Certificate

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.cer
File:                     A60929C78B1DA5A5B0D91530E8827900546E14AE.cer (raw, json)
Hash identifier:          EJ/EMj/Okrq42Bfg8yOQVpaG31yFeGETXhbpHy2Zw9Q=
Subject key identifier:   A6:09:29:C7:8B:1D:A5:A5:B0:D9:15:30:E8:82:79:00:54:6E:14:AE
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       4C0D80E93F59F9AA1EB61D57367DB0BE676607EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Manifest:                 rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.mft
caRepository:             rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1
Notify URL:               https://rpki-rrdp.mnihyc.com/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 05:34:25 +0000
Certificate not after:    Tue 23 Jan 2024 05:39:25 +0000
Subordinate resources:    AS: 140938
                          IP: 2406:4440:e000::/40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0d:80:e9:3f:59:f9:aa:1e:b6:1d:57:36:7d:b0:be:67:66:07:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: Jan 24 05:34:25 2023 GMT
            Not After : Jan 23 05:39:25 2024 GMT
        Subject: CN=A60929C78B1DA5A5B0D91530E8827900546E14AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:f9:c5:18:46:7e:a7:e5:cc:c5:7f:f9:92:
                    90:e7:3d:51:85:89:4c:2a:64:6e:f4:0a:33:ad:bb:
                    94:8d:36:eb:6d:c6:f0:45:aa:18:9e:51:98:d9:a4:
                    8f:98:65:4f:ba:ef:91:e5:c8:ea:6d:32:51:4b:28:
                    53:eb:af:d7:0f:c1:ea:36:4c:17:7f:3e:42:6f:46:
                    11:b7:54:07:c8:ef:5c:bb:38:3f:21:c4:02:a3:77:
                    9e:d1:ff:54:9c:bd:12:df:14:7c:e1:e9:6c:1b:a1:
                    d4:61:2a:7f:e4:64:d1:20:b2:95:d9:3c:b5:f5:c3:
                    f8:6b:3d:2a:5a:0f:83:72:8d:34:72:c2:20:52:47:
                    f9:6a:fd:89:d1:14:52:79:ad:5a:23:13:ed:f9:8b:
                    7e:45:4d:81:2d:bf:d9:06:c4:79:7f:cb:5a:d7:63:
                    f9:04:b9:13:e1:5b:57:52:4c:d0:c3:42:f6:53:d5:
                    e0:cc:b3:14:ac:de:25:71:68:32:4a:b7:1a:3d:ce:
                    cb:76:80:c2:1b:d0:cb:b4:eb:d8:34:ed:db:6f:ac:
                    29:82:20:01:14:b8:05:e0:8d:5d:a7:79:20:0a:11:
                    68:5f:65:81:19:a7:eb:93:4f:c8:0a:28:74:ef:73:
                    b2:8f:27:2c:3c:2f:4b:96:27:e9:eb:a9:87:31:85:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:09:29:C7:8B:1D:A5:A5:B0:D9:15:30:E8:82:79:00:54:6E:14:AE
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1
                RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc/1/A60929C78B1DA5A5B0D91530E8827900546E14AE.mft
                RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:e000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140938

