Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfdCT3f79mn7dQxtx7ZJxZadzVU.cer
File:                     wfdCT3f79mn7dQxtx7ZJxZadzVU.cer (raw, json)
Hash identifier:          bfm1uJ1YZZnDTTY0FMK/MoLhxlc5G9mHkg3O9/gI6ug=
Subject key identifier:   C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0161C8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.mft
caRepository:             rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1
Notify URL:               https://parent.rov.koenvanhove.nl/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 17:13:19 +0000
Certificate not after:    Mon 31 Mar 2031 00:00:00 +0000
Subordinate resources:    IP: 203.119.21.0 -- 203.119.23.255
                          IP: 2001:ddb::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90568 (0x161c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 13 17:13:19 2022 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=A91DA6130000/serialNumber=C1F7424F77FBF669FB750C6DC7B649C5969DCD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:9c:3b:a6:b6:12:9a:8b:9f:5f:7f:cb:98:
                    39:5f:e5:3f:8f:2c:fe:28:6a:37:93:73:d0:63:78:
                    fa:6d:2f:ce:4b:9e:c0:c6:11:8f:62:2a:d3:6f:15:
                    6f:57:08:06:a5:ce:2a:f6:8b:6e:8c:7a:dc:bf:51:
                    06:2e:f3:e2:d5:f9:ad:fd:ee:09:8e:83:9c:04:09:
                    2f:c1:17:a0:28:43:52:d9:2c:4e:8a:17:c0:7e:15:
                    62:ad:fd:2a:21:32:06:bc:2c:68:b0:52:5c:46:b4:
                    52:ad:d7:a9:c4:16:45:c3:fa:45:10:44:cf:1c:a3:
                    93:67:94:90:73:80:b6:05:c7:de:e6:97:3b:dd:32:
                    ad:75:83:52:3a:33:67:43:54:76:2e:61:5f:13:65:
                    5d:bf:a8:eb:f5:7e:3c:dd:d8:a4:12:f4:94:73:82:
                    0b:01:9c:a9:05:c9:5e:80:b1:41:2d:47:86:45:19:
                    03:ec:43:77:cd:2b:2e:f9:89:50:54:03:45:f4:4b:
                    52:77:d9:f0:66:53:7b:9a:b0:c0:d1:4a:d6:68:a2:
                    60:fa:5e:51:9d:1d:7a:13:05:0d:c3:70:f9:fd:c4:
                    ea:48:03:27:b0:3c:9a:ed:0c:46:e5:49:81:e8:3a:
                    31:d8:42:ef:50:da:89:d9:74:4f:6e:9f:1f:01:06:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:42:4F:77:FB:F6:69:FB:75:0C:6D:C7:B6:49:C5:96:9D:CD:55
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1
                RPKI Manifest - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/1/C1F7424F77FBF669FB750C6DC7B649C5969DCD55.mft
                RPKI Notify - URI:https://parent.rov.koenvanhove.nl/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.21.0-203.119.23.255
                IPv6:
                  2001:ddb::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:4c:14:b7:5c:f0:6b:9a:12:69:72:00:24:a5:52:3b:72:
         44:82:f1:98:0b:df:77:66:73:3b:c6:95:f7:24:08:1c:48:93:
         a7:1f:21:66:f1:2a:19:b9:f4:e8:55:d7:a0:86:49:c6:4b:a7:
         1d:8e:47:cd:a8:8c:36:81:8e:d4:0f:c7:4d:17:1e:78:a5:7c:
         94:c8:98:e9:b0:6d:f4:09:ac:b3:13:d1:67:e3:e1:97:04:1c:
         bb:c5:b9:80:2e:db:4a:a0:fa:1f:73:dd:67:28:b1:41:7b:b6:
         07:72:c5:bb:58:8b:4e:86:b3:79:fe:d0:ad:f5:d6:01:7f:40:
         c0:82:a3:19:46:bf:7b:fd:cb:79:56:fe:5c:dd:b1:47:d6:c2:
         fa:fb:81:c9:c1:08:c3:90:68:bc:0b:8f:40:39:d4:e7:f7:7b:
         8f:cb:37:62:93:a6:5b:0c:cb:04:ef:c8:3d:34:e2:b7:b0:42:
         b2:f4:44:4f:55:a3:fa:1a:da:75:cb:27:be:86:62:14:c3:a0:
         13:6e:7d:49:f0:e2:e3:77:82:54:3b:37:1a:39:49:23:55:09:
         29:36:3e:39:a0:58:23:de:9e:0f:2e:96:2b:8b:67:a8:84:1c:
         d6:5e:ee:43:bc:a7:a2:04:24:84:50:a7:f7:9c:3e:9d:85:42:
         58:57:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----