Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer
File:                     PM-rE7Gvzmg48zeHqOy8M2o0-UM.cer (raw, json)
Hash identifier:          /nNoUSXew1gtWkcLZmbPPUiGD1gdL+D9bRUWvMXdb4o=
Subject key identifier:   3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AA1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Mon 09 Oct 2023 00:32:54 +0000
Certificate not after:    Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources:    IP: 103.125.44.0/22
                          IP: 2403:ed40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43548 (0xaa1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Oct  9 00:32:54 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=3CCFAB13B1AFCE6838F33787A8ECBC336A34F943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:a6:36:02:57:02:08:f7:38:f4:2c:95:d8:
                    3c:66:64:27:c7:e3:07:4e:d9:07:79:ab:02:46:cd:
                    09:85:2b:b6:66:7a:30:41:8c:74:88:6c:c5:6a:ed:
                    3c:42:96:93:98:b0:38:e4:c2:53:d1:31:29:d4:c7:
                    5d:7a:d4:59:3f:a5:ef:2e:e6:1b:2c:72:d3:14:b9:
                    bd:66:b1:de:0c:86:46:e3:d6:1a:b2:dc:62:4a:67:
                    74:44:1e:bf:bb:47:32:b2:e9:a7:0d:95:bc:69:3f:
                    ac:8d:4a:7a:7e:cc:2b:ad:8c:40:b5:e6:54:85:5a:
                    ca:8d:b6:62:86:8b:57:9d:1a:ef:e0:51:64:eb:40:
                    32:22:c2:6a:7f:17:1a:02:98:bd:38:ba:1e:10:2b:
                    39:11:1a:1b:4f:7c:f4:96:5a:0b:7a:0d:ad:71:29:
                    ac:d0:ba:7e:02:f2:6a:88:9d:87:44:88:28:27:09:
                    55:52:92:26:c2:8e:56:56:db:d8:fb:31:b8:28:84:
                    9a:f0:5d:74:76:04:17:30:90:fb:d9:70:b0:3c:62:
                    a1:44:68:9b:c4:9b:09:7d:4a:ea:41:1d:90:f3:3c:
                    da:eb:d2:c2:87:29:76:fd:b1:15:22:ea:cc:ed:1e:
                    c9:ab:a6:ee:be:fe:20:3b:fd:fa:e4:40:08:68:3a:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:AB:13:B1:AF:CE:68:38:F3:37:87:A8:EC:BC:33:6A:34:F9:43
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2828/PM-rE7Gvzmg48zeHqOy8M2o0-UM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.44.0/22
                IPv6:
                  2403:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:19:52:db:21:e2:64:ee:af:81:b8:9b:62:4c:c4:bf:e4:8e:
         d8:77:3a:70:ec:a4:bc:16:69:81:4e:8b:33:e4:eb:ca:8b:25:
         30:4b:e5:05:9e:f0:8c:a2:58:31:11:6c:a9:40:2f:3a:ac:14:
         13:5d:2b:42:47:ae:94:2b:12:a9:ae:13:68:8a:fe:e4:ae:a3:
         a5:9b:dd:33:fa:c3:94:a2:14:f6:ac:19:e0:fa:a4:52:2a:aa:
         2b:af:f3:17:b1:37:a0:c9:19:1e:09:37:ed:05:b0:1a:aa:59:
         85:6c:cd:74:f4:07:b8:0d:4f:d5:87:9e:dd:9a:64:f7:c3:aa:
         cd:01:ba:fd:90:cd:0b:76:1f:bf:7f:56:37:f7:c9:f9:5b:53:
         e4:70:3f:13:99:d9:5f:b9:d1:c9:f9:ee:0d:b4:84:a2:a1:a7:
         4b:b4:24:05:b7:57:60:c5:7e:31:a6:75:a1:ca:68:c6:e9:b3:
         f0:4d:58:74:4e:d2:72:79:6e:02:64:df:6f:1c:ef:7e:fa:47:
         12:21:af:54:21:08:33:68:df:0b:b4:74:ca:71:54:53:14:99:
         96:40:47:24:90:20:20:ba:e6:a6:30:f3:ed:b2:b5:76:8c:28:
         87:6b:a7:23:a8:11:09:eb:f3:20:ce:3f:56:36:82:4d:d4:00:
         00:b6:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----