Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Cbf_uRT0NK9YMgtgOLY6iUPRew.cer
File:                     0Cbf_uRT0NK9YMgtgOLY6iUPRew.cer (raw, json)
Hash identifier:          v0MUl6R8vHPIXhky65idUDCXEXG2hwDtaZVHYGmTNo4=
Subject key identifier:   D0:26:DF:FE:E4:53:D0:D2:BD:60:C8:2D:80:E2:D8:EA:25:0F:45:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187D7522ACA26DB5EA7994028074E07ECD1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/31d122-e1e1-493c-9260-17c266a901cc/1/0Cbf_uRT0NK9YMgtgOLY6iUPRew.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/31d122-e1e1-493c-9260-17c266a901cc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 May 2023 12:38:19 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 52025

Validation:               Failed, certificate revoked on Mon 08 May 2023 21:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d7:52:2a:ca:26:db:5e:a7:99:40:28:07:4e:07:ec:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May  1 12:38:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d026dffee453d0d2bd60c82d80e2d8ea250f45ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:ee:0e:e2:37:ec:ac:4d:f1:ca:a6:a3:bd:
                    f6:e5:b6:ee:06:e5:97:9b:5f:f0:9b:b6:80:cf:b7:
                    1b:84:62:b1:fa:1d:66:85:d4:e8:6e:36:30:77:18:
                    4e:cf:4a:24:7e:c6:33:19:84:85:41:1b:b4:d5:72:
                    66:42:73:38:34:2e:71:02:9d:13:79:9c:1d:2d:a6:
                    f4:8c:d6:b1:bc:f4:37:33:d2:76:af:35:c7:93:ab:
                    47:eb:89:65:21:12:6a:1f:4d:c0:1a:36:20:a0:85:
                    30:8d:b2:8e:aa:a2:e4:63:97:84:d1:20:fd:a3:eb:
                    fe:6c:af:98:c0:ff:1f:53:2a:bb:fe:40:99:8a:06:
                    19:2e:0c:e6:3b:45:4e:99:7b:0c:f6:96:fe:96:c6:
                    55:22:b1:e5:94:3d:f2:77:c3:6c:24:f2:66:66:a0:
                    23:82:98:15:f6:8a:cd:cd:86:3f:12:a9:82:01:bc:
                    39:8e:1a:4a:85:c6:48:35:7a:58:ef:c4:b8:d3:7d:
                    f3:3b:26:20:2d:99:91:cc:00:09:2c:1d:7a:cf:9e:
                    be:de:a6:6d:fc:ac:d0:9e:0c:16:ff:b1:92:2b:d4:
                    dd:5d:a3:3f:82:0c:36:69:b8:1e:3e:b9:1f:d4:9f:
                    e4:ce:b1:d2:ba:79:8a:24:af:3a:4e:aa:98:8a:5d:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:DF:FE:E4:53:D0:D2:BD:60:C8:2D:80:E2:D8:EA:25:0F:45:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/31d122-e1e1-493c-9260-17c266a901cc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/31d122-e1e1-493c-9260-17c266a901cc/1/0Cbf_uRT0NK9YMgtgOLY6iUPRew.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52025

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:ca:1b:ce:9b:8b:c1:6c:3d:43:ee:67:2a:bf:ea:2c:64:
         2a:6c:8c:5e:4d:43:17:66:63:fe:a5:c3:81:34:65:09:6c:9c:
         a1:d9:98:e3:52:74:f8:a7:3e:7a:e0:3d:ed:b7:df:57:ad:7f:
         3a:a7:25:9d:4a:2e:93:c9:c8:7d:b3:e6:d7:7b:8e:56:68:fa:
         c8:59:9f:5e:02:7d:87:a0:78:41:d7:7e:99:8b:ab:01:2a:c7:
         e8:56:b8:76:ca:db:8d:af:6e:a9:fd:c2:d2:3e:19:d3:0b:00:
         b0:11:48:a6:38:ae:07:c4:b3:9e:e8:60:29:c8:a5:7b:a0:07:
         db:a7:4c:3c:3a:fa:ca:cd:91:34:88:93:dc:d6:4c:29:f8:e7:
         9d:14:bc:8a:34:e4:21:03:c8:6f:c0:86:3a:9d:94:51:76:93:
         12:7d:21:a3:95:84:fd:2f:d0:44:0d:4a:10:42:42:29:5d:4c:
         43:65:d8:36:1b:8a:c3:d8:50:3b:37:a2:dc:11:5f:69:eb:3b:
         c9:3a:7f:fe:45:42:d0:07:63:f8:ee:d4:45:55:a3:b2:eb:e8:
         21:78:36:08:07:10:84:d1:17:45:af:13:5c:73:26:a3:27:93:
         90:81:e7:f1:90:e5:bc:4c:39:1e:89:2a:76:00:e2:ae:74:73:
         7c:f6:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----