Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZFakxEMdbqTsPNaM9_qMpzejUu8.cer
File:                     ZFakxEMdbqTsPNaM9_qMpzejUu8.cer (raw, json)
Hash identifier:          vFrdDNI3nJ85LWD7phiiOF3vr175aGJ8rBbxg64DBrE=
Subject key identifier:   64:56:A4:C4:43:1D:6E:A4:EC:3C:D6:8C:F7:FA:8C:A7:37:A3:52:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01777C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Nov 2022 02:11:39 +0000
Certificate not after:    Wed 31 Jan 2024 00:00:00 +0000
Subordinate resources:    AS: 7645

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96124 (0x1777c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  2 02:11:39 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=A91AC0D1/serialNumber=6456A4C4431D6EA4EC3CD68CF7FA8CA737A352EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:6f:c4:0c:dc:d9:9f:e9:60:b2:5c:70:e6:
                    11:57:a1:bf:89:ba:18:6a:91:5a:2a:3e:c6:14:ca:
                    d4:76:d0:fa:83:48:3f:b6:c2:0b:4f:09:61:19:bb:
                    2b:ac:d7:cd:17:f0:fa:63:29:a3:8c:20:de:71:5b:
                    2a:12:22:66:09:c4:56:03:d5:c9:26:7d:b5:8e:23:
                    14:7d:c8:f5:37:41:51:07:92:56:a4:9e:3e:9d:cf:
                    f3:a4:9e:9a:dc:fc:37:2a:b5:c4:94:b7:1a:78:97:
                    b6:48:d0:51:90:4e:c5:11:aa:d1:87:c9:f9:98:4b:
                    60:93:a5:89:c3:c4:29:3c:11:4f:8a:b0:bd:3b:36:
                    59:00:56:b4:79:f4:ca:74:6b:15:48:40:13:5a:5c:
                    27:8b:6b:33:d1:6e:6d:a2:e3:61:92:6c:4d:de:fd:
                    2d:d7:3d:39:e8:a3:4a:f8:77:2d:c4:ce:7e:11:fa:
                    c8:9d:ab:7f:3d:b6:e6:11:29:ae:40:31:68:67:87:
                    93:f0:f1:df:b7:ca:5b:58:89:03:53:ee:dc:82:e1:
                    f4:5d:ee:c9:77:ec:60:fa:8f:b4:a5:2c:34:35:65:
                    d7:12:9c:c0:74:cc:2c:b4:83:d6:08:67:4a:ae:2d:
                    5f:9d:b2:81:5f:18:51:4b:a6:13:69:9e:4c:3c:da:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:A4:C4:43:1D:6E:A4:EC:3C:D6:8C:F7:FA:8C:A7:37:A3:52:EF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/F22BAB1CA75A11E9A2A3B64EC4F9AE02/ZFakxEMdbqTsPNaM9_qMpzejUu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7645

    Signature Algorithm: sha256WithRSAEncryption
         80:df:c4:37:82:e0:81:e4:2e:72:66:44:23:1f:26:8b:52:80:
         c7:47:a0:7f:24:80:d4:c7:26:dc:13:40:0e:fe:e4:4f:38:1e:
         d5:82:a4:8b:5f:82:c0:f1:e0:72:00:c9:00:8f:1b:e1:29:f4:
         7e:d6:e7:c3:3a:5c:21:df:51:cc:f3:db:df:5c:21:a6:73:3b:
         c2:6d:fc:22:80:a7:68:14:8f:9f:44:37:be:de:4d:71:32:a8:
         c8:9c:20:d5:4b:24:a0:f4:d9:af:ee:6b:2d:76:b3:4b:7c:2d:
         0f:a6:79:b2:19:ba:82:14:c3:8e:1d:2e:5b:dd:a5:14:2e:71:
         9d:d9:67:4b:ba:7a:f1:3e:a3:31:44:41:08:be:82:4a:a9:73:
         38:92:c9:80:98:09:a2:f0:7b:73:cd:57:1c:d1:11:ca:ab:a1:
         bc:fa:14:7b:d0:ff:6d:e5:0b:50:96:11:16:c1:c1:47:b2:27:
         c1:6e:4d:d1:8b:2c:0a:96:1c:84:19:b3:32:2c:ef:cf:e4:4b:
         0c:ed:cd:30:ba:e1:a5:5e:38:88:e9:07:b3:7d:9f:3f:49:5a:
         2a:70:48:b8:eb:f8:b0:5b:cd:cd:2b:78:6a:dc:05:fb:c1:11:
         df:69:65:81:ac:b2:b9:02:11:9f:95:84:90:4d:c6:53:b9:0f:
         9b:2c:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----