Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer
File:                     fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer (raw, json)
Hash identifier:          l1/P5WZ1gu3VHBC36IRnk1TnFQMs/+kh6bIvx09gYRM=
Subject key identifier:   7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A7CE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 13:15:27 +0000
Certificate not after:    Sun 01 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 139880
                          IP: 103.183.244.0/23
                          IP: 2400:65e0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108494 (0x1a7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 13:15:27 2023 GMT
            Not After : Oct  1 00:00:00 2023 GMT
        Subject: CN=A911DBA5/serialNumber=7CDC8B0E3E557116B39C2A72F85712FC1496FF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:5e:e8:1a:b7:ea:58:9f:61:32:4d:41:4d:
                    b8:0c:05:6c:1a:30:f9:dc:ec:0a:81:d0:af:ae:55:
                    03:ec:16:a6:45:ba:d9:24:5d:e8:28:3b:e1:6a:fb:
                    9e:02:b4:68:82:80:08:bd:b2:1f:95:e4:73:c6:1d:
                    0a:f5:5b:c2:64:5a:ef:d7:43:55:03:fa:04:05:60:
                    64:36:1f:dd:36:37:b4:08:f0:18:8a:7f:93:a7:f1:
                    9d:4d:da:73:1f:7b:02:64:3e:45:0c:b7:88:a1:9c:
                    77:3a:1b:38:9b:d5:7f:a1:37:dd:8f:61:ed:ff:20:
                    b7:8d:ca:65:a0:c6:ab:98:aa:a0:ae:5d:96:65:5d:
                    fc:2a:c9:17:f8:ab:b3:0a:3c:05:fc:7f:63:a5:d5:
                    93:b2:1a:30:a1:82:7c:cf:1b:7b:33:62:39:de:45:
                    60:65:59:a9:1f:66:07:d6:20:84:b7:8a:ba:49:ee:
                    80:7f:10:97:1d:cf:88:66:a9:c7:51:cf:e5:15:58:
                    a3:3b:15:cb:56:2a:c7:4e:a9:a2:f6:f7:5f:3a:11:
                    d4:f4:2e:4a:3a:a4:16:0c:0c:b8:61:5c:9f:d5:a7:
                    32:c1:63:ce:a6:74:32:f4:47:19:47:e6:f3:a9:2d:
                    63:88:e6:9f:65:11:1f:f8:9e:f8:60:d5:6c:bc:0b:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139880

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.244.0/23
                IPv6:
                  2400:65e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:35:2a:f2:cd:fc:8a:9d:fb:e5:b8:50:a8:d0:13:26:b9:a0:
         74:fd:83:a9:8e:b4:f7:87:7d:aa:70:cb:b1:2a:9f:10:b3:00:
         af:ae:cb:f4:07:9f:26:a7:47:b7:36:a1:00:35:54:b0:3d:0d:
         66:f9:e6:3c:ee:ab:67:80:dd:69:5d:f7:20:eb:d5:29:f1:c2:
         bd:34:e2:74:c5:f3:cb:22:60:2d:68:2e:6e:c5:bb:cb:2c:02:
         f1:4e:9d:d4:79:78:1c:57:36:dc:a5:08:0b:44:3a:55:94:65:
         38:65:8c:3b:38:13:e7:fe:c3:8f:23:f3:06:37:61:a6:43:be:
         01:7c:4c:62:dd:d7:f5:c1:9b:65:f9:e1:6a:d3:66:34:5c:e7:
         c6:35:44:cb:2e:66:e0:ff:2a:18:b0:f0:4c:9c:cc:7e:e8:91:
         48:0b:71:2e:f7:cf:db:0d:a7:b0:56:58:b5:a5:41:cf:80:58:
         54:4c:67:41:84:ae:2e:28:dc:ec:43:27:b5:ef:74:2c:e8:c5:
         99:a4:87:28:98:75:61:bb:45:0e:28:d8:d2:1c:e4:6e:ce:08:
         e5:73:a4:04:9d:c0:69:b0:de:35:15:bd:cf:88:5e:60:92:ce:
         84:71:19:d3:1e:b1:c5:2a:c3:70:00:b7:f7:7f:58:ae:bf:51:
         53:e2:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----