Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZaTMQ0lWmCPw-6IIGsU2qo_IpU.cer
File:                     VZaTMQ0lWmCPw-6IIGsU2qo_IpU.cer (raw, json)
Hash identifier:          ttffneXpHE9PfShZqp6EOuD/onJC/Z+DmFTm8J/o6iI=
Subject key identifier:   55:96:93:31:0D:25:5A:60:8F:C3:EE:88:20:6B:14:DA:AA:3F:22:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016C52
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915292B/26E0A54EDF9711EBA7379321C4F9AE02/VZaTMQ0lWmCPw-6IIGsU2qo_IpU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915292B/26E0A54EDF9711EBA7379321C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 05 Sep 2022 02:14:27 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 131272
                          IP: 202.37.0.0/20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93266 (0x16c52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  5 02:14:27 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A915292B/serialNumber=559693310D255A608FC3EE88206B14DAAA3F2295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:8a:7b:2e:6a:c3:54:16:9f:ec:19:20:52:
                    d5:e4:66:de:25:b4:df:52:07:d2:8d:aa:ce:2b:37:
                    9e:29:1b:81:96:8c:3f:87:e5:85:9f:8c:aa:5e:55:
                    46:12:4d:62:55:98:5b:a8:a6:e4:a7:d8:a2:da:c7:
                    f8:1c:76:57:ba:2e:ab:f4:0e:a3:5c:5f:19:e2:43:
                    3f:56:d6:29:99:28:ac:0d:32:83:77:0f:4a:6d:96:
                    e5:01:ac:50:13:58:b3:d1:74:39:1f:f7:3d:19:20:
                    02:ce:41:4a:55:08:84:cd:7e:c8:aa:03:74:38:1a:
                    18:c8:52:68:0b:bc:3d:84:83:24:d5:59:28:61:bd:
                    34:68:28:ea:b4:3b:d2:20:73:ae:ff:4c:48:97:55:
                    ad:27:81:b3:3a:40:a0:5e:04:5d:4d:86:3d:6a:99:
                    9f:03:36:af:19:30:f9:35:4f:11:f7:fa:46:97:50:
                    d4:99:ea:b7:8d:78:ec:a9:7a:b5:28:f9:72:8a:90:
                    be:45:87:c7:50:9d:b7:b1:75:1f:95:6c:6c:f1:81:
                    af:d9:d0:9f:fa:b0:6a:b7:5e:82:9f:08:d4:5f:d7:
                    0e:96:3e:64:0d:8f:e9:d9:00:6c:cf:64:42:c9:84:
                    91:60:1a:23:9b:50:04:c4:7e:04:5f:2d:00:03:13:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:96:93:31:0D:25:5A:60:8F:C3:EE:88:20:6B:14:DA:AA:3F:22:95
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915292B/26E0A54EDF9711EBA7379321C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915292B/26E0A54EDF9711EBA7379321C4F9AE02/VZaTMQ0lWmCPw-6IIGsU2qo_IpU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131272

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:62:11:56:c0:6f:3c:38:cc:df:f7:cd:09:48:59:d7:dc:ac:
         b1:5b:9b:02:71:de:a3:fc:00:16:d9:92:73:0d:e7:35:03:b4:
         6f:52:6c:ad:7c:65:92:e9:95:c6:04:15:98:57:3d:fb:47:95:
         eb:0a:8a:db:16:d5:ac:cf:50:9b:57:fd:b3:60:a8:21:3f:1d:
         f7:31:67:fd:d4:22:97:8a:e5:eb:56:a0:7f:a0:53:b2:4a:b5:
         87:17:76:2f:55:a4:05:d9:f6:00:d0:d3:2e:4a:aa:19:9b:de:
         ad:e3:10:ee:21:63:ce:c0:08:9d:ea:cf:90:97:06:5f:71:44:
         dc:b5:e4:65:65:1e:81:34:bd:b2:59:c1:d6:84:7f:1e:e3:62:
         eb:36:21:a3:96:6c:77:a3:7a:59:58:2d:f3:c9:d5:b8:35:40:
         98:44:8d:f1:66:e2:9a:b5:fa:06:41:18:c0:1b:c3:12:03:d7:
         06:3e:8a:b9:7f:cc:4b:3f:f6:4e:45:72:b1:45:02:b7:32:fa:
         b7:75:68:ad:f3:34:c4:24:1c:ae:0f:d4:ff:b1:64:04:0a:13:
         45:44:cb:a6:b5:9d:a9:b0:87:a8:79:c9:48:1b:f5:80:56:67:
         c5:7c:97:73:81:b1:3e:51:16:26:e2:03:c6:ae:43:a0:b0:14:
         97:72:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----