Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
File:                     eum-sU5VcrrE_JMLJsrPPZIClmI.cer (raw, json)
Hash identifier:          4VNFH32PhBdO9U2U3j2nh9YBRZCH9wBVmucrPEebrrQ=
Subject key identifier:   7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018674959EFA960D5BD17CA23CE24B7DACD0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 21 Feb 2023 15:26:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57400
                          IP: 2a03:4f80::/32

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 14:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:95:9e:fa:96:0d:5b:d1:7c:a2:3c:e2:4b:7d:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 21 15:26:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:15:38:9f:ca:bd:f8:81:6f:43:fc:c6:f9:
                    5f:22:c3:a2:b3:49:86:99:8a:5a:8b:71:32:f0:bc:
                    42:9f:bb:c6:26:c0:cb:f8:ba:89:61:44:9f:ac:e7:
                    c9:f8:ae:f5:14:54:bb:59:a7:22:d7:7d:37:f5:ea:
                    dd:82:63:97:8a:e7:f7:c1:aa:be:ae:40:15:35:9f:
                    ee:25:dd:0b:a8:ae:ee:36:e9:b5:1c:e7:47:45:b1:
                    91:63:09:e0:60:18:31:74:c0:ee:7f:7e:ab:f5:fe:
                    df:7a:9a:4a:91:5c:96:9e:52:cd:d1:2b:fc:f0:01:
                    a7:e6:a2:fb:3d:bc:7b:55:3a:25:88:a8:9d:ef:42:
                    94:23:99:81:1b:9b:12:06:f9:da:b9:f8:b3:52:36:
                    cb:13:5e:f9:ae:e2:62:db:3e:2c:95:8e:e9:72:3c:
                    31:cc:18:13:53:25:ad:82:9f:e8:6d:6c:0a:51:0c:
                    ac:20:34:4b:c8:e6:70:07:f4:d2:61:e9:1b:da:3e:
                    7a:a8:2d:9a:f8:75:cb:6c:ea:ab:f4:b4:d2:69:0f:
                    00:cf:aa:2b:30:73:22:d9:ec:81:5e:6a:1b:3e:3c:
                    6b:5f:14:d9:d5:2d:a8:ea:2a:21:a9:64:1a:2b:7c:
                    31:65:4d:ec:d1:48:63:f5:6c:3d:0c:44:15:f0:be:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:4f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57400

    Signature Algorithm: sha256WithRSAEncryption
         29:78:27:10:e5:34:c2:5a:6e:db:b9:82:6a:3e:81:68:6b:87:
         ca:05:c1:1a:d0:55:80:87:bf:63:c2:a8:7c:7e:c9:d8:e3:18:
         a5:1c:58:aa:ec:f2:14:32:5b:dc:ac:d0:5b:e2:cd:b6:b4:fb:
         2a:4e:01:80:ef:1e:85:22:83:cd:00:6b:ae:fd:29:32:ee:74:
         1d:77:c3:40:60:08:db:55:f5:84:81:b9:32:70:17:cb:69:b9:
         14:66:6c:7e:ad:6e:e6:5b:41:d5:6d:85:d7:04:bc:d6:b8:f5:
         a9:72:4c:ad:fe:b7:80:cc:c3:2b:80:ba:36:98:2f:d6:24:11:
         55:d7:80:c6:67:62:72:ac:89:42:f0:42:70:dd:a4:a6:c8:51:
         4d:0a:af:f8:d0:6e:ab:70:b2:cc:e9:ea:98:28:3a:14:f2:dc:
         bd:d3:8e:19:3d:27:95:51:7c:45:d8:25:a6:e7:c8:c5:8e:1f:
         4b:2c:74:ac:b4:c2:a8:a9:b8:c6:32:0d:8c:19:9f:b7:7b:aa:
         07:fa:f9:41:2a:60:b5:ba:6c:e6:7e:07:82:7e:04:6d:1d:e1:
         42:83:51:cd:92:00:ea:a2:4d:96:d1:94:86:9b:d8:57:ac:87:
         54:31:02:61:4d:e1:ad:a3:b8:54:e6:4e:0d:04:df:37:d3:bb:
         2e:97:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----