Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer
File:                     wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer (raw, json)
Hash identifier:          bhX5mCoGSMWmt7Q1ZtZk1VyJ0Fa8IyUaHS6qQ8feiSU=
Subject key identifier:   C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B535
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 05 Aug 2023 10:53:25 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147020
                          IP: 103.248.50.0/23
                          IP: 2401:2060::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111925 (0x1b535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  5 10:53:25 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:63:cc:5c:67:06:55:fd:b8:a4:39:f4:6e:
                    b0:4b:d9:95:e5:fa:3b:58:0e:7f:a5:a8:b1:65:03:
                    41:22:8c:27:37:5b:5c:6a:b8:b5:cb:f6:f7:d2:7f:
                    b0:40:bf:c7:43:46:63:67:b5:32:f5:1a:34:14:5c:
                    54:d0:99:05:58:0d:ac:c4:aa:37:7d:bd:70:52:28:
                    8d:7f:3e:d7:4f:0f:e3:b5:0f:b3:f6:32:76:50:0f:
                    18:c4:0c:7b:d0:80:29:87:db:43:32:84:db:b8:a9:
                    0d:13:ea:3e:2f:0a:39:12:92:6f:a3:72:51:e3:78:
                    5a:0a:24:b4:d4:95:b2:c5:03:e6:3a:3f:a2:a9:aa:
                    1a:59:34:7f:10:eb:d1:4f:ce:5f:03:72:59:ec:f3:
                    a5:69:f9:f1:fb:a2:33:94:2d:03:b7:4c:30:83:c4:
                    ff:f8:4a:77:47:0c:a9:12:08:4a:dd:e6:0a:b3:ca:
                    7e:e1:eb:be:a1:82:28:66:56:7e:bb:30:1b:c1:44:
                    a2:2a:a0:ec:3c:0b:27:02:64:48:c3:cd:33:7a:bc:
                    bd:ff:f0:f0:64:2b:40:2c:e1:5c:14:d6:ec:85:c6:
                    1c:15:90:cc:88:2d:80:23:74:a0:90:07:a5:f2:24:
                    61:41:13:a0:df:97:31:5b:ee:0b:85:3e:14:50:cd:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147020

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/23
                IPv6:
                  2401:2060::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:ab:54:ea:93:c9:95:18:b8:a7:76:01:d9:de:55:c2:02:
         69:8f:38:e9:8d:2e:6f:85:65:12:82:a9:a7:ac:f5:01:61:0f:
         97:9d:b1:97:af:b3:65:56:75:6c:12:4d:e1:cd:94:3e:74:22:
         94:da:34:f1:48:a8:37:81:28:8f:a8:03:38:f7:a4:b6:79:c9:
         6c:81:14:82:67:67:a2:73:92:58:e1:79:22:47:3e:c9:3f:c8:
         32:0e:3a:da:be:0a:89:02:ae:82:50:31:48:06:57:87:30:62:
         c9:fe:72:b3:22:cd:00:db:23:1a:10:18:54:b3:1e:77:5f:31:
         a9:e8:93:f0:15:94:71:29:9c:2e:b4:19:6e:df:37:80:81:0d:
         42:0e:6b:a2:08:1a:93:dc:78:2d:53:d7:85:51:f7:06:1b:0b:
         48:94:e1:c2:04:de:5c:d9:9d:2a:0b:88:42:73:c4:a1:12:08:
         88:07:ea:3c:03:33:e4:73:d8:71:82:5f:ba:94:83:f0:03:c5:
         11:f0:79:a3:50:14:db:b7:43:b8:3d:5b:4c:3b:a1:5d:e4:39:
         5a:cf:6b:a0:70:c2:4b:66:b5:f7:38:21:d9:ef:29:86:13:04:
         48:16:e6:b6:87:5d:fb:ae:fd:0f:95:e4:43:e5:5f:24:56:dd:
         90:3e:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----