Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnD8Am5OScgEOkgZTphmmyLr8a0.cer
File:                     cnD8Am5OScgEOkgZTphmmyLr8a0.cer (raw, json)
Hash identifier:          vuHz8k+uQLcc6kO86H0AI77vZDHVPnRCt/ZZQ+vg15I=
Subject key identifier:   72:70:FC:02:6E:4E:49:C8:04:3A:48:19:4E:98:66:9B:22:EB:F1:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01604C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/cnD8Am5OScgEOkgZTphmmyLr8a0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 05 Jul 2022 06:02:36 +0000
Certificate not after:    Thu 31 Aug 2023 00:00:00 +0000
Subordinate resources:    IP: 103.116.111.0/24
                          IP: 2001:df5:5100::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90188 (0x1604c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  5 06:02:36 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=A914B804/serialNumber=7270FC026E4E49C8043A48194E98669B22EBF1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:65:2c:99:01:96:8a:37:e9:50:0d:21:67:
                    80:b2:26:d3:45:f5:9a:fb:ef:ff:b1:43:c0:17:f8:
                    b7:39:83:97:e7:c5:76:ce:68:30:e6:d5:a3:ab:aa:
                    05:79:39:cd:e4:03:3c:35:30:96:08:3a:f9:75:15:
                    a5:a9:a2:89:98:c9:2e:77:2e:aa:76:08:a5:43:88:
                    2d:75:d3:60:65:95:80:bd:9d:47:61:99:64:41:ac:
                    fe:ad:dd:12:bc:cb:e5:25:15:a5:bc:4a:e1:60:4b:
                    ac:1a:c6:ec:95:c1:4c:3a:7b:06:9f:f0:d9:23:1b:
                    ce:13:6d:dd:97:d7:8f:28:2f:e8:8d:4f:26:80:e1:
                    ba:fe:12:80:4c:48:32:e8:50:1a:3d:39:89:12:93:
                    4a:65:c9:f8:93:ef:26:72:d6:a1:2d:45:87:19:ff:
                    67:dd:a9:8f:ff:f0:3e:0d:dd:bd:d9:b4:37:72:09:
                    15:c9:26:3e:e0:76:88:ad:5c:ab:75:dd:5a:97:e1:
                    f8:ad:d6:8a:73:69:40:d2:92:11:91:cc:99:04:02:
                    aa:4f:ee:b6:49:3a:b8:de:ca:53:53:a7:76:2c:37:
                    74:8a:0c:dd:92:2c:79:5c:61:17:fc:ed:ff:ad:78:
                    b1:f7:6c:16:f0:ad:32:c3:9a:be:3e:a5:d7:f9:ed:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:FC:02:6E:4E:49:C8:04:3A:48:19:4E:98:66:9B:22:EB:F1:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/cnD8Am5OScgEOkgZTphmmyLr8a0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.111.0/24
                IPv6:
                  2001:df5:5100::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:e9:16:87:de:e7:b6:c1:3a:1f:38:32:40:77:c1:ae:31:bb:
         41:24:67:34:14:b5:68:f3:f3:91:ee:20:91:f0:ec:12:57:18:
         1d:37:f2:cc:18:f7:1c:4e:dd:78:e2:ef:e8:6f:c3:18:17:91:
         83:4d:d8:2d:81:53:d7:f2:5e:51:e9:23:92:17:62:46:be:92:
         67:d0:45:43:f6:54:00:5d:8c:9a:0f:07:8d:72:96:3d:5f:80:
         a6:cf:22:91:2c:69:a0:d4:53:7e:c2:34:f8:f3:cc:80:9d:43:
         aa:83:3c:5e:ab:19:bb:58:b4:50:bd:cd:fe:35:e5:22:8c:d4:
         a2:32:f2:b8:41:29:32:0f:7b:20:a3:46:4b:25:21:bd:fa:72:
         68:c7:96:12:a0:cc:2b:36:d6:45:34:c6:4a:38:4d:3d:af:33:
         bf:d5:70:59:9c:7e:fb:10:6b:af:56:7e:0c:7b:38:47:a5:e3:
         a4:7f:c7:06:ee:c4:b9:4c:b5:73:93:b6:dc:63:6c:62:91:dc:
         69:87:44:e4:57:33:59:21:ea:7b:e2:6a:40:4a:aa:b9:e6:32:
         92:f6:9f:c3:ec:97:52:b2:13:27:22:5d:77:50:3c:fc:f5:b1:
         7b:76:a1:a6:bd:47:94:dc:cf:87:a2:56:73:b6:15:e9:cd:b5:
         58:2b:8f:13
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAWBMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDcwNTA2MDIzNloXDTIzMDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEI4MDQxMTAvBgNVBAUTKDcyNzBGQzAyNkU0RTQ5QzgwNDNBNDgx
OTRFOTg2NjlCMjJFQkYxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTyWUsmQGWijfpUA0hZ4CyJtNF9Zr77/+xQ8AX+Lc5g5fnxXbOaDDm1aOrqgV5
Oc3kAzw1MJYIOvl1FaWpoomYyS53Lqp2CKVDiC1102BllYC9nUdhmWRBrP6t3RK8
y+UlFaW8SuFgS6waxuyVwUw6ewaf8NkjG84Tbd2X148oL+iNTyaA4br+EoBMSDLo
UBo9OYkSk0plyfiT7yZy1qEtRYcZ/2fdqY//8D4N3b3ZtDdyCRXJJj7gdoitXKt1
3VqX4fit1opzaUDSkhGRzJkEAqpP7rZJOrjeylNTp3YsN3SKDN2SLHlcYRf87f+t
eLH3bBbwrTLDmr4+pdf57Wc/AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUcnD8Am5O
ScgEOkgZTphmmyLr8a0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRCODA0L0I2Q0ZEOTg2QzA5NjExRTg5RkEyQzYyN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0QjgwNC9CNkNGRDk4NkMwOTYxMUU4OUZBMkM2MjdDNEY5QUUwMi9jbkQ4QW01
T1NjZ0VPa2daVHBobW15THI4YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBABndG8wDwQCAAIwCQMHACABDfVRADANBgkqhkiG9w0BAQsFAAOC
AQEA0OkWh97ntsE6HzgyQHfBrjG7QSRnNBS1aPPzke4gkfDsElcYHTfyzBj3HE7d
eOLv6G/DGBeRg03YLYFT1/JeUekjkhdiRr6SZ9BFQ/ZUAF2Mmg8HjXKWPV+Aps8i
kSxpoNRTfsI0+PPMgJ1DqoM8XqsZu1i0UL3N/jXlIozUojLyuEEpMg97IKNGSyUh
vfpyaMeWEqDMKzbWRTTGSjhNPa8zv9VwWZx++xBrr1Z+DHs4R6XjpH/HBu7EuUy1
c5O23GNsYpHcaYdE5FczWSHqe+JqQEqqueYykvafw+yXUrITJyJdd1A8/PWxe3ah
pr1HlNzPh6JWc7YV6c21WCuPEw==
-----END CERTIFICATE-----