Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uM4JoP0DPFnT-9h48xQx-9oT2RQ.cer
File:                     uM4JoP0DPFnT-9h48xQx-9oT2RQ.cer (raw, json)
Hash identifier:          9EDkevBl0JXec5lZ9VmnFNjABTvOyePCLoGuid/moQ0=
Subject key identifier:   B8:CE:09:A0:FD:03:3C:59:D3:FB:D8:78:F3:14:31:FB:DA:13:D9:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       44E9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/uM4JoP0DPFnT-9h48xQx-9oT2RQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 05 Sep 2022 04:50:11 +0000
Certificate not after:    Tue 31 Oct 2023 00:00:00 +0000
Subordinate resources:    IP: 158.140.224.0 -- 158.140.251.255

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17641 (0x44e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  5 04:50:11 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=A91C7633/serialNumber=B8CE09A0FD033C59D3FBD878F31431FBDA13D914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:f3:0c:30:d9:f1:ba:41:87:4e:ec:a5:25:
                    55:85:1e:f6:88:fc:82:50:09:29:e0:92:96:b3:e2:
                    c9:19:53:56:4b:17:60:96:89:b0:61:0c:ad:16:09:
                    e4:80:50:68:3c:d2:04:f6:f0:08:90:5b:48:f6:f4:
                    f9:cf:ec:92:33:7e:99:a5:2e:e9:ab:37:f7:9d:5e:
                    51:31:05:db:76:47:4e:eb:70:ca:45:2d:9b:f6:f0:
                    80:9a:c7:98:8f:a0:fa:a2:86:83:69:88:fb:e0:ba:
                    cd:a1:ac:48:4a:79:f3:6c:00:c2:56:89:15:93:8c:
                    c5:74:6c:50:6c:6e:c9:bb:47:91:0c:4b:55:4d:65:
                    b2:d3:9e:de:63:63:6a:c6:c6:43:c9:75:cc:cb:a1:
                    58:e4:6e:06:b8:b1:b6:96:61:c5:47:c6:b2:a6:8e:
                    85:7c:85:13:89:21:b4:58:f7:4b:e6:4f:b4:ca:48:
                    a8:7f:b4:3f:f3:95:41:df:22:84:7a:ee:e0:b8:3e:
                    09:df:c6:29:48:a0:f9:0c:3d:40:4b:d3:d7:1e:87:
                    c5:fa:e2:66:7b:20:77:d0:cc:a3:b7:e5:fe:8e:1e:
                    d1:8b:3d:05:31:7a:31:fe:48:f3:f3:62:84:42:f2:
                    d2:1b:73:40:ab:7f:f6:c8:c7:b2:d6:88:23:f5:f1:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CE:09:A0:FD:03:3C:59:D3:FB:D8:78:F3:14:31:FB:DA:13:D9:14
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/uM4JoP0DPFnT-9h48xQx-9oT2RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.140.224.0-158.140.251.255

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:51:ee:d5:d2:81:95:1f:87:b3:45:67:fa:e7:3b:59:d0:
         c1:60:f8:aa:42:76:d7:2a:ac:d3:eb:ee:60:22:78:80:15:c4:
         75:43:46:09:72:43:0f:08:3d:5c:e6:03:b5:e5:20:ce:4c:0e:
         65:bd:2b:ca:27:f1:21:b4:bc:0d:8a:b9:19:c5:66:3d:52:fc:
         08:61:03:21:13:b2:bf:94:b5:9e:b0:49:3f:7e:58:0e:40:21:
         d9:85:0a:a4:6b:89:5f:78:14:73:79:1c:2c:41:c0:dd:41:0c:
         d7:57:7b:9e:02:99:f6:2a:cb:6b:c7:32:45:37:d5:83:f3:ab:
         68:83:eb:84:bd:2c:e8:7c:1d:6b:f7:da:9b:f9:c4:84:e5:57:
         56:43:99:86:61:1a:36:20:99:ad:df:4c:7e:69:06:fa:4f:65:
         44:be:38:b9:96:9d:7e:9c:3b:52:78:66:53:4e:7b:d2:e0:c0:
         66:ae:16:01:2e:17:c7:cf:04:c0:c4:fa:81:da:c4:7d:f2:dd:
         3a:f9:95:b8:5e:89:5f:a9:5f:a8:5d:01:64:82:0c:33:04:7e:
         f1:aa:bd:92:a2:47:9d:ba:f1:62:1f:db:de:07:70:4a:e4:d6:
         ca:4a:3e:83:04:9e:b3:d0:6e:78:a7:06:8f:38:ac:5c:09:12:
         f1:a8:f1:d9
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgICROkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjIwOTA1MDQ1MDExWhcNMjMxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDNzYzMzExMC8GA1UEBRMoQjhDRTA5QTBGRDAzM0M1OUQzRkJEODc4
RjMxNDMxRkJEQTEzRDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJS+8www2fG6QYdO7KUlVYUe9oj8glAJKeCSlrPiyRlTVksXYJaJsGEMrRYJ5IBQ
aDzSBPbwCJBbSPb0+c/skjN+maUu6as3951eUTEF23ZHTutwykUtm/bwgJrHmI+g
+qKGg2mI++C6zaGsSEp582wAwlaJFZOMxXRsUGxuybtHkQxLVU1lstOe3mNjasbG
Q8l1zMuhWORuBrixtpZhxUfGsqaOhXyFE4khtFj3S+ZPtMpIqH+0P/OVQd8ihHru
4Lg+Cd/GKUig+Qw9QEvT1x6HxfriZnsgd9DMo7fl/o4e0Ys9BTF6Mf5I8/NihELy
0htzQKt/9sjHstaII/XxZdsCAwEAAaOCAvswggL3MB0GA1UdDgQWBBS4zgmg/QM8
WdP72HjzFDH72hPZFDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc2MzMvNzg1OTlFNzQxRDdGMTFFQjhBRUNENTI5QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3NjMzLzc4NTk5RTc0MUQ3RjExRUI4QUVDRDUyOUM0RjlBRTAyL3VNNEpvUDBE
UEZuVC05aDQ4eFF4LTlvVDJSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQYMBYw
FAQCAAEwDjAMAwQFnozgAwQCnoz4MA0GCSqGSIb3DQEBCwUAA4IBAQAyP1Hu1dKB
lR+Hs0Vn+uc7WdDBYPiqQnbXKqzT6+5gIniAFcR1Q0YJckMPCD1c5gO15SDOTA5l
vSvKJ/EhtLwNirkZxWY9UvwIYQMhE7K/lLWesEk/flgOQCHZhQqka4lfeBRzeRws
QcDdQQzXV3ueApn2KstrxzJFN9WD86tog+uEvSzofB1r99qb+cSE5VdWQ5mGYRo2
IJmt30x+aQb6T2VEvji5lp1+nDtSeGZTTnvS4MBmrhYBLhfHzwTAxPqB2sR98t06
+ZW4XolfqV+oXQFkggwzBH7xqr2SokeduvFiH9veB3BK5NbKSj6DBJ6z0G54pwaP
OKxcCRLxqPHZ
-----END CERTIFICATE-----