Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xIL4jvXRTwVbhngBnO98d3vmLE.cer
File:                     0xIL4jvXRTwVbhngBnO98d3vmLE.cer (raw, json)
Hash identifier:          q9Zgp03ELNPq+U7siZcnPmu6zPrErnHxYb8VC+ioI3o=
Subject key identifier:   D3:12:0B:E2:3B:D7:45:3C:15:6E:19:E0:06:73:BD:F1:DD:EF:98:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE39
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917F58C/4A252F263E5311E9BB478129C4F9AE02/0xIL4jvXRTwVbhngBnO98d3vmLE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917F58C/4A252F263E5311E9BB478129C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 18:26:18 +0000
Certificate not after:    Sat 30 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 135614

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118329 (0x1ce39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 18:26:18 2023 GMT
            Not After : Mar 30 00:00:00 2024 GMT
        Subject: CN=A917F58C/serialNumber=D3120BE23BD7453C156E19E00673BDF1DDEF98B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:67:54:c1:e2:88:a2:45:f3:a0:bf:06:c1:
                    91:10:66:31:57:13:3b:b9:aa:24:84:5e:04:ca:cd:
                    23:23:49:05:ba:6f:a5:40:b8:e4:61:af:8d:ad:b8:
                    8d:91:b7:46:43:6b:8c:c9:58:32:dc:f2:a4:5c:80:
                    9f:78:25:de:b4:94:b1:d3:f5:06:ac:fe:bb:6b:43:
                    31:c7:f6:12:cc:f0:4c:64:bd:f1:2e:49:91:ac:7d:
                    42:bb:ab:24:7a:32:67:1a:69:6f:39:9b:96:64:a0:
                    99:b6:5e:2a:9e:ca:51:9a:1c:73:32:23:9a:43:eb:
                    65:fe:d1:cc:8d:09:9b:f0:dd:3a:1a:84:68:eb:06:
                    ed:6e:eb:c7:f6:2a:c1:43:68:52:c1:f4:a9:d1:a2:
                    9c:e0:b5:20:a4:df:99:69:d4:98:76:ec:6a:00:93:
                    c3:16:68:a2:f4:9a:32:10:df:c9:5c:b5:75:68:9f:
                    c7:7c:35:e2:b5:75:d6:a5:90:bd:22:a9:9c:ee:e4:
                    56:a2:8e:c7:6d:2d:12:2b:95:48:47:dc:78:a4:36:
                    cf:07:f1:ce:9a:b5:65:c1:09:d7:95:86:a1:e5:5c:
                    b1:2e:51:13:62:42:8d:ee:aa:4a:72:f4:de:af:bb:
                    5a:eb:64:2a:29:e7:ab:64:31:c4:91:1e:df:a7:da:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:12:0B:E2:3B:D7:45:3C:15:6E:19:E0:06:73:BD:F1:DD:EF:98:B1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F58C/4A252F263E5311E9BB478129C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F58C/4A252F263E5311E9BB478129C4F9AE02/0xIL4jvXRTwVbhngBnO98d3vmLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135614

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:c9:91:cf:71:2a:6c:af:9f:3b:c9:02:6b:4a:ac:dd:1d:
         8e:41:59:6f:40:d2:2c:ba:81:70:da:3f:48:00:e9:01:79:31:
         0e:28:0a:1f:2f:78:f3:a1:71:dd:25:25:2d:77:c9:55:e6:6c:
         16:cb:07:59:59:3d:4e:fe:08:8a:85:e1:f1:e7:03:2c:db:56:
         8c:9d:03:28:b3:b2:91:3d:bb:c1:72:5b:b8:52:44:f3:2d:4a:
         b0:bb:07:12:3a:63:49:7d:bf:3b:4d:41:34:68:26:c8:45:99:
         be:79:a9:76:62:b7:89:88:36:26:ce:61:c2:2d:ce:c6:fd:2b:
         c8:aa:77:8e:ea:5c:87:e6:0e:b7:fe:03:eb:07:a8:d0:7b:6e:
         1f:d2:88:22:0f:8c:66:e8:da:b0:8b:f0:ac:ae:cd:e3:42:3d:
         3f:d8:43:59:a2:4c:51:98:33:3d:b3:d6:6b:0d:cf:b9:85:09:
         45:50:4f:94:41:e3:62:82:8c:ee:78:49:04:21:6b:2c:c3:54:
         0e:48:75:e3:c7:a3:ca:d9:7e:ed:e6:9a:74:66:94:e5:38:dc:
         75:6c:0a:63:1e:1b:ad:5f:c3:07:56:b3:35:d9:4b:df:9c:f0:
         24:ef:22:87:03:5e:a5:5a:3c:28:8c:31:ab:a1:7a:0d:2a:be:
         d6:89:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----