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:f1:10:d5:23:c6:64:7b:99:ef:20:b8:de:cc:19:b0:25:
         7b:50:89:91:78:99:a9:f8:1a:46:66:45:81:18:a1:ab:50:17:
         13:90:09:b6:86:4f:85:8f:64:1c:07:53:31:3c:f6:a8:5e:cf:
         21:db:6e:c3:73:73:a4:3a:fd:df:3a:7f:0a:49:89:9f:b0:ec:
         81:c3:ba:f1:8b:5c:b4:92:ad:50:ba:9b:6e:72:64:32:dc:2e:
         3a:be:e7:aa:30:ca:71:b9:b1:70:2b:bd:73:8c:23:a1:00:f0:
         4b:29:d3:9f:66:ae:2f:80:df:e4:20:2e:49:e5:3d:52:e0:86:
         98:d9:1b:7e:b8:0d:34:2a:fd:76:90:f8:f4:c4:91:83:99:e7:
         8c:a9:34:f8:fe:8f:28:63:6c:bd:24:91:fe:22:b6:15:31:0a:
         79:3e:8b:36:ab:fe:95:fb:22:62:b8:29:2f:4c:88:f3:5f:bd:
         ca:58:da:5e:7c:87:ce:91:fb:a1:64:1e:b5:5a:c2:a7:4b:73:
         ec:dc:bb:48:77:84:3f:4b:72:57:3c:ff:f5:5f:a2:c0:be:2c:
         20:5f:17:ff:07:1b:94:59:41:97:fd:d4:94:0a:6d:92:ba:94:
         37:8f:74:38:fb:ae:17:8a:c1:cb:e3:4f:3f:85:99:76:e7:56:
         7f:2d:4d:57
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIUTA2A6T9Z+aoeth1XNn2wvmdmB+8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTIzMDEyNDA1MzQyNVoX
DTI0MDEyMzA1MzkyNVowMzExMC8GA1UEAxMoQTYwOTI5Qzc4QjFEQTVBNUIwRDkx
NTMwRTg4Mjc5MDA1NDZFMTRBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmw+cUYRn6n5czFf/mSkOc9UYWJTCpkbvQKM627lI02623G8EWqGJ5RmNmk
j5hlT7rvkeXI6m0yUUsoU+uv1w/B6jZMF38+Qm9GEbdUB8jvXLs4PyHEAqN3ntH/
VJy9Et8UfOHpbBuh1GEqf+Rk0SCyldk8tfXD+Gs9KloPg3KNNHLCIFJH+Wr9idEU
UnmtWiMT7fmLfkVNgS2/2QbEeX/LWtdj+QS5E+FbV1JM0MNC9lPV4MyzFKzeJXFo
Mkq3Gj3Oy3aAwhvQy7Tr2DTt22+sKYIgARS4BeCNXad5IAoRaF9lgRmn65NPyAoo
dO9zso8nLDwvS5Yn6euphzGFnJcCAwEAAaOCApQwggKQMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKYJKceLHaWlsNkVMOiCeQBUbhSuMB8GA1UdIwQYMBaAFFoX
lkiz7yNp3Oe9tYFA/33HBgq/MA4GA1UdDwEB/wQEAwIBBjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Nha3V5YS5uYXQubW9lL3JlcG8vTkFUT0NBLzEvNUExNzk2
NDhCM0VGMjM2OURDRTdCREI1ODE0MEZGN0RDNzA2MEFCRi5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvV2hlV1NMUHZJ
Mm5jNTcyMWdVRF9mY2NHQ3I4LmNlcjCB7wYIKwYBBQUHAQsEgeIwgd8wNwYIKwYB
BQUHMAWGK3JzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj
LzEwZAYIKwYBBQUHMAqGWHJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3Jl
cG8vbW5paHljLzEvQTYwOTI5Qzc4QjFEQTVBNUIwRDkxNTMwRTg4Mjc5MDA1NDZF
MTRBRS5tZnQwPgYIKwYBBQUHMA2GMmh0dHBzOi8vcnBraS1ycmRwLm1uaWh5Yy5j
b20vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkBkRA4DAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMCJoowDQYJKoZIhvcNAQELBQADggEBADQ78RDVI8Zke5nv
ILjezBmwJXtQiZF4man4GkZmRYEYoatQFxOQCbaGT4WPZBwHUzE89qhezyHbbsNz
c6Q6/d86fwpJiZ+w7IHDuvGLXLSSrVC6m25yZDLcLjq+56owynG5sXArvXOMI6EA
8Esp059mri+A3+QgLknlPVLghpjZG364DTQq/XaQ+PTEkYOZ54ypNPj+jyhjbL0k
kf4ithUxCnk+izar/pX7ImK4KS9MiPNfvcpY2l58h86R+6FkHrVawqdLc+zcu0h3
hD9Lclc8//VfosC+LCBfF/8HG5RZQZf91JQKbZK6lDePdDj7rheKwcvjTz+FmXbn
Vn8tTVc=
-----END CERTIFICATE-----