Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qO17h9snVXFpQq81cWqommKT6C4.cer
File:                     qO17h9snVXFpQq81cWqommKT6C4.cer (raw, json)
Hash identifier:          2BQFvHEk8sfsqsfwfPjDQMatlmFOUsJvFCOFnfQPhiY=
Subject key identifier:   A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018466
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.mft
caRepository:             rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0
Notify URL:               https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 14:41:19 +0000
Certificate not after:    Mon 31 Mar 2031 00:00:00 +0000
Subordinate resources:    IP: 203.119.21.0 -- 203.119.23.255
                          IP: 2001:ddb::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99430 (0x18466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  9 14:41:19 2023 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=A91DA6130000/serialNumber=A8ED7B87DB2755716942AF35716AA89A6293E82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:83:0e:91:a8:54:f7:85:34:6a:f8:b4:05:
                    93:cc:fa:98:6d:08:d8:45:cf:90:01:77:6f:18:b9:
                    40:5e:e6:38:65:91:ee:9f:49:ba:1c:7f:b6:c6:e9:
                    3b:7c:7b:44:fc:f9:98:67:36:00:6b:c4:4e:26:9c:
                    a9:ef:2a:06:e1:15:54:a5:03:31:2f:ad:70:c0:55:
                    11:d1:c6:bf:bf:7c:6c:3c:c8:66:6f:2e:82:97:8b:
                    75:ea:91:7b:93:c7:cb:1a:e3:d0:1f:2a:f4:d4:0d:
                    aa:40:89:68:3b:90:c9:06:47:fa:82:39:75:ec:01:
                    b8:a5:ae:90:b9:4b:73:30:52:24:c2:75:57:17:9e:
                    0c:ef:ca:8c:76:9f:4d:77:2f:2c:2e:80:b8:8f:c8:
                    05:a1:ad:2c:06:35:cb:2c:8d:af:0f:6b:77:aa:76:
                    87:ab:5a:79:80:10:e9:12:be:88:0c:11:fa:fd:07:
                    de:5a:0e:4e:f0:04:33:93:39:d4:76:a6:78:7c:6d:
                    9e:81:40:17:9b:cb:85:0b:5c:86:6a:d7:de:bf:d6:
                    29:39:c6:cd:a1:ba:76:f0:04:60:c4:59:4b:6b:1a:
                    45:0a:61:2e:d0:6c:33:8f:03:67:3a:74:a5:1e:f8:
                    fe:ca:d4:96:ae:da:3b:0c:9d:4e:62:b1:7e:d0:d7:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:7B:87:DB:27:55:71:69:42:AF:35:71:6A:A8:9A:62:93:E8:2E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0
                RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/0/A8ED7B87DB2755716942AF35716AA89A6293E82E.mft
                RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.0-203.119.23.255
                IPv6:
                  2001:ddb::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:37:d7:3d:6d:2c:38:87:49:4b:e7:96:df:35:9e:96:75:f4:
         0f:f0:87:85:37:5f:31:be:56:1d:41:70:15:b4:30:e2:36:63:
         07:d3:6c:89:25:1c:2b:ce:a3:a6:c8:81:fd:08:c0:0a:05:92:
         d5:6e:55:87:68:97:ef:75:b7:e5:8a:39:12:23:d7:a3:67:e3:
         51:17:22:b9:86:2c:e7:33:87:6d:03:fb:44:a0:c9:9e:2b:b2:
         3b:95:86:e3:2e:20:2a:a4:2c:6d:58:b2:8d:04:4b:43:9d:47:
         e0:44:4d:de:88:08:2c:6a:ef:e2:26:63:e2:7b:47:be:54:c4:
         e9:b9:6d:13:09:61:72:7c:ea:33:8d:ab:91:c0:ad:70:6d:f6:
         82:72:12:03:f9:18:36:53:2d:af:e5:33:66:50:08:56:c0:d6:
         40:e3:1d:3f:d8:4e:c1:8a:9f:e8:f3:86:16:d9:59:40:86:44:
         a0:cf:58:b3:42:9f:03:59:4b:cf:cc:49:91:b3:f1:8a:25:5e:
         87:2e:f8:98:38:ba:3e:0b:c6:cd:4e:6b:54:dc:ba:c0:97:7a:
         c3:36:89:8f:db:b5:4e:88:b4:f8:d1:29:45:d5:19:d9:90:87:
         e4:af:60:83:22:68:8c:72:7f:db:f8:e1:78:07:fb:84:6c:eb:
         6f:37:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----