Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m2xbAen0z7HWLZ6audU9FFFUtU4.cer
File:                     m2xbAen0z7HWLZ6audU9FFFUtU4.cer (raw, json)
Hash identifier:          +n/TTbSdWidKZXbWIpRU8oAafj3myff6IdBsLH/U/Qk=
Subject key identifier:   9B:6C:5B:01:E9:F4:CF:B1:D6:2D:9E:9A:B9:D5:3D:14:51:54:B5:4E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       45C2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9178CC3/BFD0AAB8095A11ED9475D262C4F9AE02/m2xbAen0z7HWLZ6audU9FFFUtU4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9178CC3/BFD0AAB8095A11ED9475D262C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Oct 2022 04:53:09 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 67.213.140.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17858 (0x45c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 17 04:53:09 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A9178CC3/serialNumber=9B6C5B01E9F4CFB1D62D9E9AB9D53D145154B54E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:89:ee:a9:9c:65:97:d9:9c:eb:a2:6c:f5:
                    31:f5:8f:23:de:b8:57:63:25:54:49:41:b9:99:8e:
                    e8:a1:70:73:d5:2c:a0:43:42:8c:f1:a6:82:6e:02:
                    ad:20:c2:14:76:50:14:02:9d:60:8b:06:6e:bc:79:
                    b2:0b:51:6b:4f:46:d5:94:b9:ff:a8:cc:54:73:e6:
                    18:48:22:80:b6:65:20:ed:aa:03:6c:1e:0b:b9:50:
                    02:da:90:f2:95:54:08:04:a0:7c:16:0d:06:42:1d:
                    3e:aa:18:27:5e:aa:c3:af:96:fe:16:f6:d0:69:9c:
                    a7:e9:77:a0:9e:20:41:a8:2e:0d:56:77:22:75:f1:
                    9f:08:5d:6c:16:d1:7e:f5:98:05:36:5e:56:b1:28:
                    af:ca:2a:81:15:f5:97:61:12:2b:73:2e:8c:60:85:
                    1e:b3:4e:aa:1e:38:64:2a:8c:bb:09:0c:1d:31:3c:
                    13:72:ac:de:31:ec:d6:7b:28:b8:ae:21:34:7b:73:
                    99:2c:64:d7:cc:dd:a3:ab:6b:14:dd:39:c7:a8:d1:
                    35:8a:14:91:3b:f8:6a:a1:88:5f:e3:fe:3c:1c:dc:
                    7a:1e:3c:a8:79:8c:fd:53:f2:90:6e:4d:e1:1f:db:
                    e2:b9:36:03:fa:56:d9:d9:d8:40:cd:5b:87:c1:95:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:5B:01:E9:F4:CF:B1:D6:2D:9E:9A:B9:D5:3D:14:51:54:B5:4E
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178CC3/BFD0AAB8095A11ED9475D262C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178CC3/BFD0AAB8095A11ED9475D262C4F9AE02/m2xbAen0z7HWLZ6audU9FFFUtU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:64:b5:82:b8:e5:1d:f4:00:9a:a6:43:e5:2b:fb:5f:f3:52:
         c3:87:b9:ef:48:16:7a:79:dd:92:0e:d4:2d:a1:0a:73:44:26:
         f2:31:82:cc:bd:3b:a7:1b:c1:37:7e:60:ce:4e:63:f1:f9:85:
         f4:bc:25:e8:73:76:23:a2:ea:45:55:a2:26:e8:bd:43:4a:16:
         b4:83:e4:2e:47:6c:b6:01:32:32:4d:6e:8a:be:ec:06:75:c8:
         cb:82:f8:3c:f9:6c:c1:19:8c:c3:e3:ae:8a:a0:94:fc:e4:3c:
         3a:c3:ed:36:ed:c8:1b:fb:56:01:eb:ba:ad:e4:4a:12:ae:81:
         ff:9e:64:fc:de:d7:8b:33:56:29:d6:a2:b4:6f:ee:b0:bb:ba:
         63:bf:67:eb:6f:2a:43:b9:eb:bd:31:3a:b8:26:c0:13:3f:ba:
         da:87:b9:31:cc:4c:01:75:43:46:d4:31:07:88:70:5f:70:a5:
         fe:60:2e:6d:87:19:9e:f0:15:f2:1e:37:16:ad:f5:c4:74:a2:
         c0:79:d0:25:18:7a:ca:dc:84:43:d6:21:55:52:e6:f7:93:4c:
         0f:3d:b8:dd:95:91:d2:3b:ce:8a:34:f6:6a:c3:a1:02:34:b5:
         f9:33:80:96:0c:32:5a:25:8a:72:91:26:ad:7c:c4:05:6a:9e:
         7a:08:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----