Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
File:                     epl7T1IXZt3qSsody6OZIMJy-Qc.cer (raw, json)
Hash identifier:          +te7QypVT6eW80ERPsbFc2Wdzj7DNnll9FfTewSbRgc=
Subject key identifier:   7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014E51
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 05 Apr 2022 01:19:02 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/31
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85585 (0x14e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  5 01:19:02 2022 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:67:9c:e5:cf:9a:d3:92:bd:b3:00:d6:9f:
                    8e:29:a1:b4:4d:40:22:1a:e6:df:59:ca:34:9c:52:
                    da:27:03:d7:12:27:a9:0c:30:ce:7b:dd:3d:ae:81:
                    a8:2c:6f:a7:e9:b2:9f:97:2b:4b:12:a8:ad:b1:c3:
                    fb:7d:a1:5a:fb:a6:ba:1a:a4:31:8a:99:a4:db:84:
                    97:bd:f7:18:85:5d:95:0a:67:b4:a6:df:65:2b:8d:
                    11:2d:88:3c:bf:3b:a5:89:ae:94:71:52:e7:ed:84:
                    74:b6:bf:6b:11:6d:96:6f:d6:39:71:f6:c6:29:a2:
                    31:b8:76:5b:7a:c2:30:1f:cb:f3:20:69:f5:b6:90:
                    54:f0:ea:19:19:9e:61:5a:7d:8e:cf:61:3b:92:a9:
                    78:f8:8d:42:0e:b5:e2:e7:b0:0a:23:17:3b:54:d1:
                    fe:97:e6:18:b6:5c:b3:b5:e5:1e:f8:67:25:40:3b:
                    83:05:06:64:cc:1f:ad:76:99:40:85:c6:c5:e8:41:
                    88:07:a6:e5:8d:bc:0b:63:99:1a:ba:5b:cf:54:f0:
                    2e:2b:23:18:62:77:13:d3:6f:f8:da:01:ef:a2:5d:
                    c0:0e:d1:7c:b5:8c:cc:ab:27:3d:c4:da:60:23:76:
                    c0:84:ab:a4:e1:6f:be:b4:e7:d4:3a:c2:ac:98:cb:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/31
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:ed:8e:05:97:67:f2:f5:28:24:e6:b6:ed:d5:7f:e8:56:38:
         48:69:14:ae:87:44:11:d5:be:13:65:96:13:4c:c9:51:b5:37:
         55:6e:0a:cc:d2:e8:d1:63:39:96:b4:26:5b:22:9b:5e:44:64:
         17:ad:83:0e:7d:bc:2e:a7:de:b1:95:c4:94:be:40:93:42:74:
         b0:62:53:c3:8c:f9:f6:53:43:a6:4e:7c:83:20:6d:6a:ea:bc:
         24:3e:95:e7:2e:54:af:2b:95:ba:6f:32:0e:50:83:9f:97:88:
         f4:85:ae:0f:e0:ac:f5:aa:ce:50:2e:47:c9:20:8d:71:f2:88:
         7e:70:81:24:3e:4d:d9:95:07:92:86:5b:d1:b7:ea:9d:9d:a8:
         93:9c:36:06:14:b3:12:64:af:9c:2b:86:d5:42:4d:ae:2f:a7:
         0f:dd:e4:a8:eb:73:f9:d7:a3:91:d8:b5:c4:53:35:7e:59:9f:
         25:53:f1:54:4c:58:16:76:68:5b:79:21:b0:b8:1c:83:38:28:
         e7:0f:fe:b4:7e:c9:35:84:23:4b:00:61:79:71:66:ba:c7:43:
         89:7f:c9:54:71:23:bf:9f:00:14:e1:1a:89:1c:8f:e6:a0:9b:
         b8:a7:6a:72:28:90:a1:aa:6c:6a:f8:08:34:4c:dd:96:e9:98:
         3f:69:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----