Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2wUmxFp9rK73QX_1doT1EbU5Bk.cer
File:                     n2wUmxFp9rK73QX_1doT1EbU5Bk.cer (raw, json)
Hash identifier:          u9iJAeH2vA34HRXHj6v7VUnxnT58yUWvmQxc7aDfmxw=
Subject key identifier:   9F:6C:14:9B:11:69:F6:B2:BB:DD:05:FF:D5:DA:13:D4:46:D4:E4:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020011
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/n2wUmxFp9rK73QX_1doT1EbU5Bk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 13:53:52 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 152719
                          IP: 202.49.114.0/24
                          IP: 2401:9860::/32

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131089 (0x20011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 15 13:53:52 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91B0D88/serialNumber=9F6C149B1169F6B2BBDD05FFD5DA13D446D4E419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:29:b0:74:46:68:8c:4c:45:cf:b7:49:ba:
                    82:6b:b4:7a:4a:b6:48:56:96:b2:ef:a1:05:10:5c:
                    a9:93:d4:00:cb:73:fc:2c:82:eb:26:70:76:74:56:
                    75:8e:cc:19:34:75:cc:85:0c:29:96:89:68:65:20:
                    9a:5c:28:1b:33:1f:a4:01:f7:ec:52:76:84:36:5a:
                    c2:7a:4f:bf:d0:ec:c9:81:4c:1b:f1:c8:b7:f3:3f:
                    ac:6a:db:e2:6c:cf:ad:57:04:02:ad:34:f3:6f:21:
                    23:59:6f:5f:69:9c:5c:b0:60:23:c6:58:64:bb:7e:
                    1a:e4:63:4c:de:89:34:52:b8:5f:b5:d7:94:12:85:
                    2f:ee:2a:8f:cf:dd:00:19:5e:0a:6d:be:08:a8:bd:
                    69:43:ad:5a:5b:ab:28:36:29:6c:3b:e8:47:6c:76:
                    59:30:25:0a:3d:29:2e:66:88:f4:2b:0b:23:4c:0d:
                    44:a3:5f:3e:7b:e6:44:24:81:ce:93:6a:15:5e:57:
                    fd:f7:35:aa:8e:ef:80:64:a5:8a:f2:bf:86:e0:d7:
                    37:a6:97:d5:bd:ad:4b:98:4e:1b:8c:27:b3:da:11:
                    cc:01:ee:74:be:c8:4e:da:2d:51:6d:87:32:98:3d:
                    a8:a7:ba:0d:8c:66:43:9d:c8:42:9c:0b:78:49:11:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:14:9B:11:69:F6:B2:BB:DD:05:FF:D5:DA:13:D4:46:D4:E4:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/41BDC862426611EFA172C34DC4F9AE02/n2wUmxFp9rK73QX_1doT1EbU5Bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152719

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24
                IPv6:
                  2401:9860::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:c5:1f:3f:4f:94:66:b6:a2:9c:89:c7:e3:9f:b4:a4:d8:
         f8:95:d6:89:86:55:d4:1f:ac:bc:1c:7f:98:66:2f:de:14:ee:
         db:ea:71:4f:97:29:70:b5:87:d9:d8:2d:34:2a:f1:de:69:e0:
         5a:6f:18:90:0c:10:d5:de:8d:c5:82:b8:ba:e7:fa:94:26:2f:
         55:2f:60:f0:4d:3c:df:d9:a8:d7:77:d5:f3:c3:bf:b1:8b:fe:
         35:77:ba:ef:31:f1:6e:f8:9a:ea:b3:84:cc:f2:1e:f4:1a:ec:
         5f:3a:83:9d:e0:a9:61:fc:72:95:5d:3c:10:d4:61:9b:3a:e1:
         69:76:94:e4:ef:2e:21:dc:ca:9a:cf:1f:58:36:c9:21:de:53:
         7b:4b:07:7f:78:9a:e6:6b:5b:f7:42:da:60:09:a4:2d:3f:ac:
         42:60:a6:e0:69:a2:88:62:a3:31:51:b7:60:b3:ad:99:be:6c:
         dc:8c:08:64:aa:7a:64:6c:06:54:5b:5a:2d:f4:e4:cb:b2:cd:
         f3:bd:60:50:73:8a:ee:db:68:0b:7f:ee:78:7c:24:a7:57:9b:
         52:90:0d:50:c6:71:30:aa:b7:8d:6a:d8:d9:97:a0:95:c8:ef:
         e4:ba:48:23:ea:5f:90:c5:8c:02:02:4a:c7:54:38:de:74:e8:
         7d:90:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----