Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQdlkzV5-cPbPA1peQdEUm465kE.cer
File:                     wQdlkzV5-cPbPA1peQdEUm465kE.cer (raw, json)
Hash identifier:          A9OtmWdJbnmcBr7XDrd+0Cauf02vaPRQOPt1lW3HChE=
Subject key identifier:   C1:07:65:93:35:79:F9:C3:DB:3C:0D:69:79:07:44:52:6E:3A:E6:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016497
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914787F/DF687528845011E9A094794BC4F9AE02/wQdlkzV5-cPbPA1peQdEUm465kE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914787F/DF687528845011E9A094794BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 28 Jul 2022 06:54:08 +0000
Certificate not after:    Sat 30 Sep 2023 00:00:00 +0000
Subordinate resources:    IP: 202.8.65.0 -- 202.8.71.255
                          IP: 203.159.0.0/18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91287 (0x16497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 28 06:54:08 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=A914787F/serialNumber=C10765933579F9C3DB3C0D69790744526E3AE641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:18:a6:27:60:b2:01:27:4a:f0:a8:0b:41:
                    6a:fb:69:55:5d:ef:d4:08:ba:a6:df:a7:44:65:c4:
                    db:b1:bb:05:f6:6c:99:f0:c4:8c:91:c8:e3:bb:f9:
                    f0:10:e8:b0:2e:35:5d:4f:a7:33:d4:f4:a4:7c:54:
                    15:36:86:6a:6e:96:45:d8:dd:ec:1f:f9:94:69:37:
                    39:ca:19:20:f9:c9:db:e5:78:6d:86:c6:22:ed:9b:
                    bc:9e:c0:1f:47:fb:cc:d5:94:6d:e1:8d:ad:81:c5:
                    4b:31:a4:c7:83:d1:2a:b0:25:b1:bb:87:e2:32:52:
                    e7:45:ae:88:67:ec:28:32:f9:af:f1:57:14:cf:32:
                    fe:e1:e8:66:0c:f7:aa:8f:ed:b7:cf:51:ea:80:70:
                    03:55:e1:e0:12:be:40:31:12:75:7a:a7:f0:99:d2:
                    95:9c:01:61:3f:c5:20:c1:1c:0f:f7:4f:80:dc:43:
                    05:01:b5:47:2e:5b:14:11:e2:e6:bf:12:df:ae:e4:
                    29:b2:40:d6:91:48:56:1a:01:cb:e0:54:a2:a5:78:
                    7c:96:43:9a:0f:ab:63:d5:2a:e4:e9:78:29:15:6a:
                    89:e6:26:a0:99:27:34:5d:b0:79:6a:87:5d:15:c9:
                    0f:84:42:06:3a:c2:e5:0c:41:f4:f3:1b:72:56:94:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:65:93:35:79:F9:C3:DB:3C:0D:69:79:07:44:52:6E:3A:E6:41
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914787F/DF687528845011E9A094794BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914787F/DF687528845011E9A094794BC4F9AE02/wQdlkzV5-cPbPA1peQdEUm465kE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.65.0-202.8.71.255
                  203.159.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:b3:35:ea:4e:d4:03:da:3b:5c:e4:d4:91:03:e5:94:02:
         5e:b6:ca:67:bc:60:08:71:0d:84:4c:1b:14:37:36:c5:8f:2f:
         b8:ca:90:f4:fb:f2:d3:d5:dd:c2:5f:d0:01:bd:e9:f8:3a:b0:
         b1:6e:08:be:9f:c4:ee:76:65:18:13:a8:02:74:3f:5a:41:e5:
         e4:19:d0:dc:3f:f3:54:5f:32:23:50:5e:f0:c1:f4:ed:cb:c5:
         c6:d0:c6:01:53:9c:32:ec:e9:66:5f:86:f5:de:55:81:7e:2b:
         72:4b:08:1a:7e:87:ff:6c:a2:fe:a5:f7:62:86:0f:b3:ba:29:
         aa:27:76:52:af:a6:4d:c1:8a:a9:fe:ad:6d:13:4b:b2:48:66:
         89:23:c3:e4:0f:33:63:b3:c5:02:2c:f7:93:0d:ae:4a:54:b6:
         26:87:46:13:4a:3b:7e:98:45:5e:4b:4e:1c:12:05:80:d9:d7:
         a1:c7:89:c1:2b:58:da:96:27:5f:e7:06:fa:56:92:b3:99:2e:
         b8:f2:fb:10:32:0e:29:8b:62:84:f0:2b:84:fb:ad:a2:08:44:
         f9:17:78:2e:e4:94:1c:12:6e:90:1c:b0:a0:62:c2:2d:c5:6a:
         2a:98:bf:43:6c:75:f3:75:7c:31:ab:b6:47:3b:7a:3f:1a:79:
         7e:2b:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----