Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b39cMpc6nWyvzgcXevoZpIiAY80.cer
File:                     b39cMpc6nWyvzgcXevoZpIiAY80.cer (raw, json)
Hash identifier:          gzPwfVtDN9uu6InX640TgGiKCSN4Jm14bG7WweXY8kQ=
Subject key identifier:   6F:7F:5C:32:97:3A:9D:6C:AF:CE:07:17:7A:FA:19:A4:88:80:63:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02002C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/b39cMpc6nWyvzgcXevoZpIiAY80.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 14:07:38 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131116 (0x2002c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 14:07:38 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=6F7F5C32973A9D6CAFCE07177AFA19A4888063CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:c9:0b:f6:4c:e1:2f:d5:89:54:f1:4f:bf:
                    17:e3:3c:0d:5d:e4:7a:45:8a:21:34:8f:33:cd:bb:
                    a3:cd:43:b6:9f:30:b2:0a:15:13:c2:eb:c6:a8:ce:
                    0e:90:1e:e4:9a:9b:4c:49:81:93:32:6e:c4:84:2c:
                    4d:0a:87:3f:b7:48:e6:3d:e6:d4:b8:2f:58:ee:52:
                    1e:8f:69:26:01:8c:a2:5f:47:e7:42:cb:2c:c4:82:
                    53:57:96:2d:01:76:17:8d:ec:1b:40:91:1b:1c:68:
                    16:78:f0:de:a3:f3:b6:b5:81:2a:25:6a:da:37:99:
                    d0:f5:f1:97:bd:c3:60:06:4d:02:77:ed:9e:f7:c7:
                    ae:43:0b:83:50:68:ee:6a:e8:04:c6:4b:c8:dc:5c:
                    c2:55:1c:f3:9b:31:7c:38:af:b1:40:a7:b6:b9:64:
                    16:2c:b1:b8:a1:ed:70:1e:8d:c0:fc:05:53:da:03:
                    ad:9b:d5:41:21:64:a1:4e:40:2f:e2:55:8c:b7:99:
                    dc:6b:c4:65:f7:b0:0f:22:e2:60:0c:e9:09:d2:dd:
                    3e:97:e8:c1:cf:f5:d8:45:f0:45:17:65:ba:9c:b3:
                    42:8b:53:3c:44:55:da:96:a0:e9:13:f5:7f:10:0e:
                    35:01:7b:20:02:8d:32:5b:d9:fe:25:5d:07:b8:9c:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7F:5C:32:97:3A:9D:6C:AF:CE:07:17:7A:FA:19:A4:88:80:63:CD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/b39cMpc6nWyvzgcXevoZpIiAY80.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:e7:ec:ab:71:3d:dd:72:45:a8:21:ea:2d:65:3e:12:3d:
         a4:c5:17:02:87:5a:31:54:1d:b5:8a:b7:bf:59:b0:8b:3e:26:
         a3:d5:eb:99:71:e3:d3:47:b5:1f:35:b8:38:9d:d4:8c:c3:64:
         51:0a:dc:24:a0:70:f9:aa:47:c2:34:62:da:a7:b6:57:63:e3:
         60:31:65:5e:e4:84:6e:5f:d6:16:64:c7:91:f6:39:40:6e:11:
         f9:6f:09:dd:cf:cf:91:6f:af:d8:24:03:1a:a8:69:ee:3e:a9:
         0a:a6:74:93:9a:dd:e5:be:22:ca:f4:d3:dd:d4:6d:e2:0c:d2:
         bf:9d:61:c6:6d:f6:72:bd:68:c4:b4:c1:6d:43:67:89:2f:87:
         43:ec:ac:85:74:76:ca:ef:fa:26:02:41:75:9e:db:08:14:10:
         5d:3f:64:14:d8:b9:07:0c:50:51:06:27:fe:9b:9d:d9:86:2a:
         6f:4c:d4:5c:9a:2a:94:cc:4d:2f:a2:6a:33:a2:24:12:03:b5:
         d8:91:f1:e5:98:1b:b4:68:e9:e0:b4:c8:37:de:8a:18:9b:5e:
         fa:f9:2a:76:56:a2:4a:9d:26:0e:fd:55:07:b9:0c:58:dc:aa:
         6c:ea:c3:be:45:b4:5c:34:a1:4a:7a:54:23:80:ee:bd:1d:7b:
         b7:75:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----