Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xXtHyUBo9VERlAD42b4Z-R2YLqE.cer
File:                     xXtHyUBo9VERlAD42b4Z-R2YLqE.cer (raw, json)
Hash identifier:          HrLT4u/93NIioASZXb1SpdXlYxxJ61oyEEt74ST+3mY=
Subject key identifier:   C5:7B:47:C9:40:68:F5:51:11:94:00:F8:D9:BE:19:F9:1D:98:2E:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015694
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/xXtHyUBo9VERlAD42b4Z-R2YLqE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 23 May 2022 15:20:03 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 63949
                          IP: 45.118.132.0/22
                          IP: 103.3.60.0/22
                          IP: 103.29.68.0/22
                          IP: 2400:8900::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87700 (0x15694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 23 15:20:03 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A91F09F7/serialNumber=C57B47C94068F551119400F8D9BE19F91D982EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:e8:40:3a:fa:96:5a:4f:12:4f:a5:94:3f:
                    8e:bd:5a:e0:c3:a6:c8:8c:30:85:5b:f1:d8:69:2c:
                    51:49:71:43:03:fc:f7:b6:e1:2a:a6:7e:78:bd:a0:
                    19:ac:66:3c:12:81:1d:3a:db:69:e1:89:6d:42:66:
                    ab:e1:06:56:a9:da:8e:c6:6e:9f:b8:fa:fb:a6:7c:
                    b9:24:05:53:cd:14:94:03:3c:59:c7:94:06:88:38:
                    70:ee:ea:8c:a9:6b:44:73:f4:ef:b8:f1:89:74:d6:
                    08:c4:f2:09:3c:e4:26:29:94:29:86:9f:ad:d5:01:
                    33:ab:25:c6:5c:c7:93:2c:9f:cc:cb:ab:f2:ae:da:
                    52:4e:d6:17:0e:cb:00:ec:c3:a0:8e:bf:48:4c:45:
                    c2:ee:f9:0f:60:3b:c6:94:12:19:13:4e:98:29:27:
                    9d:43:d4:57:fa:19:18:7b:e1:ec:e9:ba:5c:cb:3f:
                    f1:7a:e2:3a:e3:e2:d4:91:c4:12:c8:f2:59:15:54:
                    05:c2:91:51:17:2f:c8:15:38:47:67:b8:31:5b:b4:
                    53:8d:a6:4b:31:e0:8a:58:04:64:c0:50:6a:df:14:
                    dd:53:d8:13:35:1d:92:cf:3b:5e:13:be:fd:1c:46:
                    a0:54:e0:f1:0b:9a:75:dd:48:e7:34:79:45:76:8e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7B:47:C9:40:68:F5:51:11:94:00:F8:D9:BE:19:F9:1D:98:2E:A1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/xXtHyUBo9VERlAD42b4Z-R2YLqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63949

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.118.132.0/22
                  103.3.60.0/22
                  103.29.68.0/22
                IPv6:
                  2400:8900::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:59:41:6c:22:f7:10:d0:b5:bf:06:ca:a6:7d:66:fc:47:
         0f:ce:03:ee:d7:de:95:3b:b4:d4:7c:3b:2e:da:17:21:3b:07:
         28:a9:ac:c2:4b:b1:32:bb:64:49:77:99:5b:a4:fc:9a:3d:37:
         cb:e8:10:d9:df:7b:ca:a8:b1:6e:14:13:f4:24:43:e4:9a:5d:
         1c:ee:55:6a:ca:b5:60:cb:10:ff:d3:e3:59:62:39:3b:62:07:
         14:91:a3:c7:c2:7f:02:ed:e5:25:d4:f1:5e:30:39:a4:c3:7c:
         cd:49:91:93:66:4e:8b:96:42:65:16:b3:b9:09:31:45:b5:48:
         f3:ab:02:66:37:f8:0f:7a:b2:bd:9d:64:09:75:2d:51:fa:3b:
         a7:85:87:60:1c:cf:5e:d7:e1:1e:50:82:2b:b1:6d:91:cb:81:
         9c:29:31:61:ce:02:73:d6:11:cf:5a:91:63:47:1c:3c:1b:72:
         5b:1a:6f:44:92:3b:4c:37:d3:5d:ae:6c:98:80:c9:9b:af:cc:
         6f:90:54:14:17:fd:ad:55:ac:30:ea:36:4a:0b:cc:44:63:c8:
         1f:50:ec:0e:a0:1b:9d:fd:ae:b8:b0:3c:6c:dc:c5:3a:6b:5a:
         b9:88:bf:15:44:80:7a:4c:a6:6a:dc:99:ba:60:d8:eb:d9:7d:
         e8:b9:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----