Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6K3_E52IK0r9TGwjksiaOdlzLs.cer
File:                     V6K3_E52IK0r9TGwjksiaOdlzLs.cer (raw, json)
Hash identifier:          XH4nYy0eFaw3wY7Z9Q+CusD742Zrw6Yamu7En0V2Rq8=
Subject key identifier:   57:A2:B7:FC:4E:76:20:AD:2B:F5:31:B0:8E:4B:22:68:E7:65:CC:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0183E6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/V6K3_E52IK0r9TGwjksiaOdlzLs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Jan 2023 13:11:25 +0000
Certificate not after:    Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 17441
                          AS: 63834
                          IP: 103.40.208.0/22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99302 (0x183e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 13:11:25 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A913D8E5/serialNumber=57A2B7FC4E7620AD2BF531B08E4B2268E765CCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:6b:bc:51:a3:e8:c0:af:41:e5:22:db:a6:
                    8d:28:80:63:9d:94:09:07:c1:c9:61:c3:5f:40:76:
                    36:42:21:2d:55:2b:15:e9:66:8d:be:c8:12:f4:03:
                    e2:30:a8:d0:6b:d3:2b:4c:fb:83:41:df:73:ae:5d:
                    cf:49:e8:48:3f:13:27:7a:ea:84:3d:49:c1:11:66:
                    f8:10:6f:4e:20:aa:40:c1:0b:86:d7:a8:ab:07:00:
                    79:f4:04:b2:b1:14:6b:f8:e8:34:d9:d2:9c:21:35:
                    14:ea:e8:52:2e:fa:51:c0:85:77:7f:6a:0b:f3:fa:
                    e4:71:75:9e:3e:c2:bb:0f:b5:08:df:a6:90:42:1f:
                    8b:ff:70:cb:7c:6f:88:d0:ea:b1:54:2e:af:39:09:
                    a4:2b:f3:e6:34:5b:94:da:d7:62:ee:1d:00:85:63:
                    84:b1:24:62:54:82:4b:e1:f6:7a:46:76:dd:67:8c:
                    09:41:e0:b8:51:7f:65:d2:5e:46:1f:96:d4:64:f9:
                    23:c0:85:be:e6:23:1f:d4:04:7c:9f:79:27:a1:fa:
                    1a:3b:18:de:f8:4b:67:91:d4:c1:0b:a0:e0:03:56:
                    79:aa:e8:bf:06:f6:b7:ba:e8:cc:a1:89:b6:20:16:
                    84:50:1e:fc:8a:8a:b9:f4:06:14:69:a2:8f:a8:1f:
                    36:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:B7:FC:4E:76:20:AD:2B:F5:31:B0:8E:4B:22:68:E7:65:CC:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/V6K3_E52IK0r9TGwjksiaOdlzLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17441
                  63834

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:a1:48:12:cd:83:8e:23:d9:df:65:f9:a3:2a:26:95:43:
         c8:d8:1f:8d:9a:2f:fb:64:f6:df:67:b0:3e:7e:50:06:c8:55:
         c6:9e:c4:eb:07:c7:fd:e3:c0:01:0c:55:43:07:67:a0:60:1f:
         9a:a5:75:2d:60:5f:23:76:67:50:a4:c3:53:e1:2a:b4:fc:85:
         4b:6c:3f:46:b1:8e:69:c6:63:3a:e6:d0:e5:f6:8b:90:79:aa:
         d2:94:aa:c0:62:90:35:de:c7:c2:fc:49:23:b9:9f:25:45:7b:
         e6:35:0d:d0:a7:15:4e:70:6e:c9:96:e5:a2:aa:8b:b7:92:5c:
         ae:f6:4a:c3:07:99:b4:d6:7e:d9:fb:b7:9a:f2:5c:3f:3b:de:
         80:7b:09:cb:7c:12:75:40:e4:3f:5e:5d:cf:df:95:42:85:c0:
         fb:70:e0:e6:81:b8:5d:6f:03:60:22:25:38:6e:3d:07:90:38:
         c1:91:2b:87:2a:e9:25:22:5c:d9:83:60:fd:0e:2d:2e:b6:4f:
         3e:e2:ba:24:bd:25:b1:77:2d:65:5e:c8:c7:87:e7:f7:92:8b:
         21:36:0d:b9:0c:8e:2d:b3:b3:da:31:25:12:64:ba:e7:d6:8a:
         e7:f3:be:3c:e8:ed:34:b8:2e:ef:5b:1d:69:34:aa:5c:95:3d:
         32:c3:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----