Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer
File:                     WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer (raw, json)
Hash identifier:          z4Yw4/f7VOg8PUgXMHgH7KcaPnCRfXD29Z8UqLdPIZo=
Subject key identifier:   58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C314
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 10:07:55 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 151351
                          IP: 103.134.148.0/23
                          IP: 2401:2e0::/32

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 14:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115476 (0x1c314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 10 10:07:55 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:9d:67:a6:eb:7a:f6:04:25:b6:81:80:67:
                    89:28:73:d6:34:2c:a0:22:56:1b:42:e4:27:68:d5:
                    3a:61:6f:23:28:31:81:c4:b5:e4:88:b6:ae:1a:72:
                    31:68:03:0c:98:6d:61:b4:0a:ce:ad:70:18:d8:26:
                    b8:b8:25:9a:08:a7:e7:dc:cc:12:e8:fe:62:e8:da:
                    68:f8:bc:f2:d6:bb:78:c2:b4:f1:75:58:2b:a6:d3:
                    40:be:a1:b6:79:fe:40:ac:34:b4:81:6c:ec:bd:46:
                    e9:a7:99:c4:9f:25:61:96:19:5a:b1:e5:39:3c:12:
                    6c:c2:3c:01:ef:93:8e:cd:8c:65:f7:c0:f0:d3:48:
                    9e:41:b7:35:dd:f5:2a:9c:d5:a5:f6:bf:a9:64:83:
                    7d:38:bf:bc:3f:48:a4:fb:8e:53:6c:b1:cb:3a:1c:
                    4b:6e:f7:5a:d7:5e:c3:e8:26:1a:84:47:5c:8a:ab:
                    cf:81:95:dd:42:98:3a:dd:8d:db:a3:6b:05:ae:d2:
                    30:ef:59:40:0f:82:a7:f4:ff:4a:33:ab:26:a4:f8:
                    dd:f4:e4:a5:73:8c:2f:eb:b7:8e:f7:23:86:f5:57:
                    86:77:68:99:8a:af:eb:84:34:5d:ba:6e:aa:f4:71:
                    93:0a:74:72:aa:6e:bd:fb:62:86:fb:a4:4a:b5:71:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151351

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.148.0/23
                IPv6:
                  2401:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:ad:8d:21:2f:6c:e8:81:f4:28:dd:1c:04:31:e8:6b:ab:
         df:e5:05:4a:ff:e1:aa:f0:c0:e0:38:77:69:a2:ed:c5:52:ad:
         bb:42:18:05:d2:5b:e2:22:eb:d3:a8:87:b1:60:4e:2f:a6:c7:
         e6:c4:1a:5c:12:f6:a3:bc:6f:1e:bb:78:cf:d1:98:64:db:68:
         38:17:1f:46:f6:39:f0:63:5e:9b:f3:e7:66:2d:de:85:ae:63:
         0b:4c:b9:75:d7:62:a5:be:ba:7a:fa:8a:f0:37:ae:31:cc:91:
         52:96:66:8a:4c:65:03:b5:7c:14:db:06:f9:a3:2c:50:09:9d:
         c8:d1:b2:e4:ad:76:0e:50:b1:92:72:e7:e0:b1:d8:87:22:24:
         10:57:20:44:78:86:d4:c7:19:45:a8:41:6c:6f:29:21:e5:02:
         83:a1:af:9b:88:f7:e1:5d:2b:a9:33:e2:16:bb:2e:95:5b:a8:
         1e:08:e0:e3:11:c9:91:68:18:3b:a8:9f:b0:24:c8:56:57:89:
         56:ec:87:cc:eb:45:f3:cb:71:e7:11:20:c8:f2:27:ee:4c:69:
         03:dc:11:11:d6:24:24:c4:aa:55:fd:5d:0e:40:3e:8b:bd:cd:
         30:a6:7a:c2:28:31:1d:81:2e:7f:52:80:07:b2:e2:65:69:07:
         50:14:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----