Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kslAaFv61zLTZNid4tAMGIoCU84.cer
File:                     kslAaFv61zLTZNid4tAMGIoCU84.cer (raw, json)
Hash identifier:          4pnfaIpolbOmF+ofivRwXhkQMm5DyqRavjz6Qm0ec8I=
Subject key identifier:   92:C9:40:68:5B:FA:D7:32:D3:64:D8:9D:E2:D0:0C:18:8A:02:53:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018F34
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/kslAaFv61zLTZNid4tAMGIoCU84.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 03 Mar 2023 07:31:30 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 135046
                          IP: 103.207.18.0/24
                          IP: 2001:df0:5e00::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102196 (0x18f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  3 07:31:30 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91F443D/serialNumber=92C940685BFAD732D364D89DE2D00C188A0253CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:c7:91:f7:17:ca:1f:71:2c:91:95:ae:fc:
                    9f:4d:0d:92:9e:2e:18:18:58:13:e6:59:41:e7:64:
                    41:2f:82:89:5a:84:59:30:28:b3:d1:84:1c:8e:b8:
                    37:79:8c:5c:90:84:76:13:da:ae:13:76:56:a1:80:
                    c6:6f:06:6c:f5:69:5b:4b:cc:98:2a:40:d3:b8:66:
                    98:b9:76:ed:91:53:ab:b2:b1:d0:f0:c7:1e:4d:d9:
                    7d:38:c4:04:44:1f:1a:26:e2:3a:3a:0d:1d:a2:73:
                    3d:fe:ec:6f:96:ef:1a:bb:d7:1f:25:61:22:ec:8a:
                    fe:8b:98:74:37:2a:fd:25:b2:5c:41:31:58:07:d6:
                    f3:44:ae:7a:c4:34:13:4e:ca:71:8e:9e:86:67:aa:
                    0e:f5:e8:4c:08:10:62:fb:5d:ab:65:8c:92:8c:8e:
                    a9:fb:2f:c1:13:54:e5:d1:60:13:76:59:88:59:38:
                    44:be:a5:6d:c4:98:24:6f:6e:6a:69:1a:72:9a:e0:
                    67:48:1c:e4:23:b2:22:c6:33:27:50:43:0a:5b:91:
                    4e:7b:75:54:d8:20:6f:10:a2:a5:ff:d1:5b:1e:7c:
                    94:aa:66:cd:97:44:48:92:c3:54:cb:fb:8f:da:b0:
                    cc:1a:79:3e:21:78:e6:18:be:e2:88:9a:88:64:ae:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:40:68:5B:FA:D7:32:D3:64:D8:9D:E2:D0:0C:18:8A:02:53:CE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/kslAaFv61zLTZNid4tAMGIoCU84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135046

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.18.0/24
                IPv6:
                  2001:df0:5e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:18:6a:b2:13:9c:5a:0a:0d:c0:a4:43:6e:0b:3f:34:4b:
         68:80:27:3b:06:3d:34:f0:b4:49:9e:70:02:d4:3d:ad:7b:11:
         ad:74:55:fa:4c:ed:cf:39:41:34:e0:8f:10:e4:07:f3:b6:95:
         e3:bf:2e:61:42:82:b9:04:a1:53:10:bb:ab:54:09:fe:ca:70:
         40:c5:31:ec:31:9c:5b:8b:7c:b5:20:b6:49:3d:08:a4:3b:df:
         c3:95:4e:c6:29:12:20:f0:a2:ac:5f:bb:36:89:fb:6b:71:15:
         a9:82:2f:18:71:69:2d:1b:0f:38:24:41:c8:eb:06:25:88:5b:
         a9:b1:f6:b3:64:2b:a4:c6:98:5e:3d:2f:07:7c:16:c6:f7:e1:
         3b:ad:49:1c:18:f7:09:0d:fb:9f:ab:f5:e4:87:46:ce:4b:53:
         f4:25:67:53:fb:b5:c4:36:49:79:bd:df:8e:51:3e:b4:21:e9:
         2e:f8:cb:c3:e6:84:fc:c8:eb:52:c5:c6:2b:a7:b4:8a:96:13:
         1e:69:a0:f2:77:ed:9e:4a:2b:39:58:ae:a7:83:97:38:38:3a:
         dc:3b:4c:1a:69:c6:1b:3d:08:00:dd:e3:aa:54:6a:c3:7f:a7:
         59:b3:1a:dd:bd:af:47:ce:e0:76:25:f8:9f:d5:c9:b5:26:27:
         b8:64:75:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----