Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9NJFzQudTsjUp1znnEJXuPiS5jw.cer
File:                     9NJFzQudTsjUp1znnEJXuPiS5jw.cer (raw, json)
Hash identifier:          tOXkCdtiP28QptwFX+0eDr56IXR5XdG+nC4lmgrlftE=
Subject key identifier:   F4:D2:45:CD:0B:9D:4E:C8:D4:A7:5C:E7:9C:42:57:B8:F8:92:E6:3C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       017874
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9142302/B2D1D63073E111E6BEABB021C4F9AE02/9NJFzQudTsjUp1znnEJXuPiS5jw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9142302/B2D1D63073E111E6BEABB021C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 07 Nov 2022 13:19:29 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    IP: 103.197.60.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96372 (0x17874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  7 13:19:29 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A9142302/serialNumber=F4D245CD0B9D4EC8D4A75CE79C4257B8F892E63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:2a:67:ff:3e:10:aa:af:8d:a1:a4:a6:d4:
                    c2:73:09:38:ce:8c:bd:b5:9e:40:43:99:cf:9c:c1:
                    a5:7a:94:37:94:af:ac:05:82:42:3f:f0:d4:aa:88:
                    2f:66:38:57:f5:20:5f:ca:b3:b4:fb:7d:03:36:bf:
                    e8:15:2a:a0:c6:19:0a:d1:c4:5f:0a:9c:c3:59:2a:
                    d6:80:e3:27:0e:06:18:7a:bb:0b:cd:9b:42:74:9c:
                    5e:92:db:6e:c0:7c:62:2c:df:00:68:ee:f4:c3:b2:
                    2d:9e:33:31:e7:01:c7:f4:c0:2a:3b:c7:84:78:61:
                    9f:9f:05:40:33:f3:ad:cd:ad:bf:81:f4:30:ac:ca:
                    46:c6:3d:11:87:ae:74:1f:05:7b:d4:a8:48:3e:37:
                    93:ac:7b:75:7e:20:18:dd:f7:cc:67:88:40:be:74:
                    b0:21:a9:93:53:4b:de:50:e1:d4:a4:c0:74:8f:6b:
                    48:f5:11:7c:ef:f1:90:82:14:ef:0d:79:41:0b:21:
                    31:12:bd:fc:89:13:df:62:a6:ee:e0:42:64:04:62:
                    30:3f:58:ca:ef:26:66:b8:47:5c:d2:11:59:3a:c5:
                    42:d7:15:e7:14:95:1d:67:ee:33:2e:26:5d:34:8d:
                    e4:56:e7:41:f0:57:5d:96:e9:59:5b:8d:5b:72:ff:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:45:CD:0B:9D:4E:C8:D4:A7:5C:E7:9C:42:57:B8:F8:92:E6:3C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142302/B2D1D63073E111E6BEABB021C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142302/B2D1D63073E111E6BEABB021C4F9AE02/9NJFzQudTsjUp1znnEJXuPiS5jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:78:f4:01:7b:af:32:72:3b:9b:0f:79:8e:02:58:d4:c3:05:
         ba:f6:c2:5a:6b:6b:40:4c:05:3c:61:53:76:14:7b:64:4b:70:
         02:d1:8a:2b:22:5c:f6:0b:f1:6c:b9:6c:1b:e2:96:d8:9f:1e:
         9d:27:ab:c5:87:a6:2f:db:71:36:d7:04:ed:43:91:dc:3b:28:
         01:e6:d9:36:66:fd:14:fd:3c:41:27:8a:ce:0a:e7:62:5d:5b:
         8e:de:8b:73:77:44:ed:23:69:56:12:db:04:8e:4b:f9:f9:72:
         4a:a9:50:d5:79:b9:38:54:dd:63:09:4d:9a:61:7e:28:cb:cb:
         6c:be:89:24:8e:c6:d1:80:57:a1:e3:cf:d5:9d:b3:c0:59:15:
         4f:52:fa:15:23:59:d6:de:fa:ce:02:74:88:ee:c8:de:42:74:
         0a:85:75:79:61:da:2b:78:93:76:83:85:c7:81:4a:38:ee:c4:
         0d:57:89:da:47:c1:8b:b6:37:c8:9f:c3:60:15:23:5e:65:7b:
         44:3c:44:7a:83:33:5d:2f:ec:20:3b:1a:f0:e6:91:9f:7e:18:
         77:66:c8:68:89:9a:b3:f4:03:9a:99:35:b4:61:95:5c:3a:6b:
         90:19:c2:8d:4c:53:48:f2:14:fe:e9:d1:b2:7b:c1:40:16:f0:
         0a:b7:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----