Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SpE18KZD-QIkypzeSxd3_CHbXLw.cer
File:                     SpE18KZD-QIkypzeSxd3_CHbXLw.cer (raw, json)
Hash identifier:          ZNQDVRTNugDNpP6pAnXOSrxgs/gxRaxOX+zuH65KhGI=
Subject key identifier:   4A:91:35:F0:A6:43:F9:02:24:CA:9C:DE:4B:17:77:FC:21:DB:5C:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020022
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/SpE18KZD-QIkypzeSxd3_CHbXLw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:02:10 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131106 (0x20022)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:02:10 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=4A9135F0A643F90224CA9CDE4B1777FC21DB5CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:07:2a:1d:02:a3:66:6d:d7:f6:4c:0c:37:
                    bd:02:3c:e5:2b:a3:7d:6d:72:66:0c:48:06:73:af:
                    ef:70:29:3a:b0:ae:3e:ec:46:b9:bb:88:14:ae:0b:
                    52:6c:06:87:b9:bd:37:6c:e3:ee:88:ce:ae:9d:26:
                    c8:57:ed:2a:ba:2a:85:3c:f6:f0:10:4c:b8:fc:6a:
                    25:5f:4e:56:24:0b:d1:1e:7f:ad:96:ee:e3:01:35:
                    81:45:6d:24:c5:a9:e3:2a:8f:68:7c:1b:34:ee:42:
                    55:65:1f:57:f3:a0:0d:69:66:dc:41:17:81:7e:71:
                    ff:26:91:6e:e1:11:37:6f:ef:5a:8b:9a:a3:5a:0f:
                    db:4c:e0:01:ca:4e:f4:55:4a:6d:c1:21:5f:53:31:
                    73:67:fc:d1:6e:42:4e:e0:87:f0:f9:3e:98:9a:ea:
                    bb:12:c4:dc:f9:79:2a:b8:46:a6:96:d3:cc:c1:95:
                    94:29:e7:13:a3:5a:bc:6c:87:1a:76:8c:0c:2a:82:
                    94:b2:7a:b0:7a:4c:fc:be:a2:ec:e2:b1:5f:d4:dc:
                    9b:16:2f:6a:9d:8d:38:fb:0f:ed:20:ec:78:6f:19:
                    41:00:d9:c0:62:d3:12:6a:4e:81:57:8b:cd:74:7b:
                    24:a7:c1:b2:da:eb:59:51:f1:92:24:77:26:d6:a7:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:35:F0:A6:43:F9:02:24:CA:9C:DE:4B:17:77:FC:21:DB:5C:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/SpE18KZD-QIkypzeSxd3_CHbXLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:18:56:3b:51:85:ea:65:b8:01:99:fe:42:37:2e:5b:e3:
         3d:5b:68:0e:2e:12:35:58:7d:ef:d5:a7:fe:07:8e:d5:5d:3a:
         c5:29:6d:22:8c:88:21:5d:8a:b9:58:dc:65:52:30:3a:67:42:
         0b:9b:5d:af:82:04:76:dd:cf:d7:de:92:49:db:85:1c:09:94:
         1e:f5:ce:dc:a2:fc:ea:40:6c:b8:a7:eb:27:9d:45:d2:86:b3:
         1c:a3:13:24:cd:26:e6:7c:2a:51:b9:f7:4d:8c:d8:ac:84:83:
         d0:35:b0:be:01:31:16:bc:a6:b6:0e:23:f8:1d:7b:4f:df:ea:
         e0:fb:a7:a7:1a:00:ed:02:b7:a3:cc:3a:ad:5c:f9:70:a7:bf:
         53:12:dd:26:52:e2:fa:8a:38:33:33:c9:45:84:e1:ce:7c:5e:
         29:94:bb:1f:c6:9a:46:5c:7b:61:60:84:18:fd:31:00:51:35:
         41:a2:ac:31:4b:6c:70:63:da:57:9d:72:6b:24:61:03:24:c0:
         45:80:3e:77:25:f2:a3:6d:78:7b:22:40:14:4b:f9:56:64:fb:
         12:10:94:d0:f5:5d:c6:e8:4b:0d:50:ca:a7:37:24:8d:c0:b0:
         5a:bc:5d:9a:20:3a:57:01:f4:e6:66:91:a4:01:3a:8a:d3:4e:
         58:9f:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----