Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sX1WLTavPXb_Zb4cenRcZDPr20g.cer
File:                     sX1WLTavPXb_Zb4cenRcZDPr20g.cer (raw, json)
Hash identifier:          3IDjS2nZpXdxuOHAGAxbFlYCoz3zAXOuSj8E7PHOlyQ=
Subject key identifier:   B1:7D:56:2D:36:AF:3D:76:FF:65:BE:1C:7A:74:5C:64:33:EB:DB:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       014F95
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/sX1WLTavPXb_Zb4cenRcZDPr20g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Apr 2022 08:36:02 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 203.18.30.0/24
                          IP: 2001:df0:a340::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85909 (0x14f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 13 08:36:02 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A9154DE6/serialNumber=B17D562D36AF3D76FF65BE1C7A745C6433EBDB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:15:54:f8:3f:c5:57:76:3c:1f:07:42:b7:
                    0c:ff:eb:23:e5:c8:34:69:a5:cc:d7:c4:2a:79:ee:
                    fb:7b:8c:56:b4:d9:e1:23:9c:3a:68:c4:9f:6c:d6:
                    c3:93:e2:bc:d0:6c:39:1c:bc:c4:7f:bd:ac:97:cb:
                    2c:4e:7f:19:d4:84:74:a7:81:0d:21:5e:27:3d:ae:
                    79:3c:06:ed:16:0c:5c:ef:6c:2c:1f:4d:96:5f:06:
                    64:3a:a9:de:5a:51:8f:d3:04:99:27:37:31:2f:d3:
                    d5:30:ef:c8:c3:4a:09:68:b0:3c:4e:33:c2:1d:4f:
                    52:61:c1:bb:9b:70:09:e3:a6:92:72:2b:7d:2e:9b:
                    d3:8a:b4:61:bf:82:7d:0c:2a:d9:66:5e:7f:9b:b6:
                    58:89:bc:65:0b:c6:eb:2d:d8:c9:94:2d:1b:b2:bc:
                    2c:68:14:ac:77:30:67:0f:43:cb:e6:d1:3d:7b:dc:
                    d0:8f:e5:df:26:af:23:fb:85:8f:49:d6:58:ae:92:
                    7a:ab:ab:0c:df:b4:e2:ee:40:3d:89:62:0c:0c:93:
                    02:98:30:d6:ac:46:35:2e:6a:ec:a5:d4:74:c1:75:
                    0f:94:b4:8a:9a:7c:81:76:3d:02:a4:7f:7a:52:62:
                    aa:28:44:06:da:f7:fe:ba:08:e7:c1:a8:a0:6c:b3:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:56:2D:36:AF:3D:76:FF:65:BE:1C:7A:74:5C:64:33:EB:DB:48
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154DE6/E27935DECFBE11EB8E664115C4F9AE02/sX1WLTavPXb_Zb4cenRcZDPr20g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.30.0/24
                IPv6:
                  2001:df0:a340::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:4c:ba:fd:0b:43:a7:1c:64:0d:dc:32:3b:5a:90:91:a9:
         bb:17:5b:08:89:63:94:6d:21:8c:96:c5:5c:b4:c4:13:40:59:
         6e:e0:f5:ad:ee:0b:27:b3:53:9a:83:8b:fa:6b:ff:ae:17:7a:
         a8:31:bd:6c:09:93:97:57:97:10:f6:b4:77:d8:fe:4c:f7:33:
         e0:1c:46:c1:9c:71:e2:c2:7d:33:41:01:c8:73:32:cc:ec:63:
         b6:06:dc:7a:a9:c2:20:38:5f:ac:01:95:ca:b7:1d:13:00:ae:
         82:da:4c:5c:2a:a9:d2:c3:2a:5c:52:0e:e7:e7:f6:8d:f6:82:
         5a:a4:bf:68:7c:30:1c:35:5c:63:de:a2:33:27:d7:03:37:94:
         0b:41:60:0d:4a:51:d0:22:7d:71:ca:e0:2c:ec:86:fd:1a:b5:
         0e:c3:41:28:ed:34:bf:13:6b:c4:80:fa:bd:26:31:d8:30:b2:
         dd:71:eb:f7:d7:18:89:1a:44:e0:f0:30:5f:23:0e:c1:07:69:
         75:31:db:db:63:39:ac:8d:14:9b:78:ca:e4:80:67:a0:8d:53:
         9c:55:8f:8e:93:8e:9b:c6:98:38:f1:bf:17:eb:d6:6e:d3:c3:
         8e:45:a6:f3:ce:be:d7:a1:91:94:e8:ec:5b:1f:07:59:c3:78:
         45:39:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----