Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
File:                     s99r26Pv62UW0Od-E2gvyvETnuU.cer (raw, json)
Hash identifier:          SZkUrx1UhSMb1BbxCoC6QF8+Qy003q+AJ/J36fWpgtY=
Subject key identifier:   B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018D18
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 23 Feb 2023 00:57:00 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 133941
                          IP: 103.49.40.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101656 (0x18d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 23 00:57:00 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:37:2c:fa:f3:e4:a2:3f:62:f0:d5:01:d1:
                    1a:6b:6d:9b:28:9f:03:af:f6:db:88:5d:aa:c8:c8:
                    60:4e:b1:42:2e:fc:f7:e0:cf:a7:b7:c4:b3:58:0b:
                    e1:3d:db:f3:02:f5:18:ec:f1:50:e2:52:2a:41:2b:
                    2f:1c:d7:55:3d:c6:c1:2a:fb:48:ab:f8:cf:3c:d8:
                    16:51:e0:87:b8:c4:1b:bc:1f:11:d7:b2:fd:61:3a:
                    da:dd:6a:c0:9b:fb:e0:60:53:5f:67:40:14:11:69:
                    34:15:e6:5d:e7:6b:a1:46:d8:ea:ea:fe:3d:b9:90:
                    92:ef:51:f4:0c:2e:f9:97:00:d1:95:32:bd:c3:33:
                    d5:87:af:9b:c8:6e:b9:eb:f1:eb:69:de:3c:7c:dd:
                    15:6e:2c:39:8d:31:bd:70:98:f4:4f:ff:50:b4:d0:
                    f3:68:14:4e:5f:bc:b4:d6:e4:69:0f:76:d1:97:85:
                    3c:2f:b3:67:38:89:d6:49:55:3f:60:b7:2b:c9:bf:
                    e8:95:ee:77:1b:47:32:d5:df:92:ca:ae:9d:38:86:
                    82:2a:d2:1b:dc:6c:44:88:3b:17:68:13:c8:94:7a:
                    28:51:14:ae:e3:1c:4b:75:41:00:2e:97:1c:49:2f:
                    ef:0e:4b:30:40:7a:3b:7d:01:3e:ee:15:e2:49:34:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133941

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:10:6e:3e:41:bd:30:58:bf:45:99:4f:d2:ea:9e:c1:51:49:
         de:53:5b:74:6d:fa:03:b9:db:83:8b:7b:ee:27:9f:c5:36:90:
         9c:de:90:6c:57:5b:9c:b6:5b:19:14:1a:52:69:55:b1:cc:33:
         40:b5:f1:c0:e7:f2:e1:4a:9b:f9:24:88:2a:db:b8:ec:b4:37:
         12:7e:ef:ab:54:a3:e9:cd:1b:65:b4:fa:93:bb:61:f3:65:06:
         2f:bc:b2:7b:88:aa:dd:b6:fc:87:93:67:da:1d:51:e2:fa:7f:
         45:a3:0d:f5:ec:3d:64:e4:a8:a7:6a:1e:41:fb:9a:23:8b:53:
         58:f6:f2:57:51:d2:23:38:df:66:fd:c0:fa:61:fb:c8:17:70:
         5f:d8:0e:09:9b:37:cf:0a:7c:f4:d1:b4:a1:13:b5:a7:8d:ed:
         b6:3d:f0:77:18:f2:84:60:93:a6:43:ee:bf:98:8e:39:71:38:
         5f:0a:9e:07:1d:fe:88:a1:de:51:9b:59:17:db:fb:49:ee:c2:
         da:88:d7:e3:0a:8b:85:06:6a:97:39:76:5d:55:7f:85:26:ba:
         96:85:67:22:95:13:2e:4f:d6:ef:b0:0e:65:25:91:8a:bb:dc:
         a4:79:d8:6e:c8:9e:9d:4d:ba:64:50:ff:51:07:01:c8:91:ca:
         86:c5:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----