a:6a:83:
         ba:cc:59:36:d7:98:5e:d6:e9:3f:da:63:8a:8b:2a:46:01:b2:
         23:ea:23:26:43:a3:f0:5e:dd:2b:23:98:dc:fc:0f:90:c8:02:
         4e:d5:e3:9c:75:43:0a:06:85:d1:64:24:13:47:0f:35:07:7e:
         55:90:eb:a6:52:9c:a6:ad:f2:bd:16:f5:76:84:66:a3:5b:92:
         a7:e1:0c:38:54:ce:22:0c:6f:9f:a3:56:df:02:73:68:ee:a6:
         b2:18:f4:f2:5f:77:71:63:e1:2f:94:a3:12:76:bd:18:15:4f:
         0d:53:dd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----