Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer
File:                     iQWyEZogs4yhJmgh06zJS0soTxI.cer (raw, json)
Hash identifier:          qZCST7GKVQv3Kp8meiaUryXafCD05ziRtnyiZva5quo=
Subject key identifier:   89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0154C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/iQWyEZogs4yhJmgh06zJS0soTxI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 12 May 2022 13:15:13 +0000
Certificate not after:    Thu 31 Aug 2023 00:00:00 +0000
Subordinate resources:    IP: 103.187.14.0/23
                          IP: 2001:df0:b4c0::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87239 (0x154c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 12 13:15:13 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:9e:bb:82:85:59:d4:62:3e:d5:11:fa:2e:
                    9a:ad:a4:b6:e8:fd:e4:d9:50:d0:37:c1:2f:9b:f1:
                    3f:03:ed:57:06:f7:28:e6:38:d2:d7:be:91:41:0c:
                    fe:55:3b:31:40:4e:a9:4b:15:94:12:62:1c:80:06:
                    1f:1c:0c:89:14:fb:bc:f6:30:e1:82:28:10:b2:57:
                    66:a8:94:0e:79:41:f5:40:19:a2:3a:a0:66:3e:95:
                    ec:de:24:f3:1c:aa:85:f2:ea:43:d8:3b:4a:ab:e0:
                    c5:89:f2:93:1e:40:9f:b7:bc:92:84:0b:6f:d2:9b:
                    af:52:a5:50:a4:88:7e:c5:b7:e1:f6:f8:ba:11:3c:
                    95:6e:18:68:68:21:1e:18:81:4c:eb:a9:67:35:38:
                    89:c4:ee:67:fe:fa:ac:0c:8a:41:87:ec:02:71:0a:
                    66:68:40:15:16:cf:92:0a:99:2a:6a:0a:05:9e:b1:
                    0b:c9:fa:3d:fe:0c:8a:15:4f:d3:76:29:7d:66:39:
                    e3:5a:9f:7b:cb:64:72:26:56:6e:69:15:de:3d:7e:
                    9a:8b:82:42:c1:c0:dc:47:0e:93:6c:94:c9:6f:0c:
                    c6:10:06:e6:17:61:f9:92:75:08:20:8b:67:89:65:
                    22:8f:f2:fe:ad:fe:2b:e5:96:85:1e:61:59:39:8a:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/iQWyEZogs4yhJmgh06zJS0soTxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.14.0/23
                IPv6:
                  2001:df0:b4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:fa:5a:92:bd:53:bc:72:5a:c2:12:ca:bb:21:a7:99:0b:23:
         22:5b:7f:18:f2:10:a3:70:9d:8f:20:84:6f:be:b5:ed:6b:98:
         29:e7:ec:eb:ee:9a:43:b8:3b:4e:89:9d:38:07:a3:be:da:63:
         81:b5:c6:a2:ba:7a:18:ea:ec:62:1b:09:ee:65:92:73:80:da:
         4b:e2:2c:bc:e5:9e:14:ac:53:f0:f9:17:62:b9:56:6b:f6:58:
         95:a1:1c:bf:c5:7d:6d:2e:04:d8:ee:6f:b2:ed:17:04:ab:25:
         16:11:5c:34:bd:cd:4b:b6:a4:ee:a7:bd:b4:0e:60:fd:4c:ab:
         d5:9d:48:fc:e0:50:fc:48:3e:c0:e2:6b:53:66:10:a9:03:c8:
         f6:65:d5:2d:4f:82:43:53:18:21:80:04:ce:eb:da:ab:78:e3:
         de:50:d5:13:66:6c:8d:c6:45:e1:6c:d6:5d:c7:8a:4f:1f:18:
         d3:8c:49:43:42:38:84:81:be:2b:a3:83:00:3d:b2:9f:b1:f7:
         04:2d:c5:02:06:68:e4:c8:28:4d:2f:50:a7:54:c9:87:aa:a8:
         9f:b1:6e:de:d1:16:b4:65:3a:04:67:4d:53:54:c7:e8:aa:21:
         12:98:1d:56:eb:5c:2c:93:da:2b:1d:e0:04:e0:5f:49:5c:d3:
         fa:fa:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----