Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb2y3G_M1ROw3wFPNczTVKwf9Js.cer
File:                     Pb2y3G_M1ROw3wFPNczTVKwf9Js.cer (raw, json)
Hash identifier:          FFuJtrKlpjmDp6D/YX8eC+Pwx9krjBH7JX2AfjJkYh4=
Subject key identifier:   3D:BD:B2:DC:6F:CC:D5:13:B0:DF:01:4F:35:CC:D3:54:AC:1F:F4:9B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0192F6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/Pb2y3G_M1ROw3wFPNczTVKwf9Js.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 25 Mar 2023 07:39:10 +0000
Certificate not after:    Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:    IP: 103.72.214.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103158 (0x192f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 25 07:39:10 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=A919CDE4/serialNumber=3DBDB2DC6FCCD513B0DF014F35CCD354AC1FF49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:9b:48:aa:f9:ca:ff:04:55:1d:af:40:c5:
                    51:c0:57:97:26:c8:d2:d3:a6:92:cd:32:1b:c7:f9:
                    a5:10:8a:3b:70:a8:88:99:b4:f3:d7:3f:b2:a1:64:
                    27:ff:a9:72:93:6a:a8:ff:bd:1a:63:f6:dc:76:76:
                    a3:a7:5d:cd:a1:1b:fb:28:47:7a:0a:43:5b:2c:5a:
                    35:b8:8e:7f:4a:2b:a8:8a:06:09:2e:74:a0:98:46:
                    5e:63:4b:58:d7:23:19:54:28:86:93:0f:84:93:69:
                    08:a7:c0:17:41:66:d5:15:2e:93:c1:3f:08:3c:06:
                    01:75:85:a2:2d:cd:ed:f8:69:0c:7c:86:76:11:4d:
                    89:97:ef:4b:1c:d0:00:9a:ca:70:c2:5d:04:72:69:
                    0b:3d:f0:7d:46:96:a1:a9:81:55:47:48:13:0c:32:
                    0b:7d:3e:e6:23:69:f6:55:f9:3e:55:74:5c:cc:23:
                    45:40:66:7e:03:bf:99:9a:af:c1:f6:09:92:58:bf:
                    38:6e:37:3e:b7:5e:ee:a5:92:63:d9:6c:6d:a0:47:
                    b5:1a:f6:6d:ff:6d:e9:97:e0:0a:56:44:df:08:aa:
                    09:62:46:94:12:4d:cd:a1:01:47:c8:30:eb:2e:cc:
                    08:7a:fc:6a:89:7c:ed:98:f7:f0:d2:02:bf:0b:ea:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:B2:DC:6F:CC:D5:13:B0:DF:01:4F:35:CC:D3:54:AC:1F:F4:9B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/Pb2y3G_M1ROw3wFPNczTVKwf9Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:3f:a1:fb:a0:df:ec:88:0c:8f:bb:ca:52:16:ee:b0:79:
         9e:9e:cb:97:dd:e5:f6:d2:12:37:e8:f5:34:8a:79:db:55:40:
         58:c1:d5:c2:50:be:2f:f9:83:e9:47:29:15:2c:64:f3:08:aa:
         e4:5c:ae:93:ff:2c:05:62:53:51:7b:f0:b8:b7:5e:fd:c9:89:
         2a:39:80:4e:77:d0:83:f7:7f:f4:ab:3b:0f:03:65:ee:d3:31:
         63:ed:d9:40:2b:33:d6:4d:e4:c7:6a:94:ca:98:64:79:a6:19:
         43:16:b8:83:b1:b4:ac:3f:21:63:bf:74:f0:da:08:f7:76:f9:
         ba:47:a4:3e:2a:aa:b0:7f:ee:d5:8d:21:99:e8:3f:a8:bd:8c:
         0a:14:86:d2:68:17:13:06:c7:08:ca:fb:14:0c:7e:a8:cc:4e:
         ff:87:42:f1:e1:27:a8:d5:9b:22:f8:0c:bb:fe:2f:2f:8b:1d:
         9c:63:ed:84:58:1f:b5:f3:d6:2e:9f:47:c4:b5:9d:df:64:47:
         6a:97:48:ad:57:89:19:95:34:44:28:aa:57:65:39:8d:ea:9e:
         5d:24:97:85:7c:7d:f5:dd:7b:8e:1c:c6:8c:cb:cd:93:72:36:
         11:71:13:87:ee:b8:97:78:68:68:20:e0:de:29:c8:27:e2:ae:
         5e:cb:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----