Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPSk14UXEQ17GApeNxuYBcYlIws.cer
File:                     qPSk14UXEQ17GApeNxuYBcYlIws.cer (raw, json)
Hash identifier:          ULByd3899/NLZe6SlXFNEGha7ZWy6/Eq/2diRdz1z5A=
Subject key identifier:   A8:F4:A4:D7:85:17:11:0D:7B:18:0A:5E:37:1B:98:05:C6:25:23:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020909
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/qPSk14UXEQ17GApeNxuYBcYlIws.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 18:14:22 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    IP: 2405:ee80::/32

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 17:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133385 (0x20909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 26 18:14:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A9186C05/serialNumber=A8F4A4D78517110D7B180A5E371B9805C625230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:c3:4b:16:15:1e:a6:c6:2b:ad:94:a8:df:
                    8f:ad:3b:b6:5c:a3:f3:e9:0d:3e:a3:46:89:22:52:
                    dc:b8:b4:68:25:64:3b:9f:b4:cf:5c:6c:5f:e3:c0:
                    61:0b:cb:e1:af:ba:f6:71:96:7d:9c:07:0b:bd:c1:
                    0c:34:29:2d:08:3a:77:27:38:b6:9a:bd:6a:0c:2d:
                    30:28:be:35:43:23:86:f4:63:51:c5:b8:94:36:36:
                    5c:0b:9d:ff:54:8e:1c:54:31:13:8c:90:51:4f:ca:
                    96:e4:38:7b:e3:3a:38:b5:a9:10:3a:43:22:ec:c8:
                    26:e8:d8:3f:5f:7a:52:0b:e9:52:1b:ac:d4:01:28:
                    0f:0d:1e:64:5d:52:0c:74:31:96:f0:1b:42:72:19:
                    b5:04:4b:d5:02:e2:12:4a:35:43:32:66:aa:2a:ca:
                    a5:1a:71:d9:62:70:65:21:e0:81:c4:71:42:12:4d:
                    84:8a:69:28:be:96:75:12:70:25:e2:36:56:a1:a6:
                    ed:fc:a1:7a:8f:8b:29:06:f2:9b:c8:19:4b:91:57:
                    70:b4:94:17:ec:76:58:a5:4a:31:d5:1a:14:af:7e:
                    7d:eb:4d:b6:9c:3c:06:a1:9f:a2:a5:07:f2:e1:90:
                    6c:4e:c8:22:62:a9:a8:19:b0:a7:85:61:7e:f4:9e:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:A4:D7:85:17:11:0D:7B:18:0A:5E:37:1B:98:05:C6:25:23:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/qPSk14UXEQ17GApeNxuYBcYlIws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:29:9c:bf:2e:6c:e3:91:1a:29:11:fd:98:6d:c5:b7:61:91:
         e6:c3:fe:bc:a6:6d:4c:33:b8:e3:b2:76:1b:ad:64:20:57:64:
         58:19:36:1f:ba:52:66:7b:2d:0d:c1:15:ab:9c:aa:4e:4d:09:
         40:d1:4f:35:95:1c:02:e5:c1:ec:56:23:61:ba:55:97:0d:62:
         99:f2:b4:f6:48:9c:a1:0a:42:dd:2d:3d:34:0e:dd:ef:93:15:
         45:e5:1d:6d:49:74:bc:f8:51:92:28:47:02:a2:17:9e:4a:62:
         80:c9:c2:99:f6:5f:85:30:f7:86:7d:11:40:a3:cc:35:9e:19:
         1f:f8:8f:a7:53:df:89:39:e6:e0:ed:d5:58:7a:f5:bb:cc:4d:
         c8:a4:61:b3:87:76:f1:af:6d:a0:62:28:70:cc:88:9d:11:b0:
         fd:ea:c7:75:5c:c5:a7:9f:39:29:dc:42:43:c6:e8:a1:96:9d:
         6e:e9:b1:72:f4:dc:8c:7b:cc:0a:99:34:a0:25:cf:c4:42:d8:
         42:04:f2:1f:c5:dd:44:0c:87:37:69:79:01:03:c9:5b:51:cf:
         2d:81:99:8c:e7:db:1c:fa:6c:52:22:9d:e6:97:b6:de:63:e0:
         8f:eb:e0:e3:72:82:00:d7:58:79:a2:e5:5d:4c:91:b2:85:2e:
         9a:e2:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----