Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer
File:                     qBmAo25inKAR7UPCjOWw-9Jl3mM.cer (raw, json)
Hash identifier:          7o56HVVmuxsRn3Kpj43u8f9oRUWEzzN0N/b+XR7rJa4=
Subject key identifier:   A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D2F0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 19 Dec 2023 16:38:23 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137209
                          IP: 103.104.232.0/22
                          IP: 2402:1dc0::/32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 16:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119536 (0x1d2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 19 16:38:23 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:f7:7b:09:dc:d4:16:36:cd:65:05:67:c0:
                    8a:92:b4:57:c9:09:6e:be:ce:ba:f7:cf:7c:5b:41:
                    08:bc:54:d6:c5:82:61:56:77:2f:06:dc:0c:53:d9:
                    f5:53:83:47:dc:8c:54:24:9e:ae:38:7c:fa:a8:7f:
                    5e:29:84:ef:dc:96:64:9a:5e:6b:25:57:e7:a5:c4:
                    43:35:a6:9b:39:3f:ca:d5:c6:63:22:05:2c:81:2d:
                    8b:84:02:37:aa:1c:20:d4:27:c7:02:23:6b:de:18:
                    b0:dc:56:0d:ee:e1:3a:a7:20:bb:f2:f6:39:3b:bc:
                    55:42:06:f4:84:7f:63:99:cc:9d:6c:7e:f4:62:20:
                    9a:3e:93:3e:55:27:8b:3c:e1:1b:77:d5:70:67:03:
                    ec:65:43:27:be:6a:64:94:3f:87:f4:a1:12:22:b2:
                    63:52:21:59:eb:0b:bb:86:9a:dd:b0:74:0d:05:36:
                    71:07:47:94:0f:1a:52:e9:7b:b7:20:67:ad:d7:ee:
                    f1:90:f3:47:c7:ce:1b:92:76:c7:6d:ad:a4:c5:5e:
                    f7:3b:a3:28:50:c5:2d:ae:88:e0:67:d8:88:08:03:
                    7f:fd:43:bc:09:f1:20:0c:1f:4d:4e:5c:01:bf:f6:
                    bd:a0:b6:9c:ad:c8:92:1c:e7:2b:27:9c:55:ec:79:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137209

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.232.0/22
                IPv6:
                  2402:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:4b:53:1a:3c:90:d4:2d:2f:01:a1:9d:0d:cb:90:cc:45:
         25:b6:4c:b7:ea:8a:e4:28:35:27:62:19:6c:2f:f9:cb:08:62:
         c5:af:2a:24:c1:d1:2c:fd:4d:af:e0:d9:ed:0c:b3:c0:21:f2:
         cc:b3:0e:8c:6a:99:4e:0b:2f:69:80:19:91:0e:5f:59:29:ca:
         05:da:cb:d7:9d:77:df:9d:30:c4:04:4a:a4:b4:1b:db:2b:da:
         87:34:cf:b9:9c:48:95:a2:32:eb:fe:a4:44:93:65:37:23:0a:
         8f:ac:c3:11:24:68:ba:61:d8:82:ad:7f:6f:9c:36:f2:9b:e3:
         c2:ea:f8:96:fd:2f:2d:84:7d:95:3a:38:8a:6a:9b:3a:53:86:
         47:24:0c:c4:15:33:36:c6:b2:08:ee:ce:29:a8:e3:c2:1b:0c:
         8e:2c:2a:73:15:c5:d7:b5:07:e8:fc:41:12:2c:a3:f4:d7:f4:
         72:f4:57:95:09:e4:2b:0f:4c:53:28:2c:3d:31:c4:d4:57:51:
         fe:63:8d:46:bf:ca:6c:c0:04:e8:27:ae:5c:47:36:8c:59:76:
         08:c7:bf:bd:99:0a:86:16:32:99:02:d8:fa:a5:68:d3:5f:d7:
         1e:da:a9:15:f1:63:bd:b3:9f:a1:83:8a:5c:c7:13:3e:b3:81:
         eb:6a:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----