Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_bVbh91-DzjaYfgtQcs24VDcg0.cer
File:                     B_bVbh91-DzjaYfgtQcs24VDcg0.cer (raw, json)
Hash identifier:          Bzb2FPhtt0XLsdVgaZZxcZnA0FMEI+kXT+2GZYnmNSw=
Subject key identifier:   07:F6:D5:6E:1F:75:F8:3C:E3:69:87:E0:B5:07:2C:DB:85:43:72:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       49EB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/B_bVbh91-DzjaYfgtQcs24VDcg0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Apr 2023 05:43:58 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    IP: 167.179.216.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18923 (0x49eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr  3 05:43:58 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A911CC1D/serialNumber=07F6D56E1F75F83CE36987E0B5072CDB8543720D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:1b:0e:2f:53:9d:5a:d5:ff:de:8d:35:21:
                    fd:4b:86:1b:2a:86:dd:b4:c1:62:a3:dd:db:6c:0e:
                    d8:7a:b1:fa:49:2c:cf:21:1d:8a:40:20:b1:ef:04:
                    5c:d7:8c:ad:6d:d5:64:30:62:47:7e:8e:84:3e:a3:
                    d9:c4:14:5f:73:16:6e:90:1f:62:dd:90:61:c0:f9:
                    cb:db:11:f2:80:38:eb:a1:cb:0c:d7:50:fe:41:17:
                    8c:dd:e8:99:f7:6e:4e:2c:af:82:19:4f:71:c3:0d:
                    0c:d4:32:ac:12:19:44:0d:ae:c7:21:3d:00:3b:90:
                    48:b0:fd:60:5f:86:35:99:c6:6e:d2:dd:73:95:64:
                    4e:fb:37:9b:9a:97:06:7d:f6:a0:54:c9:bd:6a:a8:
                    0d:fc:6d:84:e6:67:00:cc:ea:62:32:69:17:81:ff:
                    82:07:f8:17:a5:fa:f9:4f:1e:2a:bd:35:91:f4:17:
                    8e:96:71:29:da:89:ae:6c:7e:52:d4:0d:5a:35:54:
                    3c:fe:93:38:bf:0d:11:97:55:c9:79:4e:82:a5:6a:
                    a6:61:de:17:ea:dc:7a:6d:3f:44:50:9d:97:d2:d3:
                    f7:92:cb:9f:7f:c0:84:49:d4:43:12:3d:85:f1:90:
                    b8:fc:72:56:db:5f:1e:b8:85:d3:fa:8f:ca:be:50:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:D5:6E:1F:75:F8:3C:E3:69:87:E0:B5:07:2C:DB:85:43:72:0D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8360D2E6D1E211ED923C611FC4F9AE02/B_bVbh91-DzjaYfgtQcs24VDcg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:d7:b0:a5:bc:93:ab:0a:bb:17:4b:5a:15:e1:eb:3c:2b:
         1c:11:6a:fc:13:f9:23:5d:0a:a5:a9:af:df:2b:2d:2a:ef:f4:
         26:da:bc:12:97:f2:3e:65:ae:87:d0:46:f5:71:3e:37:af:7a:
         1a:49:26:2b:cb:5c:12:e9:15:ea:14:b0:3c:70:a2:04:00:40:
         3e:8e:1a:58:d0:c2:c3:85:36:06:bf:5b:26:e7:6a:e5:8b:7f:
         72:df:3d:f5:42:9b:5b:b3:ab:96:2c:82:78:88:47:72:bd:51:
         4e:1f:e0:80:aa:3a:9e:c7:d3:1a:74:f3:5e:ba:1d:7b:68:6e:
         1e:1f:6e:01:16:49:79:4b:10:64:84:ce:e1:58:91:b2:dc:73:
         d9:5a:5f:1e:cd:64:59:91:3a:61:e8:28:11:21:47:f9:41:60:
         c1:ae:84:24:46:e1:9e:36:35:02:fb:e3:66:c7:18:bc:64:84:
         b0:c7:33:e7:77:42:5c:2c:13:db:5d:87:a4:c6:a0:5c:74:4b:
         03:15:3d:ce:33:bd:d4:f8:50:16:f2:25:45:9a:09:bc:43:7f:
         cf:97:c3:a5:23:b2:36:40:11:60:dd:c9:af:57:c6:44:d6:ff:
         cb:5d:b2:09:18:3c:0f:a2:fe:90:79:ef:8e:72:ca:f9:f6:08:
         00:20:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----