Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOXGgc2GBXiB1JLLXOTRJNYpmIY.cer
File:                     uOXGgc2GBXiB1JLLXOTRJNYpmIY.cer (raw, json)
Hash identifier:          gS/yXrw9DWk0uGdt1Ip2YkDWBDHdcisYpZEFRpgmY9Y=
Subject key identifier:   B8:E5:C6:81:CD:86:05:78:81:D4:92:CB:5C:E4:D1:24:D6:29:98:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016B2D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/uOXGgc2GBXiB1JLLXOTRJNYpmIY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 31 Aug 2022 04:48:39 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    AS: 136916
                          IP: 103.99.20.0/23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92973 (0x16b2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 04:48:39 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A91A7A43/serialNumber=B8E5C681CD86057881D492CB5CE4D124D6299886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:de:e6:6f:6d:8b:d9:74:a1:ae:84:05:42:
                    a0:61:05:e0:7b:fc:58:13:e8:b5:0d:99:a9:d2:9c:
                    75:20:6c:93:94:82:cf:b8:18:5a:41:4c:3b:ee:fa:
                    ba:eb:06:07:ec:97:94:c4:8d:7e:31:1b:fc:50:27:
                    82:35:fe:72:97:a2:d8:41:2d:2a:1a:8e:c3:af:39:
                    20:35:1e:cc:e0:50:c0:37:0c:59:b7:cf:74:55:f3:
                    7c:3a:ab:00:df:67:ff:6a:9e:e7:76:bd:a8:91:01:
                    75:df:1c:7e:2b:f1:81:96:63:e0:33:b8:cb:ad:1c:
                    a6:7c:3f:09:35:37:a5:5b:54:c9:12:ff:0f:32:80:
                    2a:91:5b:2c:f2:d4:1e:61:dd:84:3b:52:ef:bc:68:
                    97:87:53:9b:e3:38:d8:86:be:48:f5:bb:53:13:6a:
                    11:02:31:ab:1e:72:62:fc:2f:fb:2c:90:ae:f3:a9:
                    5c:c8:fa:32:9f:8d:c0:8c:b3:b1:a4:46:2c:45:d4:
                    8a:83:0d:9d:6e:e6:24:bd:6a:0f:ef:4d:89:7a:65:
                    eb:0b:a0:0c:d0:60:a2:8d:51:6e:b4:b5:ca:8f:d1:
                    bb:86:f6:ff:df:96:8f:9b:15:b3:aa:bf:96:68:60:
                    e1:f6:ad:1e:60:88:78:a8:fc:97:39:b4:55:d4:dc:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:C6:81:CD:86:05:78:81:D4:92:CB:5C:E4:D1:24:D6:29:98:86
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/uOXGgc2GBXiB1JLLXOTRJNYpmIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136916

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:1f:86:a8:d0:9c:f7:d7:2d:06:ac:58:f7:6f:b5:ce:bc:
         79:36:00:04:8e:1f:b2:57:21:44:11:d1:6b:ff:61:46:11:6d:
         14:0f:12:fc:0d:b4:3d:7b:e6:3b:70:e3:a1:a1:35:42:35:ab:
         44:29:b7:b8:d2:5d:5b:b7:5c:2f:ec:10:dc:e7:a0:6a:f9:22:
         b7:51:4a:cb:87:ce:53:cb:45:32:ef:e9:32:10:22:43:d6:4b:
         4c:d7:15:16:02:89:83:9e:6f:11:3e:e4:7a:12:c5:1a:31:04:
         49:af:c2:2e:dc:6c:fe:8a:f8:9d:62:71:fd:60:4a:fe:99:ff:
         a2:8c:4c:0e:bb:63:99:d0:91:5d:d0:bd:9e:64:a4:68:a8:0d:
         35:ae:9f:af:05:34:bb:34:35:33:ef:f7:a2:fc:f7:65:67:5b:
         aa:42:77:8b:be:60:db:8b:36:89:c4:df:ed:dc:aa:1f:ba:7f:
         37:77:65:2f:12:68:be:71:89:f2:96:84:16:a2:95:54:ed:b7:
         4c:d1:b7:f6:bf:0d:61:85:50:b4:c6:e5:5b:e1:61:bb:af:6c:
         f7:11:eb:64:57:48:60:e2:c4:31:6f:54:4c:62:17:3d:7e:b2:
         a5:d7:ea:b3:c2:fd:33:78:0b:f6:93:33:c4:f2:ad:ad:68:17:
         57:37:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----