Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pl4AblNPWHprgcgsjYwA9KEN_6w.cer
File:                     pl4AblNPWHprgcgsjYwA9KEN_6w.cer (raw, json)
Hash identifier:          TeFXk8R7jGlIt9Q8X1i80YqNLqu+DxgmSe7Ce6CxMzc=
Subject key identifier:   A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AB83
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 22 Jun 2023 15:16:25 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    AS: 135676
                          IP: 2407:e980::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109443 (0x1ab83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 22 15:16:25 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A9154E7F/serialNumber=A65E006E534F587A6B81C82C8D8C00F4A10DFFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:12:4f:80:5e:b0:2a:9b:86:c2:ec:3f:98:
                    1d:56:b0:37:77:20:ac:70:fb:73:a4:72:e6:8b:11:
                    6f:a0:17:7b:18:92:82:df:f0:4c:83:98:2c:b2:bf:
                    50:9c:d2:61:bd:04:8e:83:ea:2e:3e:e1:3e:f1:6a:
                    3a:b4:43:fd:20:e7:ff:eb:c5:9d:85:32:71:11:07:
                    07:64:e7:3d:a6:c9:17:9a:d5:03:a0:c1:9b:78:bc:
                    e0:fb:f4:85:c0:90:53:f9:c2:40:bd:7a:64:f7:e2:
                    b3:04:06:b5:fb:c6:d5:a3:40:23:22:60:72:b5:e6:
                    65:b8:38:cd:2d:d1:17:62:f4:65:f5:57:34:bb:30:
                    25:2c:33:0f:9c:ae:10:b6:8b:73:4b:7a:2f:9f:b4:
                    5d:23:d5:f9:83:2d:2c:f6:9b:aa:ee:29:0e:d0:8f:
                    88:ee:2b:62:d1:ca:b9:e4:2d:8c:9b:d2:e8:fa:4d:
                    6c:69:ec:94:58:a9:ad:da:71:95:a4:38:57:21:8f:
                    e0:23:88:10:c3:00:79:7a:58:65:af:c8:94:8b:74:
                    bd:e1:00:80:03:d2:47:75:ea:17:3a:86:a7:04:22:
                    1a:6e:f0:c9:d0:7b:eb:08:23:a5:8a:d9:90:47:30:
                    37:99:c4:46:19:8d:17:86:98:10:67:d3:ea:85:29:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135676

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e980::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:ee:6c:7f:20:67:6c:f3:58:2d:58:89:34:64:6c:02:b0:
         af:a3:96:7a:0d:50:0d:c4:fa:74:87:45:4e:1f:cd:fa:cb:96:
         29:37:d6:41:a3:f7:e8:0a:9c:46:51:e6:df:13:b2:4c:b5:19:
         03:13:43:ff:67:0d:c3:7d:d9:c7:ad:b8:96:d8:09:b7:62:bd:
         f7:18:3b:66:c1:42:63:d2:7b:a7:df:68:31:a6:51:4e:e0:77:
         0b:05:60:25:9a:24:16:a4:87:a3:37:a3:00:ee:3f:6c:a9:a4:
         09:5f:50:b2:31:50:6c:e5:54:fe:4d:72:ee:9f:b5:37:76:f9:
         6e:a3:8d:f5:29:d3:58:08:8f:02:af:44:2e:e0:e4:8f:45:a2:
         02:46:3f:20:3c:d1:1f:52:fd:ef:05:5c:79:a9:bd:98:c9:c0:
         a6:54:0b:f1:68:52:47:30:18:37:97:4b:38:fd:f3:26:3e:c9:
         56:d1:56:85:7d:bc:21:4c:96:42:22:d6:6d:5d:0a:9c:92:ae:
         45:95:b3:82:1e:ee:8d:6c:9c:13:e5:bf:ec:23:3b:57:8f:fa:
         25:66:bf:5a:33:e6:8d:ed:b6:b9:0e:59:ef:f1:03:33:8d:d5:
         a9:8c:b9:2b:e6:e7:9d:71:62:59:2c:51:2f:f2:68:d2:6f:67:
         13:37:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----