Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EN7wuxnCiWUF8zKeQYv8EzuERZE.cer
File:                     EN7wuxnCiWUF8zKeQYv8EzuERZE.cer (raw, json)
Hash identifier:          hG3FRCMorSdqTUliOW2S0E7/T/0mWK06WjK15D0L+AU=
Subject key identifier:   10:DE:F0:BB:19:C2:89:65:05:F3:32:9E:41:8B:FC:13:3B:84:45:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018C9CAB64D78D9ABB65721492CF0307A174
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/0162d7-4e17-48e4-aae4-d741ef33fe94/1/EN7wuxnCiWUF8zKeQYv8EzuERZE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/0162d7-4e17-48e4-aae4-d741ef33fe94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 24 Dec 2023 16:32:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 44354

Validation:               Failed, certificate revoked on Thu 28 Dec 2023 11:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9c:ab:64:d7:8d:9a:bb:65:72:14:92:cf:03:07:a1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 24 16:32:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10def0bb19c2896505f3329e418bfc133b844591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:25:1c:b8:2a:48:3d:da:4d:af:fc:f1:81:
                    cf:d3:55:a2:63:b7:b8:53:db:43:03:f5:de:db:c7:
                    ef:a3:35:b0:be:6f:a5:55:0d:6c:65:bb:25:0b:61:
                    3e:de:18:73:85:71:97:46:70:67:8e:e3:76:62:95:
                    d3:9f:2a:b2:30:81:bc:69:d2:86:eb:0f:50:13:84:
                    d0:69:01:16:07:fc:03:96:8d:8e:63:22:9c:15:b1:
                    60:83:57:6d:d5:c5:34:af:3e:f9:cb:72:e3:e5:5e:
                    0e:5d:69:08:ea:ae:7e:a5:55:25:af:77:0b:2d:9d:
                    91:c4:79:88:15:bf:f5:1e:70:ed:3f:aa:76:27:69:
                    c6:ae:20:6e:4a:62:74:5f:3d:44:0b:ed:82:86:c5:
                    e0:ef:34:00:b4:bb:9e:ae:79:89:57:72:62:7e:9a:
                    07:6b:ca:01:d2:14:81:6b:f1:d8:94:6f:1b:6a:d2:
                    9b:9f:26:5f:f5:31:f1:b6:c1:a7:b7:23:f9:2d:95:
                    87:47:da:7a:10:36:75:5e:00:ad:5f:37:c8:09:08:
                    85:67:d8:f2:f0:c5:9a:9c:cf:27:71:ff:18:65:8a:
                    c8:d0:c8:f3:13:d1:30:00:0f:4c:f6:4a:2e:5f:0b:
                    0d:7f:0b:dc:54:fe:91:4d:10:58:7d:26:a6:9c:05:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:F0:BB:19:C2:89:65:05:F3:32:9E:41:8B:FC:13:3B:84:45:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0162d7-4e17-48e4-aae4-d741ef33fe94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0162d7-4e17-48e4-aae4-d741ef33fe94/1/EN7wuxnCiWUF8zKeQYv8EzuERZE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44354

    Signature Algorithm: sha256WithRSAEncryption
         54:50:b7:83:b7:c5:e7:f5:95:49:8c:d6:7a:38:2f:c7:98:af:
         4f:3b:9a:be:1f:db:90:d5:b4:2d:0c:04:ec:b4:5f:40:9a:43:
         85:68:5d:b4:56:cd:34:39:35:53:da:ec:1d:1c:da:a6:88:3c:
         c8:a3:fc:6d:50:59:8b:1e:23:a2:8f:65:48:d8:8a:d3:52:b2:
         5d:15:d6:a2:c2:cc:17:28:3c:ea:da:21:0b:45:33:ec:bf:a5:
         73:5d:0f:db:b8:50:e5:8c:cd:2d:78:e4:c2:99:b4:cd:42:97:
         0b:70:59:b8:79:82:0d:18:aa:e6:96:ff:92:16:7d:ce:0f:a5:
         4f:6f:a9:fa:60:9b:0e:23:98:c0:24:da:55:e3:61:48:c2:cf:
         f2:cd:73:07:6e:b2:50:90:c8:49:a9:cf:1e:a5:37:9c:77:5b:
         1e:b1:4a:60:dc:1b:b8:ef:32:c4:20:2c:5b:1a:97:37:a1:83:
         94:4a:09:4f:e5:d3:38:04:55:76:93:fa:87:35:1a:fb:77:e7:
         7c:c8:88:63:e2:b6:83:ad:64:07:66:e7:f7:96:ec:5e:40:29:
         df:18:9c:33:b7:49:a6:6d:90:7d:a4:21:7a:80:23:10:85:f2:
         30:48:34:46:1e:7c:51:9f:3f:d0:2e:4d:b2:7d:a2:e7:f4:81:
         0d:d1:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----