Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer
File:                     QHBHrbCrqFriNJcAUiKOmx8COeI.cer (raw, json)
Hash identifier:          MWpczgnjbPp0Oidedoon0DARk/ej4KMvV/7TKqqXCdc=
Subject key identifier:   40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016EB7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.mft
caRepository:             rsync://rsync.rpki.blade.sh/repo/Blade/0/
Notify URL:               https://rpki.blade.sh/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 00:40:14 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 140894
                          IP: 103.153.6.0/23
                          IP: 2406:3bc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93879 (0x16eb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 20 00:40:14 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:86:54:99:2e:3d:a7:3c:1c:c5:5e:d9:42:
                    57:3f:ea:97:f1:9e:a9:be:2d:06:85:4a:5e:e2:13:
                    83:0e:bf:f3:4f:c6:b3:67:0d:73:d6:0e:53:39:f3:
                    39:36:1d:48:46:57:ac:1f:91:7a:fd:8d:69:83:a8:
                    15:b4:b4:03:6a:b2:e6:1d:87:85:20:cb:47:55:2e:
                    58:34:6c:e9:c5:93:b0:98:c0:d5:3c:c6:2a:b1:ba:
                    d0:f2:93:9e:7d:20:70:d7:2c:0a:72:d9:c2:00:df:
                    fd:bf:e5:b0:d4:2a:00:15:ab:36:82:49:72:37:7f:
                    d6:99:a9:f2:a4:42:d7:88:03:ea:67:cc:bd:d3:f4:
                    f3:63:fd:38:eb:cd:b3:a4:1d:33:d4:73:56:50:c6:
                    47:d5:99:e0:06:14:f2:f3:83:f5:51:e3:3c:c6:2f:
                    b8:d7:e2:83:e3:3c:0f:41:98:bc:7f:c4:82:86:0f:
                    01:1b:29:27:03:77:8b:71:49:64:b7:b1:c2:c1:6b:
                    1d:71:38:aa:53:6a:40:22:c1:2a:c6:da:1f:f2:bf:
                    7e:e4:83:61:31:31:00:c5:e3:1e:ba:87:30:55:14:
                    ce:cd:84:75:36:c0:59:50:bf:04:f6:85:eb:7e:2a:
                    6c:1b:b4:e0:17:74:44:cc:46:dc:ce:84:a7:86:5a:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/
                RPKI Manifest - URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.mft
                RPKI Notify - URI:https://rpki.blade.sh/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140894

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.6.0/23
                IPv6:
                  2406:3bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:40:38:88:54:60:4b:92:1a:9e:e6:fc:fa:9e:c8:7b:cf:b2:
         7f:91:f6:13:76:cb:fe:8e:b9:9d:83:3b:bd:55:5f:e0:91:da:
         e1:07:3f:c2:65:a3:ea:26:38:6a:f8:8c:8d:40:d3:7a:c1:30:
         a2:ff:c7:d9:a1:26:85:60:5b:eb:16:71:0b:a9:99:d4:2e:2d:
         bf:14:99:c1:d8:37:87:f9:19:55:9b:09:e5:4e:01:79:03:dd:
         6f:af:8b:97:37:60:de:e5:8b:0b:36:44:8d:1a:0e:9f:f3:e0:
         63:3d:e6:5c:42:8e:4b:a9:29:c5:ba:16:fa:bc:bb:e9:47:c9:
         6f:ed:1c:50:c6:90:b8:74:7a:66:36:a5:80:20:1b:50:34:c8:
         be:d9:48:80:35:8c:63:64:02:2b:f8:fd:ee:92:9f:d1:8b:7d:
         06:ef:69:27:d1:06:8d:50:7b:45:a8:04:eb:54:df:a8:16:7d:
         96:63:76:20:75:14:62:df:e7:e0:51:a8:74:0e:28:55:66:c1:
         8f:c3:68:4a:38:13:69:4f:bc:cf:14:67:96:7f:22:3b:5d:ed:
         9f:d6:bb:a4:d8:9a:6a:ca:43:c2:1b:e9:31:5e:22:b1:fd:11:
         15:af:8f:08:f8:7e:2e:0f:23:80:e8:b0:a7:e7:06:8c:53:fa:
         de:d4:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----