Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer
File:                     6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer (raw, json)
Hash identifier:          mIPi2w6dCE1I5lBuSHdaSyk+mW7xa0KCSEWRDS8oNQM=
Subject key identifier:   E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       462D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/6TgxzNk_PMtWLVCvOD6f2mT3lDo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Nov 2022 02:11:24 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    IP: 128.184.0.0/16
                          IP: 139.132.0.0/16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17965 (0x462d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  2 02:11:24 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A91AC0D1/serialNumber=E93831CCD93F3CCB562D50AF383E9FDA64F7943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:32:70:c2:6b:98:e5:51:e1:c7:a6:c4:1c:
                    f8:fd:9b:47:d3:ad:93:9a:44:72:2a:b7:3f:1d:ba:
                    a8:e4:0a:38:14:a8:dd:70:40:b3:16:50:dd:91:d0:
                    1d:b7:d9:22:21:db:7e:c8:65:6a:15:0d:c0:bc:7f:
                    ff:9a:22:9e:47:27:b6:d6:46:af:04:de:cb:60:e2:
                    d0:a4:6e:9d:30:05:29:c5:49:05:51:ee:34:f0:c9:
                    22:1d:87:b8:08:95:8d:1d:f7:c8:15:d8:9a:53:ae:
                    6a:ad:1d:bc:eb:ae:04:e4:65:69:89:d5:d2:28:2f:
                    f5:9d:ee:2d:a8:5f:0c:41:e9:d6:7e:7b:e2:3d:ef:
                    5a:d7:7a:54:61:f7:ac:49:48:18:b2:39:a9:c3:e5:
                    08:9d:78:d2:e9:48:93:26:53:60:7a:d2:df:ad:10:
                    02:8a:d1:40:ca:7e:94:03:69:93:b4:f6:ae:dd:f6:
                    e6:81:10:69:3c:46:8b:7c:1e:bf:31:df:66:02:a3:
                    e9:15:a2:f5:46:de:42:ba:33:82:85:40:ac:75:5f:
                    10:24:83:b4:c4:26:4b:44:de:c5:9d:b4:07:63:38:
                    94:9b:5a:23:74:6e:46:23:ba:17:28:83:8a:8e:bd:
                    72:6a:29:cf:9b:ec:ec:38:e8:d7:65:f6:d2:53:33:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/6TgxzNk_PMtWLVCvOD6f2mT3lDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.184.0.0/16
                  139.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:3d:bd:ba:6c:87:a7:25:2e:ef:12:74:8d:db:3f:98:59:
         cf:55:87:2b:75:65:f1:ed:0b:a4:bd:34:28:18:c5:a7:67:de:
         71:2f:3a:c9:d9:e8:7a:6a:89:9e:ae:43:0c:7b:27:e2:28:58:
         7d:2d:95:6f:03:70:e1:f8:a5:21:d8:22:b7:bd:6b:65:c6:76:
         7f:d4:dc:fa:f3:7c:cc:9e:2e:4e:10:3f:f4:88:34:b5:b5:8f:
         99:d1:8e:f2:34:6a:ed:0e:03:96:25:9e:57:94:51:1a:c4:dc:
         7d:7f:00:a1:4f:54:4a:82:2e:1e:61:06:c1:e6:91:06:85:f8:
         fe:10:95:ba:84:61:65:a5:c8:3a:1e:23:e9:cc:fc:e9:0f:2e:
         4d:7e:52:ce:f5:54:2a:df:53:50:23:7e:8b:d0:a0:3e:11:9f:
         63:48:2e:e7:0a:9e:f8:1f:6c:b7:e1:bd:fd:72:0f:e2:4d:97:
         52:25:ba:c2:56:22:9c:4a:f9:b4:ed:de:cf:02:09:37:21:69:
         81:68:a2:97:4b:1d:4c:d5:2c:7d:82:29:9b:98:e6:31:b3:a9:
         e1:59:82:cd:7b:17:fa:fa:28:26:4f:d1:80:71:9b:c2:a8:26:
         b3:ab:75:57:7b:7f:b2:fa:ac:d1:b8:06:87:a8:5b:dc:24:62:
         b6:52:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----