Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kT9UXqCIqegevf5Fs7FZNY-qwTc.cer
File:                     kT9UXqCIqegevf5Fs7FZNY-qwTc.cer (raw, json)
Hash identifier:          7+JcHLpCj/iXNpN9AfkljVNe7E7OJxrv+GS5obQZlpE=
Subject key identifier:   91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A966
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A918C2870000/0
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Mon 12 Jun 2023 11:34:27 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108902 (0x1a966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 12 11:34:27 2023 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870000/serialNumber=913F545EA088A9E81EBDFE45B3B159358FAAC137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:53:0d:c1:78:0d:a1:c6:02:79:8f:1e:1c:
                    9f:37:cd:ce:f9:3c:5c:47:a3:a4:99:fd:17:b9:31:
                    a0:01:ff:9e:41:30:8c:8a:77:84:e0:3d:fa:4d:3b:
                    d9:59:cb:61:85:72:88:28:3f:b8:bf:6a:98:9e:8b:
                    d6:5e:77:cc:7b:eb:f2:6a:96:53:f5:21:93:a2:57:
                    48:10:b6:f2:2e:7a:52:07:5c:3d:fc:17:fa:7d:f5:
                    8f:3c:63:85:30:3c:2a:f0:3b:44:e1:69:a4:94:62:
                    a7:c3:4c:a0:6c:03:eb:37:23:55:b4:77:da:d3:38:
                    a4:2c:38:c8:ed:70:ec:e3:27:0b:b3:97:5d:63:08:
                    a6:8f:5a:c5:b6:77:a8:cc:0e:d9:56:c3:93:19:f9:
                    da:80:b9:23:26:0e:67:e0:6d:0b:24:3a:70:f8:dd:
                    27:bd:76:46:e4:d3:99:a5:a1:27:57:af:92:dd:15:
                    a9:5e:ec:a2:ef:a7:05:0f:b3:00:5a:04:6f:f3:84:
                    a1:b0:4f:65:24:3f:1b:ec:43:32:9b:51:6a:75:13:
                    57:b4:10:b6:18:fc:e7:b0:e9:f3:5d:84:2a:d0:cf:
                    43:3c:b7:8e:e9:40:df:db:a8:64:81:4b:78:5d:38:
                    39:d6:db:50:11:71:d6:15:21:fd:06:67:14:04:3e:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:d9:6e:42:5e:10:af:99:47:b4:a7:83:4a:f3:43:8f:97:
         6e:5f:2e:6b:39:e4:74:be:e7:79:22:d5:e9:ad:fd:f2:6a:f7:
         c4:cd:b7:38:8f:33:4b:2d:f5:36:d1:a2:23:81:3a:e7:d7:2e:
         d4:5e:06:0e:b0:27:9b:36:fc:40:bd:5b:d8:bd:d1:cf:8a:8b:
         a7:1f:d6:b9:3d:e7:44:ca:86:0e:f5:b1:d8:c4:fd:74:eb:2c:
         18:4b:d9:0a:4f:5c:77:68:50:cf:97:cb:97:44:82:9f:11:ec:
         f7:cd:b4:8c:74:b3:9c:a5:44:d1:e7:b6:91:8e:ed:c7:5a:bb:
         10:53:69:93:0a:65:d9:c0:79:42:c7:57:66:f3:ca:3b:f7:af:
         fe:a0:c7:42:b6:f1:d9:3c:5d:cd:bd:18:e3:35:0c:f6:28:8f:
         2e:a1:62:f9:b1:88:b8:8f:9b:5d:fa:95:87:ea:1c:80:88:42:
         19:39:87:25:66:86:74:6f:fb:d6:14:e4:ab:21:54:97:10:a4:
         a7:b5:1e:02:58:9e:22:79:87:00:ed:da:78:6c:db:72:3d:7b:
         f6:05:7b:80:f9:89:b5:81:24:9c:b9:86:f3:6e:0e:31:cb:e4:
         dd:9f:8d:81:1d:99:35:96:dd:25:b1:59:42:72:58:2b:c4:bd:
         5e:84:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----