Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-FegB1Fvmf2fuvCKDVQVAsJr8V8.cer
File:                     -FegB1Fvmf2fuvCKDVQVAsJr8V8.cer (raw, json)
Hash identifier:          rk/6WxW/gj0AtHrPf5kqR6DHWsPsdn9Wq8mpEYdsIcU=
Subject key identifier:   F8:57:A0:07:51:6F:99:FD:9F:BA:F0:8A:0D:54:15:02:C2:6B:F1:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016006
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91749B9/1115246EF18211EAB9192D86C4F9AE02/-FegB1Fvmf2fuvCKDVQVAsJr8V8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91749B9/1115246EF18211EAB9192D86C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 Jul 2022 06:57:08 +0000
Certificate not after:    Thu 31 Aug 2023 00:00:00 +0000
Subordinate resources:    IP: 2406:f700::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90118 (0x16006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  4 06:57:08 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=A91749B9/serialNumber=F857A007516F99FD9FBAF08A0D541502C26BF15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:23:e1:86:f7:99:27:ef:fa:fa:47:2a:99:
                    7c:a6:c4:4d:c4:83:71:8b:b4:bf:93:ae:f7:c6:14:
                    00:21:74:21:27:12:2d:47:a4:99:8c:6c:cd:f5:0d:
                    75:5a:b0:40:8a:e5:1f:f7:24:ff:c2:1d:7f:57:f1:
                    74:ca:b4:ab:1e:5a:57:73:e3:e8:a7:72:a0:bb:95:
                    f2:51:19:cb:36:41:ad:62:ff:c9:c8:e8:88:3a:67:
                    0b:1e:08:f7:b6:a3:4b:6b:19:5e:4c:5a:ec:5e:af:
                    3f:a3:9a:20:2c:af:2d:8f:c4:2e:43:e2:3a:38:58:
                    d6:38:80:41:17:51:1d:be:65:4d:87:1a:98:85:55:
                    43:a9:d0:91:e0:7a:c5:1b:d3:8f:99:6d:60:dc:9d:
                    db:f9:99:45:41:ca:a8:14:ba:50:0b:48:9f:ef:03:
                    0a:5b:52:1e:49:dc:08:1c:ea:c7:51:3f:23:7a:be:
                    86:ad:86:40:9d:55:a6:dc:0b:82:d6:43:77:47:06:
                    52:7a:a5:e2:f4:65:a4:9a:1b:86:62:e8:34:52:0b:
                    7c:e0:23:fb:8f:79:84:02:a5:72:38:e4:26:0d:cf:
                    ab:6d:74:0a:ad:24:10:73:22:dc:cf:f2:c8:25:e9:
                    4f:d6:d6:d8:a1:b1:9c:90:2b:bc:9f:03:52:77:c9:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:A0:07:51:6F:99:FD:9F:BA:F0:8A:0D:54:15:02:C2:6B:F1:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91749B9/1115246EF18211EAB9192D86C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91749B9/1115246EF18211EAB9192D86C4F9AE02/-FegB1Fvmf2fuvCKDVQVAsJr8V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f700::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:90:4f:35:27:18:06:56:78:24:c6:51:13:10:f3:d8:75:db:
         7c:86:00:bb:4e:82:a4:10:fb:0f:88:60:20:57:19:69:2c:8a:
         56:c9:23:8e:fc:a6:c5:b7:65:2e:5f:42:58:a7:b6:e6:ea:95:
         e0:3d:05:21:6e:fa:d0:1d:df:f9:ba:3a:3d:a3:04:1f:d9:a7:
         44:96:14:ee:65:3b:56:42:d4:4f:1f:dc:52:aa:87:b7:86:a6:
         56:c4:a3:c9:32:97:94:23:84:31:42:1c:39:d0:17:ae:b7:1d:
         01:bd:ab:a9:24:5b:fd:02:b5:38:c2:34:09:1b:16:90:f3:48:
         f6:89:17:a4:6c:59:5a:42:6d:f1:68:1a:b0:bf:a8:27:2a:68:
         28:ed:4a:07:f0:a5:07:c0:ae:ad:03:ac:41:02:ba:c0:29:a8:
         16:37:1c:da:ab:6b:5a:1e:48:29:77:54:a8:4f:62:43:c1:50:
         7b:67:56:44:ad:91:1c:07:12:b7:7e:cf:3a:d4:69:6d:23:88:
         98:72:19:90:d4:dd:cf:12:32:4d:08:5b:46:dd:48:88:46:bb:
         d3:20:19:29:0e:fc:ab:eb:67:9e:dc:90:50:dd:e3:ce:db:6b:
         a0:0c:fa:3d:d2:0e:23:15:f8:6b:6e:5a:e8:a5:cf:94:ca:61:
         85:ea:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----