Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
File:                     didjt9YAlykw6d56FELF0w9oxIQ.cer (raw, json)
Hash identifier:          P4k0AM3EIacaQFsk32SB/UyDMfUgLBYBS8KATF5RPSI=
Subject key identifier:   76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BDFA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 17 Sep 2023 19:00:33 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 103.130.144.0/22
                          IP: 2403:bcc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114170 (0x1bdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 17 19:00:33 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:bb:6e:29:e8:d9:70:ee:1e:91:16:ea:bf:
                    d1:10:c7:cd:23:aa:15:8c:4d:32:7c:db:4a:df:94:
                    ac:d5:c0:3a:ec:b8:f8:81:f4:e8:0d:27:56:f9:4d:
                    64:0b:8b:8e:36:c1:65:18:cc:31:28:1d:bc:78:ab:
                    ba:5e:22:41:07:96:19:c2:72:1e:f9:1e:b0:b8:50:
                    50:f7:56:fb:50:53:0d:8e:15:df:78:72:a3:a5:2e:
                    f5:8d:23:2b:82:ed:4f:1e:ff:9c:1a:5c:f2:98:c2:
                    15:54:39:8e:8e:28:24:a8:7a:e0:49:50:db:58:39:
                    bd:77:43:00:52:65:93:5b:7e:32:ed:fa:08:b9:00:
                    42:ac:6d:c8:6b:4c:45:30:9d:ac:f5:30:f0:63:39:
                    80:40:ce:88:2c:88:83:c1:ee:c8:d2:22:8a:a3:31:
                    3c:60:a0:ea:2d:9a:94:10:95:9a:dc:4d:a0:d0:97:
                    6c:0d:52:a4:d9:6b:5c:cd:07:ab:02:9f:68:b6:50:
                    45:b5:79:1b:32:ab:eb:f0:72:56:dc:9b:f9:1f:eb:
                    fe:42:b5:3b:09:44:a7:91:ba:1e:1a:da:9d:65:29:
                    4a:a0:04:32:3a:8a:09:08:9b:93:bc:bb:a2:f7:e7:
                    e7:8e:86:b1:a7:47:76:0f:09:1b:d9:6e:46:3e:16:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.144.0/22
                IPv6:
                  2403:bcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:49:1d:f7:6e:4d:99:ef:61:f0:f1:59:05:36:5c:b6:7b:
         26:0e:fe:f7:6d:0e:94:58:73:49:83:61:c0:b1:97:39:8c:34:
         a4:c1:6b:9f:07:79:4d:b7:f5:f8:5c:5d:51:31:b7:ef:ec:59:
         c3:a8:0b:34:27:98:11:35:d2:69:c3:a2:6c:d6:18:57:4c:ef:
         8e:ac:cc:86:26:ef:50:04:21:a7:8f:6e:ae:74:42:9b:af:b6:
         f4:2f:0d:5e:48:55:ea:8a:84:6a:f5:4b:0d:e8:b4:42:e1:e7:
         5d:cf:60:08:22:b9:c7:37:13:cd:1b:df:db:9c:a9:96:7d:39:
         22:da:bc:fd:7a:52:f4:df:c8:21:57:ab:7e:0b:76:a9:57:09:
         25:6d:b9:d0:f3:0d:27:4c:c2:a8:00:05:10:93:dc:1a:0f:53:
         58:5b:63:41:86:2e:75:c4:c0:0e:b5:11:2f:48:44:96:bb:fe:
         9d:2c:c4:78:57:84:d1:10:ee:7a:b5:6c:13:84:a1:9b:ec:98:
         bb:00:20:5c:26:60:bf:4c:55:1c:63:9c:e3:9b:3d:66:25:68:
         d1:7a:2a:db:53:c4:b2:87:aa:71:7b:91:1d:be:a3:ec:66:44:
         17:9c:1e:b4:22:03:df:1a:08:55:fe:a5:e5:1b:5c:c7:a3:5c:
         43:92:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----