Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SsGkRCdW64krEFy5yTi_ctH7TSM.cer
File:                     SsGkRCdW64krEFy5yTi_ctH7TSM.cer (raw, json)
Hash identifier:          L7bk4nXlQ4FFYRj3S8id52MxdTwvfuVg2LEBkxeQMME=
Subject key identifier:   4A:C1:A4:44:27:56:EB:89:2B:10:5C:B9:C9:38:BF:72:D1:FB:4D:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0179C6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D55F5/8FC5F990BC3611EAB2805466C4F9AE02/SsGkRCdW64krEFy5yTi_ctH7TSM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D55F5/8FC5F990BC3611EAB2805466C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Nov 2022 05:53:01 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    IP: 1.32.0.0/17
                          IP: 42.188.0.0/14
                          IP: 45.116.240.0/22
                          IP: 60.48.0.0 -- 60.54.255.255
                          IP: 103.1.104.0/22
                          IP: 110.159.0.0/16
                          IP: 115.132.0.0/14
                          IP: 118.100.0.0/15
                          IP: 124.13.0.0/16
                          IP: 124.82.0.0/16
                          IP: 175.136.0.0 -- 175.145.255.255
                          IP: 180.72.0.0/14
                          IP: 218.111.0.0/16
                          IP: 2401:ed40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96710 (0x179c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 15 05:53:01 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A91D55F5/serialNumber=4AC1A4442756EB892B105CB9C938BF72D1FB4D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c5:1c:83:f4:5d:31:ea:c6:d0:c1:e9:94:09:
                    41:7c:f9:17:e2:7a:00:ba:f2:75:dd:82:d7:8a:5d:
                    d6:67:f7:78:01:e1:8a:13:68:8a:64:83:b3:82:68:
                    3c:1a:3c:60:88:69:3f:ed:a8:62:cb:d8:61:f7:7a:
                    a4:83:dc:5f:0b:1b:df:cd:f2:cf:be:01:30:57:5e:
                    ae:88:4f:1c:7a:85:98:10:63:de:4c:c7:0a:ea:53:
                    aa:bf:53:90:48:fc:9e:7d:b8:ed:3a:5b:b3:90:e9:
                    cc:b7:a9:01:68:9c:9e:05:7a:60:d1:90:ef:8e:46:
                    24:96:77:50:31:ff:68:15:4c:a3:27:46:f7:4f:e1:
                    9d:39:24:98:51:fc:03:c6:fd:5b:83:3a:9d:67:86:
                    66:bd:5f:b2:ff:41:2a:d8:ae:55:2e:f7:22:31:d3:
                    47:23:48:61:7d:eb:d4:f4:d7:a2:04:57:08:89:d9:
                    cf:36:af:89:ed:6f:ff:c3:b9:67:ee:47:89:12:12:
                    83:dc:a1:ca:35:fb:0b:00:58:8d:5d:ec:2a:38:ff:
                    19:cb:b9:1e:b1:93:a4:69:34:9d:40:0e:61:4b:4e:
                    b7:6d:46:52:27:43:98:74:16:81:97:bc:c0:46:35:
                    f3:2c:40:40:78:6a:07:0b:90:c2:67:73:61:1f:39:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:A4:44:27:56:EB:89:2B:10:5C:B9:C9:38:BF:72:D1:FB:4D:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D55F5/8FC5F990BC3611EAB2805466C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D55F5/8FC5F990BC3611EAB2805466C4F9AE02/SsGkRCdW64krEFy5yTi_ctH7TSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.32.0.0/17
                  42.188.0.0/14
                  45.116.240.0/22
                  60.48.0.0-60.54.255.255
                  103.1.104.0/22
                  110.159.0.0/16
                  115.132.0.0/14
                  118.100.0.0/15
                  124.13.0.0/16
                  124.82.0.0/16
                  175.136.0.0-175.145.255.255
                  180.72.0.0/14
                  218.111.0.0/16
                IPv6:
                  2401:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:9c:5b:c0:a6:23:75:df:4d:e3:38:bd:01:d3:a3:9e:d1:a2:
         1e:1d:bf:d5:a0:d6:21:a5:49:12:a0:5a:12:03:3e:09:6f:a6:
         58:b2:0e:51:39:a5:0e:2d:e4:c8:80:dc:a5:6a:da:86:b9:c0:
         3c:a2:13:b0:ee:56:0b:44:1c:91:8c:1b:03:89:b7:2c:76:4d:
         7b:32:af:30:f7:05:6b:ff:75:d0:1a:f9:4d:c1:36:6b:8d:49:
         d0:2a:a5:e6:11:d1:c0:8e:81:13:d4:de:7d:98:dc:f3:03:c4:
         cb:6e:11:ec:11:83:34:a4:5f:b3:07:44:98:8c:4e:70:e6:bd:
         67:74:a0:a8:f1:84:ff:e0:79:2b:5d:95:59:4a:37:2d:25:26:
         ce:ba:92:9f:59:3c:73:15:e5:b3:a9:e7:20:13:9f:cf:5b:9e:
         2f:6a:95:55:e2:26:5a:68:2a:a2:94:c1:44:8b:fd:b7:ee:69:
         94:90:ba:be:12:cb:bb:e2:65:59:86:03:e3:d2:fe:58:df:e3:
         ef:45:13:67:d3:40:3b:f6:1f:f8:10:0f:22:d9:0a:3f:4a:70:
         86:49:d0:05:ed:76:f3:cb:4c:b7:db:c8:cc:a4:e3:f1:8d:f0:
         a6:ef:4b:ba:72:b7:d3:fb:ea:92:ef:68:d8:fc:d2:69:d1:65:
         f7:45:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----