Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loFTyIK-WzS-0cjxPTshxcNoxCs.cer
File:                     loFTyIK-WzS-0cjxPTshxcNoxCs.cer (raw, json)
Hash identifier:          NgWEudeqxElziMw/OX1KKqOciQ7+EMVslUp+x4Ae95U=
Subject key identifier:   96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AD48
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Jun 2023 21:17:12 +0000
Certificate not after:    Mon 30 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 150320
                          IP: 103.9.142.0/23
                          IP: 2400:ace0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109896 (0x1ad48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 30 21:17:12 2023 GMT
            Not After : Oct 30 00:00:00 2023 GMT
        Subject: CN=A91DED22/serialNumber=968153C882BE5B34BED1C8F13D3B21C5C368C42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:89:3a:71:85:29:3e:ea:66:d7:c1:2e:40:
                    05:c5:f4:5b:fb:65:59:67:ed:31:f0:c1:f6:1f:96:
                    a2:eb:86:f6:d5:6a:55:d8:c8:c2:eb:ea:71:55:e9:
                    df:b8:bf:34:5a:d2:c3:55:59:24:2f:59:c5:ac:b3:
                    af:18:4b:43:4c:47:82:d3:96:b0:b0:84:53:1b:40:
                    f9:36:91:a3:9c:a6:5f:71:0b:05:08:50:72:e3:81:
                    09:75:ca:63:be:ec:b2:2a:d1:2a:99:a4:2d:5d:af:
                    47:8f:34:ad:f7:a8:e7:c2:cf:64:ae:bc:5e:00:53:
                    0d:1d:96:e8:9e:ef:44:64:6f:88:ec:6d:2a:5d:52:
                    3a:e3:2c:5d:84:a4:24:ac:52:83:f3:df:f3:4b:15:
                    23:e2:99:97:7a:91:69:91:0b:99:2d:8c:ae:fb:81:
                    ad:b5:63:bc:48:e8:4e:70:f8:6b:5b:6e:1a:4d:cd:
                    4f:7f:f2:71:ed:1f:c7:3a:b9:f9:8a:cc:38:83:2e:
                    ca:cb:71:88:69:c0:42:67:b6:b1:4a:66:f4:87:58:
                    5e:e6:eb:18:f1:c1:e8:c4:7c:73:b5:10:f9:c7:fb:
                    38:58:3c:62:ba:d9:fd:50:bb:6b:98:39:b8:26:70:
                    9b:38:04:f9:c6:79:e8:64:81:18:77:5e:38:73:cb:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150320

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.142.0/23
                IPv6:
                  2400:ace0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:47:69:93:1d:af:cf:5f:10:29:3c:8c:7d:93:2c:aa:7c:
         16:54:fd:16:5f:83:f8:2f:c7:b7:d9:28:5e:6b:3e:67:36:2b:
         e1:19:01:99:aa:95:34:1d:e0:72:dc:35:c2:42:09:b3:1a:f9:
         60:ed:87:11:8d:12:f6:b0:94:94:82:81:4c:e0:7d:42:65:e7:
         81:a8:71:d7:3a:84:18:d4:8b:70:94:c3:7f:9e:b4:6f:43:cb:
         77:72:02:0d:11:41:0d:6b:44:68:ea:5a:dd:be:20:a0:54:f3:
         b1:c5:27:7d:26:93:c8:2f:64:e0:6b:32:fc:22:f4:0f:90:bc:
         e4:c6:18:39:b0:22:30:be:27:18:8f:e9:ce:ce:6d:00:9d:95:
         c2:dd:db:10:28:f3:6e:f1:12:22:b1:91:16:f0:fb:a8:30:55:
         12:76:7c:60:60:3c:9b:7f:92:52:b3:bd:24:22:c7:2c:dc:62:
         ed:42:ca:25:e0:f1:4e:af:f8:59:ec:01:c3:72:98:59:ba:77:
         87:73:5c:e2:ac:25:be:b1:27:f1:6a:45:75:fc:7e:de:e8:6e:
         51:dc:54:76:fc:ad:69:d2:93:c2:9d:25:0a:15:da:1c:9e:aa:
         86:cc:eb:65:6d:6d:c5:47:1a:b6:5e:bc:89:70:fc:b5:0a:fd:
         1f:de:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----