Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer
File:                     0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer (raw, json)
Hash identifier:          pVkX/9m1/zsn6XQvC0U+msvVpQSycjvfc8gMzMdD6Ko=
Subject key identifier:   D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4302
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/0pMTNEhYLWAcMBHLNQvPs7bzsyA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 20 Jun 2022 04:09:22 +0000
Certificate not after:    Sun 30 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 67.213.140.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17154 (0x4302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 20 04:09:22 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=A911035A/serialNumber=D293133448582D601C3011CB350BCFB3B6F3B320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:e6:8d:5d:7f:33:bc:74:e1:9e:32:46:48:
                    a2:53:4e:22:5b:fc:42:f6:87:a1:2b:f5:3e:72:5a:
                    02:be:98:a9:25:4c:b4:bc:72:cd:6a:e6:83:95:3b:
                    66:da:d6:b1:ec:ad:0e:a5:e8:99:41:c0:fa:5b:54:
                    48:ac:e9:a0:7f:4a:94:9e:2a:34:ab:19:39:50:b6:
                    50:29:39:01:c9:ac:cf:38:11:a5:c9:05:1d:d3:af:
                    3d:a5:ff:69:9c:1f:96:42:4c:81:ae:d6:d6:1b:9b:
                    42:0e:13:73:58:ed:23:c9:9f:41:fb:34:4f:ad:ad:
                    ee:ff:ca:47:83:09:94:81:20:96:14:20:e3:a5:3f:
                    92:48:15:9e:50:e5:f2:37:bf:3b:f1:73:b2:f4:ce:
                    e8:b9:37:4d:22:51:72:cc:a6:ed:f5:5b:5a:fc:33:
                    fb:c1:c2:9e:39:7b:df:35:d5:cc:2c:ad:54:b6:01:
                    c1:30:51:67:aa:7d:15:ba:bc:96:62:86:bc:eb:38:
                    a8:86:19:15:61:93:03:2a:e7:41:ef:0d:13:17:7d:
                    4b:d5:68:bd:d1:c8:0e:05:f3:82:f8:d5:0c:92:97:
                    ea:fd:85:43:ee:8d:9d:df:a7:6b:b9:85:1a:95:b8:
                    c9:23:52:29:5c:08:21:21:99:76:cb:93:b9:af:db:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/0pMTNEhYLWAcMBHLNQvPs7bzsyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:7e:b1:35:19:28:25:9f:0f:98:ba:a4:6f:3f:00:0b:9f:
         4d:9a:dd:47:64:db:55:a8:8c:0e:0d:dd:7d:05:a9:70:3f:99:
         c0:4b:a8:43:a9:22:a3:0e:26:e7:ce:82:09:12:73:47:c1:e7:
         11:2e:7f:8b:54:9a:3a:58:07:a1:1e:32:f3:10:b6:8a:7e:d9:
         26:80:7f:7c:72:81:ab:fb:1e:f7:7c:83:67:e0:c1:f2:82:cd:
         de:d5:40:19:32:f2:83:67:7a:d9:a2:6c:f2:88:e1:e7:0a:54:
         5a:55:cc:d3:c8:03:2d:0b:6d:b3:42:90:89:40:40:6a:52:fa:
         bd:51:a8:78:35:04:ed:d4:da:67:dd:59:02:93:3e:88:be:59:
         f6:73:e7:2a:22:82:c6:bc:5c:ec:18:9c:ce:f4:97:c2:a5:91:
         42:9e:99:26:9e:1f:c8:fd:e2:10:dc:b3:e5:c0:4f:bf:17:10:
         b5:46:e6:aa:0b:ac:bd:b5:53:ee:66:e6:62:aa:96:42:9b:3a:
         d4:8c:44:ba:5e:a9:e0:5b:af:16:4c:9f:9c:80:c2:32:ba:df:
         6e:dc:55:e6:f6:5b:7e:d9:c7:2c:e2:ea:61:04:f7:e2:4d:f5:
         27:0d:f5:1e:3b:5a:5a:d0:e0:2f:4c:71:18:ba:29:54:8e:10:
         2d:35:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----