Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8eAUyeSZ0bEZxPWVqGOn25PEAs.cer
File:                     _8eAUyeSZ0bEZxPWVqGOn25PEAs.cer (raw, json)
Hash identifier:          Ja3ILuGS6KHFtDOzDAmLqSPXfGtiELIwP+BMVqnSM+g=
Subject key identifier:   FF:C7:80:53:27:92:67:46:C4:67:13:D6:56:A1:8E:9F:6E:4F:10:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       019577
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911496A/E3A7F85E2E4D11EB9A659E19C4F9AE02/_8eAUyeSZ0bEZxPWVqGOn25PEAs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911496A/E3A7F85E2E4D11EB9A659E19C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Apr 2023 00:28:02 +0000
Certificate not after:    Tue 01 Aug 2023 00:00:00 +0000
Subordinate resources:    AS: 136235

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103799 (0x19577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  2 00:28:02 2023 GMT
            Not After : Aug  1 00:00:00 2023 GMT
        Subject: CN=A911496A/serialNumber=FFC7805327926746C46713D656A18E9F6E4F100B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:cf:26:45:ac:9f:10:58:3f:03:08:46:00:
                    1e:fb:23:cd:c4:40:64:09:29:f6:83:a2:cd:95:93:
                    d6:0e:02:89:44:ea:4d:43:cf:52:a9:82:49:d6:2e:
                    a7:7a:87:d7:1f:61:82:17:db:96:23:d0:91:4a:16:
                    27:97:fd:64:96:90:70:35:2c:6f:a7:b1:81:f5:2f:
                    7d:3d:dc:fd:67:ab:2f:a6:2b:30:d6:e5:7a:7d:c8:
                    59:ae:5a:81:0f:6f:2e:b7:91:be:e3:62:8c:33:57:
                    b4:e9:c7:10:63:38:27:e6:18:33:30:83:b0:35:a0:
                    20:ba:d4:6a:3d:35:6e:2d:42:ff:6a:5c:a0:ba:5c:
                    6b:54:3e:26:37:a9:2f:6b:eb:f7:4c:23:e8:4b:ee:
                    82:cc:71:35:76:c4:9a:d1:9e:21:8f:d9:2c:37:5b:
                    b4:79:79:51:d2:a8:82:b2:19:35:29:82:e3:cf:ba:
                    05:99:71:d0:1e:e6:44:db:db:bb:e6:b1:d1:bc:f0:
                    07:bc:1e:b2:eb:31:46:05:22:e0:27:78:57:ac:1a:
                    d3:71:da:1e:14:ae:3a:c9:5d:93:a3:8f:c3:68:20:
                    97:e3:e0:a2:45:ea:cb:dc:a4:a5:7d:48:5f:58:90:
                    80:2e:a0:c9:57:f6:b8:a5:53:b7:99:e6:68:c2:c2:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:80:53:27:92:67:46:C4:67:13:D6:56:A1:8E:9F:6E:4F:10:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911496A/E3A7F85E2E4D11EB9A659E19C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911496A/E3A7F85E2E4D11EB9A659E19C4F9AE02/_8eAUyeSZ0bEZxPWVqGOn25PEAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136235

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:fb:bb:05:85:ca:a0:e6:1f:5d:d6:98:58:9a:95:8e:ad:
         f3:a5:66:cd:83:7c:e1:3e:26:d6:3a:3b:63:d4:a0:d6:ab:02:
         ee:87:37:62:93:b5:7b:4f:74:4d:9f:37:85:2d:38:bd:94:82:
         b4:14:87:48:86:4f:95:b6:43:1b:f2:21:5c:ed:3a:b3:b7:cb:
         9d:ba:89:e9:50:24:e6:96:70:1f:85:0c:23:4e:e7:c3:4b:3c:
         bb:9f:44:ac:53:2a:65:2b:04:6f:34:e4:f1:a5:06:6e:b9:ac:
         f6:0c:0b:da:11:3b:b0:4c:37:3f:e7:2f:06:43:73:44:83:1d:
         b5:5c:20:c3:b7:57:93:2c:b7:ae:5b:44:db:84:31:44:bc:ba:
         77:fa:71:f1:4b:fa:b4:c7:de:79:8e:fc:7a:39:05:3e:dd:7a:
         95:51:75:4e:32:9b:ca:1f:6f:75:1d:04:54:85:fd:5a:37:5f:
         4f:d5:02:39:b6:1b:68:e7:f5:6a:61:b6:a1:72:c9:27:21:a1:
         a9:01:3b:3a:1c:b1:05:4d:cd:0a:63:03:08:12:06:cd:4f:d1:
         2a:0c:3d:98:67:0b:c0:8f:5e:c7:63:93:17:0a:23:32:9a:e5:
         92:a3:70:5a:de:eb:ba:89:92:57:30:6c:de:04:58:f8:e1:35:
         73:a5:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----