Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EonlVthdIAz11olftc5Jwi5sFr8.cer
File:                     EonlVthdIAz11olftc5Jwi5sFr8.cer (raw, json)
Hash identifier:          n0LGuJxiq7X11l9QM3GWjAP8ijJl/tWwi9VJexpKeZE=
Subject key identifier:   12:89:E5:56:D8:5D:20:0C:F5:D6:89:5F:B5:CE:49:C2:2E:6C:16:BF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4903
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/EonlVthdIAz11olftc5Jwi5sFr8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 24 Feb 2023 07:25:14 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    IP: 167.179.22.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18691 (0x4903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 24 07:25:14 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91F2807/serialNumber=1289E556D85D200CF5D6895FB5CE49C22E6C16BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:9a:24:ce:04:d9:1e:3a:a0:a9:ee:f1:cf:
                    c9:9c:92:87:b9:ab:2e:dd:ed:e9:73:20:59:c4:60:
                    81:14:d0:5c:3e:cd:02:cf:46:e0:60:1f:c1:e2:e1:
                    ec:d1:2e:05:3f:6e:db:46:78:86:f5:30:96:18:99:
                    ff:98:4d:c5:77:ec:f0:6a:03:67:7a:23:8d:a0:70:
                    5b:fa:48:30:b3:64:c9:8b:b9:0f:f5:ee:f1:43:69:
                    22:a7:b3:3d:36:a5:18:a8:53:ac:84:47:20:63:5f:
                    95:d3:09:3c:40:7e:cf:e0:ca:e2:f5:5a:28:07:31:
                    ff:3d:8a:f7:16:8c:e2:89:38:8c:ca:53:2d:fb:54:
                    b1:53:ef:17:a6:7c:4f:48:96:2e:72:91:05:75:26:
                    36:c4:c1:8f:21:a5:60:9d:59:8d:1d:02:83:a9:35:
                    ed:78:3f:df:03:46:80:70:29:5f:1b:1b:ef:a7:3f:
                    48:5e:43:ed:ca:8b:94:60:4b:f6:86:47:40:5c:60:
                    bf:14:1a:73:0b:93:4c:01:c6:7e:eb:00:f0:31:20:
                    6c:2f:d5:8c:a2:81:6d:ab:d1:4e:af:70:e3:30:d0:
                    3a:b2:c7:d1:7f:e5:21:c7:fd:7a:8c:ac:a4:ef:f4:
                    7c:47:c9:73:a1:2a:f3:dc:ea:16:93:01:f7:65:01:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:89:E5:56:D8:5D:20:0C:F5:D6:89:5F:B5:CE:49:C2:2E:6C:16:BF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/EonlVthdIAz11olftc5Jwi5sFr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:64:fa:a4:c7:52:34:60:84:23:ef:18:87:c7:4f:24:96:2e:
         3e:05:63:25:e7:0f:ab:fa:8c:b8:22:79:aa:28:d0:18:c3:dd:
         97:d6:2c:23:18:89:45:7e:74:93:44:7d:03:d7:7f:7d:e9:2a:
         f9:ab:8e:7d:10:63:8a:c7:61:10:5a:00:91:2d:05:d1:82:4c:
         bd:e0:20:e1:35:e6:b9:f2:36:13:d7:37:1b:61:e9:71:69:73:
         86:68:cf:e9:43:5c:d3:94:98:e3:a1:fd:82:41:2d:ce:9f:1d:
         8f:26:ea:91:fc:d1:02:c5:46:32:12:7a:cd:33:c3:0b:4b:10:
         63:92:f0:eb:58:35:5a:c0:87:91:b5:22:bb:5b:7b:32:01:45:
         35:d1:c2:39:cb:02:55:da:9e:a9:78:ff:e2:a4:26:c1:7f:ba:
         83:4d:7c:f3:a4:66:a1:7e:45:85:1d:02:89:58:da:dc:33:90:
         76:48:d8:6f:e3:5d:f7:f3:48:5f:c5:4c:0b:9e:06:76:a3:85:
         48:81:ae:06:0f:a8:43:69:c5:2f:b6:7c:6b:00:3e:d9:64:5b:
         9a:88:b4:88:f4:93:35:6e:3b:ee:7b:53:a0:a2:34:b3:18:17:
         f2:5b:20:21:9f:36:b3:e4:2b:fe:58:c2:58:11:3a:fa:95:e0:
         70:80:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----