Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kvtsgb-y4C9GPuTW1QzERV-Kfzk.cer
File:                     kvtsgb-y4C9GPuTW1QzERV-Kfzk.cer (raw, json)
Hash identifier:          awBGw0CGwilHiy60e7dnjk3sB7GpHDkDk+9iQD1yLPE=
Subject key identifier:   92:FB:6C:81:BF:B2:E0:2F:46:3E:E4:D6:D5:0C:C4:45:5F:8A:7F:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B35F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CAF1E/368E5498117611E88BE70942C4F9AE02/kvtsgb-y4C9GPuTW1QzERV-Kfzk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CAF1E/368E5498117611E88BE70942C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Jul 2023 17:09:17 +0000
Certificate not after:    Fri 01 Dec 2023 00:00:00 +0000
Subordinate resources:    AS: 136745
                          IP: 2401:4cc0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111455 (0x1b35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 31 17:09:17 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=A91CAF1E/serialNumber=92FB6C81BFB2E02F463EE4D6D50CC4455F8A7F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:76:d4:e7:32:2d:c6:60:a4:d5:32:9a:96:
                    de:6e:c5:d6:10:61:20:39:8e:fa:44:1a:fc:46:a8:
                    04:05:ea:cd:38:1b:b9:8d:45:11:d8:bf:5c:88:bd:
                    30:97:99:cc:b6:f4:17:1d:a8:db:56:2c:f4:d2:5b:
                    f3:2b:7f:6f:1b:9b:1f:17:83:e2:60:40:f9:9b:f1:
                    fa:c3:e4:a5:57:db:b2:ef:9f:55:51:c7:8a:70:e9:
                    f1:66:93:54:3c:53:d3:96:ca:ca:ef:ce:b0:f5:3b:
                    0a:d8:f2:cc:65:2a:34:87:56:a7:ec:d2:9a:3c:90:
                    5a:4a:b2:55:a8:f7:f4:1b:10:7c:4e:f5:45:f6:7f:
                    1c:8b:13:61:55:0b:c0:52:ce:11:3f:99:49:f5:e9:
                    52:17:f8:d1:3b:8a:41:2a:b5:09:41:4d:01:ec:62:
                    4d:55:f5:f8:6c:a4:f5:0d:63:a7:70:7a:1c:8b:85:
                    76:41:2c:c8:57:0d:92:ad:37:72:f6:b2:d9:b2:0b:
                    2e:87:44:c0:30:2c:06:ef:19:76:d6:d1:fc:7c:d2:
                    83:fa:f8:a0:d3:44:ef:6a:ed:19:d5:52:1d:17:a8:
                    1c:59:d7:4b:bd:ea:fc:98:23:74:b4:78:bd:20:bf:
                    07:e0:12:9c:3f:08:c8:03:d7:e1:c0:05:37:96:04:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:6C:81:BF:B2:E0:2F:46:3E:E4:D6:D5:0C:C4:45:5F:8A:7F:39
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAF1E/368E5498117611E88BE70942C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAF1E/368E5498117611E88BE70942C4F9AE02/kvtsgb-y4C9GPuTW1QzERV-Kfzk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136745

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:13:0b:01:7d:2d:a8:b0:ba:95:f4:12:76:6c:bd:2b:83:3b:
         31:a6:c6:8b:8e:73:17:78:2a:d7:74:49:6a:a6:7b:8d:e9:4d:
         db:77:c3:5b:34:41:40:56:39:c6:53:9c:7a:42:ce:60:87:92:
         00:ac:6c:50:43:ad:cc:8b:37:ce:10:bf:21:36:a0:60:bc:6f:
         d9:81:b0:20:ed:4f:23:e1:6b:44:0b:59:7b:48:04:75:e9:c4:
         e3:d1:86:58:f0:94:1b:e8:6a:ea:38:e2:44:cc:5a:65:62:fd:
         5f:95:e2:ab:7f:1d:7c:53:44:81:92:04:05:a7:da:0a:04:54:
         fb:1c:3f:e7:e1:54:f0:5d:37:57:53:a6:e0:ff:e0:9e:9e:c3:
         db:17:84:30:3c:2c:19:d8:5e:8c:9b:79:fd:b8:1c:ad:7c:19:
         46:f8:ee:77:12:4d:4f:d4:5b:ae:32:5b:db:c9:e2:4b:00:1a:
         a6:29:5c:d0:d6:20:7d:c3:6e:34:3e:57:e7:32:a4:d8:9f:7b:
         9b:ff:43:fa:9e:03:57:63:6e:bc:d7:e6:b9:27:e0:8c:85:b5:
         2c:68:6c:9a:67:97:29:2e:8d:60:4c:2d:2a:93:db:32:d8:79:
         23:70:69:87:a5:2e:b3:df:59:d1:ac:5c:eb:55:59:9d:de:45:
         09:f2:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----