Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pfsCYt3EQTsUvcdC9EPocd7-wY.cer
File:                     -pfsCYt3EQTsUvcdC9EPocd7-wY.cer (raw, json)
Hash identifier:          cQFM05I1YHFFn+AmOp3cCgFhVArH34vKqP6CDgsEypU=
Subject key identifier:   FA:97:EC:09:8B:77:11:04:EC:52:F7:1D:0B:D1:0F:A1:C7:7B:FB:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE55
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918A150/85B20D04DA3A11EBB8A9941DC4F9AE02/-pfsCYt3EQTsUvcdC9EPocd7-wY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918A150/85B20D04DA3A11EBB8A9941DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 22:02:53 +0000
Certificate not after:    Sat 30 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 133464

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118357 (0x1ce55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 22:02:53 2023 GMT
            Not After : Mar 30 00:00:00 2024 GMT
        Subject: CN=A918A150/serialNumber=FA97EC098B771104EC52F71D0BD10FA1C77BFB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:01:76:cb:7a:02:42:d5:65:90:b9:31:be:
                    95:99:86:01:63:3f:00:fd:ba:52:96:e8:cd:99:c4:
                    71:ca:45:31:cf:91:67:22:54:76:67:28:69:ab:cd:
                    ae:6c:ee:7f:e5:19:9b:4e:13:3e:5a:03:e3:84:b2:
                    04:e5:1e:12:f4:fe:ba:cf:db:d9:80:18:ec:b7:ec:
                    5e:e8:48:4f:e5:ec:16:f9:d5:85:b8:fe:2f:0a:cb:
                    84:03:87:ca:07:61:72:ce:cd:b3:9b:f2:8a:8d:70:
                    fd:6e:15:3e:48:12:06:b6:eb:83:65:e3:fd:4c:6e:
                    96:0a:f2:b6:fb:3b:65:b4:c3:b9:da:26:35:88:d8:
                    b3:4f:20:8a:27:fd:f1:2f:38:a1:6c:71:29:1c:d8:
                    c4:6a:9a:fd:7f:ca:41:69:d3:83:cb:82:84:09:a1:
                    35:77:47:49:5f:d9:1f:00:d7:89:f6:3e:53:cd:89:
                    3b:fc:6d:27:27:5b:45:f6:54:eb:42:2f:a2:8f:d2:
                    d7:e6:81:f0:43:f3:9a:9a:8e:dc:03:76:1b:b7:7b:
                    5b:b3:21:93:b7:d1:7a:8c:68:3a:2e:a8:9c:21:69:
                    6f:33:ca:68:d5:03:26:ed:a1:1a:6e:90:3c:78:4c:
                    2d:31:99:a0:e3:cd:56:47:20:58:1a:6a:cc:6b:52:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:EC:09:8B:77:11:04:EC:52:F7:1D:0B:D1:0F:A1:C7:7B:FB:06
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A150/85B20D04DA3A11EBB8A9941DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A150/85B20D04DA3A11EBB8A9941DC4F9AE02/-pfsCYt3EQTsUvcdC9EPocd7-wY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133464

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:23:be:03:21:d5:7a:4b:c2:b9:68:42:d7:14:e5:10:b9:
         7d:90:be:cf:49:ae:95:ed:fd:4b:81:50:d8:e5:23:d2:cb:36:
         f8:b5:89:e6:ba:cc:d2:71:b8:da:08:a7:d0:2e:b1:2a:c1:9a:
         46:ab:67:3a:92:c7:be:fb:72:d3:c1:55:79:fd:55:96:0e:0f:
         44:f0:47:cd:a4:34:b1:a6:35:44:cf:e7:f0:42:33:01:1d:84:
         33:a6:97:21:08:f9:c5:1d:8f:f6:61:0d:b9:41:4d:4a:ce:9c:
         cc:d7:95:06:d6:43:96:b3:f5:ae:c3:64:70:2c:c8:23:ee:41:
         28:0a:5d:07:9d:6a:67:56:7a:cd:8c:a9:4a:dc:dc:57:00:c8:
         9e:c0:2f:a4:5a:85:44:2b:32:01:71:14:07:b9:23:ec:b0:b3:
         d2:f4:55:b7:14:c0:ed:19:5e:68:3e:58:65:27:34:90:11:c7:
         a7:4c:a9:e3:30:e0:6b:2c:8e:2c:e2:51:c9:f6:f1:c5:4a:46:
         0c:86:2a:6a:07:d8:59:63:74:9f:d5:16:ec:87:5d:43:13:a8:
         22:c6:24:8b:49:c8:c6:3e:22:5b:64:03:86:98:07:b1:6b:1a:
         ec:c4:b6:00:48:e2:74:76:31:7b:22:5b:dd:8d:e6:71:a6:0d:
         c2:5f:5d:40
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAc5VMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEzMDIyMDI1M1oXDTI0MDMzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEExNTAxMTAvBgNVBAUTKEZBOTdFQzA5OEI3NzExMDRFQzUyRjcx
RDBCRDEwRkExQzc3QkZCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsvgF2y3oCQtVlkLkxvpWZhgFjPwD9ulKW6M2ZxHHKRTHPkWciVHZnKGmrza5s
7n/lGZtOEz5aA+OEsgTlHhL0/rrP29mAGOy37F7oSE/l7Bb51YW4/i8Ky4QDh8oH
YXLOzbOb8oqNcP1uFT5IEga264Nl4/1MbpYK8rb7O2W0w7naJjWI2LNPIIon/fEv
OKFscSkc2MRqmv1/ykFp04PLgoQJoTV3R0lf2R8A14n2PlPNiTv8bScnW0X2VOtC
L6KP0tfmgfBD85qajtwDdhu3e1uzIZO30XqMaDouqJwhaW8zymjVAybtoRpukDx4
TC0xmaDjzVZHIFgaasxrUtTLAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQU+pfsCYt3
EQTsUvcdC9EPocd7+wYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThBMTUwLzg1QjIwRDA0REEzQTExRUJCOEE5OTQxREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4QTE1MC84NUIyMEQwNERBM0ExMUVCQjhBOTk0MURDNEY5QUUwMi8tcGZzQ1l0
M0VRVHNVdmNkQzlFUG9jZDctd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAglYMA0GCSqGSIb3DQEBCwUAA4IBAQB04yO+AyHVekvCuWhC1xTlELl9
kL7PSa6V7f1LgVDY5SPSyzb4tYnmuszScbjaCKfQLrEqwZpGq2c6kse++3LTwVV5
/VWWDg9E8EfNpDSxpjVEz+fwQjMBHYQzppchCPnFHY/2YQ25QU1KzpzM15UG1kOW
s/Wuw2RwLMgj7kEoCl0HnWpnVnrNjKlK3NxXAMiewC+kWoVEKzIBcRQHuSPssLPS
9FW3FMDtGV5oPlhlJzSQEcenTKnjMOBrLI4s4lHJ9vHFSkYMhipqB9hZY3Sf1Rbs
h11DE6gixiSLScjGPiJbZAOGmAexaxrsxLYASOJ0djF7IlvdjeZxpg3CX11A
-----END CERTIFICATE-----