Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
File:                     xxnsn75b2Tg8eJNB9eVb6oybOKU.cer (raw, json)
Hash identifier:          /YuKkJN6UOhqNP0BGELIo1Uga4OCuk1IF6zCjVjoz9k=
Subject key identifier:   C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019FB4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/xxnsn75b2Tg8eJNB9eVb6oybOKU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Apr 2023 19:33:42 +0000
Certificate not after:    Mon 28 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 137458
                          IP: 103.109.68.0/22
                          IP: 2402:7a40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106420 (0x19fb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 28 19:33:42 2023 GMT
            Not After : Aug 28 00:00:00 2023 GMT
        Subject: CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:a4:97:dd:30:31:35:4b:93:47:16:79:1a:
                    3d:4f:8c:45:07:d4:4b:e0:7d:df:1d:64:0e:99:69:
                    e8:89:3d:49:57:84:ec:20:53:7e:d6:58:65:6a:6a:
                    19:96:f9:c0:d8:1c:eb:4a:f1:e3:b9:08:db:ef:b1:
                    a6:64:e8:3e:86:d5:4b:a1:e6:8e:be:d4:e7:f2:58:
                    30:74:2e:ec:58:d9:fb:67:73:9d:89:02:76:35:32:
                    bc:f3:bb:62:fb:d1:91:51:cf:9c:3f:14:36:9e:7e:
                    65:3b:6b:df:4b:a8:7f:c3:af:fe:21:08:97:85:aa:
                    57:5d:ad:f1:14:ed:ed:91:3f:fe:2c:5f:62:3f:a1:
                    cc:b7:e6:d3:f1:17:76:b7:54:44:e9:94:8a:4a:04:
                    b5:cf:d0:c2:a7:80:82:be:b9:90:8b:ca:b9:a1:1e:
                    43:f1:09:18:e8:55:ba:0e:fd:da:bb:f7:90:49:f3:
                    ea:cc:24:3b:ca:93:80:a1:63:b4:59:24:de:fa:0c:
                    ec:6e:12:20:af:3b:c8:18:4c:58:92:0a:83:04:8b:
                    0e:96:45:22:6e:c7:4a:fd:97:f8:fb:87:77:3d:dd:
                    85:a2:32:7e:fe:3b:4e:88:16:fd:67:5a:98:32:e4:
                    bf:d4:5e:fe:51:3d:e9:90:a8:de:71:7b:b3:8f:60:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/xxnsn75b2Tg8eJNB9eVb6oybOKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137458

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.68.0/22
                IPv6:
                  2402:7a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:a3:65:05:1d:09:74:1d:e6:19:e5:e0:dc:00:9a:9c:59:
         bb:2b:80:69:95:b1:7a:cd:22:4b:bc:98:da:1d:30:c6:70:1f:
         dc:8f:cb:b5:64:81:dc:ac:6c:08:c3:84:ad:68:03:40:7d:3f:
         df:12:bd:63:c7:24:8a:aa:dc:96:fc:b8:25:26:51:df:64:18:
         4d:4c:20:2e:12:a0:d7:23:c4:66:ce:83:a7:83:cd:ca:72:65:
         95:2d:17:15:2a:29:61:96:8d:76:5b:61:b0:cf:a1:4a:06:9b:
         1e:a1:af:53:3b:bd:f8:47:3e:4d:fd:9b:e1:d9:48:b7:3a:4a:
         87:83:be:9e:a9:d5:88:29:40:ee:2c:b6:e5:41:4c:d5:54:1b:
         74:2b:52:3a:9d:f2:96:6f:78:b5:18:4a:2c:74:42:06:08:5c:
         f7:d4:6b:fc:9b:0c:22:3a:d6:45:67:9c:22:b8:5e:85:7c:97:
         91:b0:8a:d4:03:2f:cf:dd:61:34:40:b9:c6:01:dd:65:fd:30:
         70:eb:08:9e:e4:7d:8e:69:08:53:2b:c5:26:8d:99:5c:58:96:
         26:f3:8b:de:fb:33:d4:0b:ba:c9:ed:07:76:34:13:f2:ef:54:
         af:69:b2:39:5e:6f:2d:f5:f7:90:40:37:82:41:c5:2d:a4:e1:
         c9:e4:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----