Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer
File:                     NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer (raw, json)
Hash identifier:          ek4jgFAVwrNO9ERqDcrEk9mlbEZpbUIxBvFPC0yMVpI=
Subject key identifier:   34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE7C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Dec 2023 01:30:08 +0000
Certificate not after:    Sat 30 Mar 2024 00:00:00 +0000
Subordinate resources:    AS: 133446

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118396 (0x1ce7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  1 01:30:08 2023 GMT
            Not After : Mar 30 00:00:00 2024 GMT
        Subject: CN=A9111C04/serialNumber=340CBEBAF3307B44A0B701976E3C23B79A4CD1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9d:fa:ff:ef:6c:20:33:ac:a7:10:dd:4b:a9:
                    ae:b0:7e:ef:9e:e6:bf:dd:47:b0:a7:76:15:5e:19:
                    50:9a:5c:8d:67:74:4a:6a:b4:35:4f:66:e0:05:f4:
                    da:6a:f5:6f:65:1f:34:3f:dd:76:f4:6b:d7:39:d4:
                    c0:12:46:6d:6f:e9:53:39:a7:be:63:eb:99:a6:b2:
                    11:b7:4f:4b:13:83:a9:39:59:47:32:b7:f4:b8:9b:
                    02:89:6e:1a:36:89:18:c0:f4:35:61:fd:ac:9c:4e:
                    16:b7:20:96:a8:c5:4b:b4:84:5b:c1:42:0b:01:4d:
                    52:fa:4e:28:49:bd:81:9a:7e:92:7b:ed:15:56:9d:
                    18:70:4c:59:1a:6f:a9:8f:22:2e:55:60:54:9c:a5:
                    d1:cd:7e:26:76:78:2e:16:e7:71:3a:41:45:4d:71:
                    91:42:11:32:22:fd:a8:fe:34:f5:33:b3:26:c0:1c:
                    70:da:a7:38:50:0d:2a:9a:76:bf:61:f6:17:09:6f:
                    64:90:ec:42:f2:48:88:5f:51:5c:5c:65:78:f7:8b:
                    70:11:76:23:63:45:40:5d:ac:e5:b7:e4:48:5c:b2:
                    6c:90:21:ae:a6:ae:b6:d5:4e:44:0f:7e:55:87:ca:
                    d6:97:e0:7d:b9:4a:c2:b9:cd:08:8d:ed:75:e1:92:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133446

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:b7:af:a9:da:31:94:32:df:c2:5e:86:24:59:2b:b6:4e:
         39:10:25:17:a0:f9:31:f7:0b:4d:3e:ec:d0:8d:2a:b1:d9:ed:
         12:bb:6c:70:9c:18:9d:cd:f8:43:30:65:fc:c4:7b:9e:4c:cc:
         14:38:27:61:3b:35:bd:9b:12:49:09:22:d7:1f:be:cd:9c:ce:
         b8:10:d0:6c:11:ff:ef:1d:aa:9e:84:6f:52:ba:79:90:85:a6:
         fd:99:e8:c2:89:14:ef:b8:eb:dc:59:61:73:52:59:f5:45:b9:
         9f:68:e2:da:7f:b8:4d:52:97:cd:7f:28:75:b2:32:ff:ac:4a:
         bd:dc:ba:d3:4a:64:0c:b2:ed:e8:c1:a6:31:0d:67:11:d5:d5:
         bf:ac:32:03:ac:a2:87:24:b5:f1:b6:f5:b7:6f:fa:98:bc:45:
         c9:c4:e4:2b:88:32:e3:80:56:ae:b3:de:07:4b:e0:c4:4c:06:
         d2:9b:c8:11:95:70:4c:85:84:2f:bb:11:62:82:a4:35:06:8a:
         b7:98:33:64:32:3f:1e:07:a9:e1:8b:47:92:c8:c2:a4:fe:bc:
         34:6f:d4:2c:90:63:0d:39:84:3c:4b:85:a9:a7:72:9e:c0:0c:
         e8:a7:13:6e:57:76:38:6a:c9:c9:4b:49:df:43:73:b9:19:e9:
         b2:35:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----