Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.cer
File:                     ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.cer (raw, json)
Hash identifier:          xo5TwuB+hRTV4ck+k5RS3IMuSL8u8nFRIOaDkW80ZNE=
Subject key identifier:   44:EA:C9:DF:30:7E:58:1A:9B:BB:F6:52:4F:14:59:97:31:0E:63:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B070
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jul 2023 08:56:31 +0000
Certificate not after:    Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 137245
                          IP: 103.106.0.0/22
                          IP: 2402:38c0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110704 (0x1b070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 17 08:56:31 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=A91FAE47/serialNumber=44EAC9DF307E581A9BBBF6524F145997310E63B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:c4:5f:18:6e:34:66:5a:17:8c:4f:85:81:
                    43:28:ff:28:a0:2f:f4:36:4d:8f:fb:23:07:94:a7:
                    df:6a:31:16:0a:d4:d2:11:32:29:97:17:04:dd:15:
                    c0:e7:c0:2d:f8:c8:f5:a5:04:35:16:f3:0b:7b:38:
                    98:83:fc:4b:0c:13:58:9b:d6:d8:e0:44:88:3e:de:
                    1b:08:21:13:db:d2:ed:f3:93:9e:6f:f8:31:2f:31:
                    69:0e:cd:7a:cc:e5:6c:a9:6f:de:f4:4a:92:6b:5c:
                    f5:34:39:a2:cb:eb:f6:7f:65:68:de:a5:bc:f0:2a:
                    5c:93:bc:9c:53:09:03:6b:f0:04:85:f7:5b:e1:c0:
                    07:1a:db:44:f9:31:dc:54:17:be:06:61:c4:ce:17:
                    07:7d:7b:63:4c:ac:31:77:54:9a:fc:6b:d4:d1:23:
                    dc:4b:eb:91:f6:50:ba:29:0b:f2:b9:72:e7:a0:66:
                    41:d2:53:0c:c9:70:0a:d5:65:c9:d2:db:d8:30:43:
                    36:1b:20:4b:ad:f8:62:da:91:89:5b:92:fd:81:12:
                    1f:0e:37:ea:aa:1d:b0:3e:93:55:0f:5d:4a:cc:ba:
                    4d:e6:36:80:07:fc:c6:d5:d1:b6:c6:e9:9e:e9:0f:
                    62:8c:45:dc:54:74:df:a3:32:53:3f:96:9f:c2:87:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:C9:DF:30:7E:58:1A:9B:BB:F6:52:4F:14:59:97:31:0E:63:B3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137245

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.0.0/22
                IPv6:
                  2402:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:be:d7:35:4b:80:cb:57:e1:9f:d7:7b:1f:a0:d0:11:b8:
         d1:d2:53:78:6f:fd:72:76:26:3b:31:1d:03:6d:d5:a7:30:75:
         f2:67:bc:69:5b:27:98:87:ef:86:2f:7f:0a:05:95:d1:93:e4:
         41:66:3a:8d:72:27:12:eb:39:6f:c0:76:f9:44:fe:0c:11:7b:
         d2:f3:42:b9:d9:fc:34:5c:af:21:4f:23:5e:90:a3:b4:08:f9:
         a9:86:14:61:39:8e:9b:7b:d6:ce:d6:21:5f:79:23:12:22:f0:
         29:50:3f:bf:07:60:3f:81:bb:f1:12:52:f9:74:e2:f0:34:c6:
         a0:c4:f7:df:74:4f:13:55:3f:0d:28:69:94:ba:f9:0e:6b:39:
         ba:9d:78:8f:93:ab:96:d7:c1:5c:90:77:83:f5:25:a7:0b:58:
         73:78:c8:52:93:ff:89:8e:31:71:ea:6a:27:dc:4f:c5:2c:18:
         50:a0:05:d7:5d:17:4d:b9:7b:78:07:f9:aa:c1:d2:c0:8e:e9:
         af:08:9e:6b:79:b1:49:16:66:0f:06:1a:af:6f:ce:48:83:51:
         1f:bf:f7:10:be:62:59:fe:ba:ad:18:74:e9:de:78:3b:53:08:
         4d:82:9c:cf:ff:42:2b:7d:84:9e:80:37:db:af:01:f7:00:1b:
         13:ae:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----