Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lEaJ6MorKvr8jEE9ssKQZFprfNg.cer
File:                     lEaJ6MorKvr8jEE9ssKQZFprfNg.cer (raw, json)
Hash identifier:          fjYW1mQoeHaZ3l78bRbUrZqk+BOoTJPxLaPDRNEmwPg=
Subject key identifier:   94:46:89:E8:CA:2B:2A:FA:FC:8C:41:3D:B2:C2:90:64:5A:6B:7C:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018D64BD1DFE8EDD353F30D349680ABEF62F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/61b430-5aec-4d09-8cfd-d63ad3191b7a/1/lEaJ6MorKvr8jEE9ssKQZFprfNg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/61b430-5aec-4d09-8cfd-d63ad3191b7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 12:55:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 199682

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 14:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:64:bd:1d:fe:8e:dd:35:3f:30:d3:49:68:0a:be:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  1 12:55:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=944689e8ca2b2afafc8c413db2c290645a6b7cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:f6:ba:be:d6:ea:3b:c3:37:3e:3e:9c:9c:
                    9e:18:3c:df:b5:7e:64:67:dd:13:32:ea:93:ad:5c:
                    57:46:6d:7c:5c:a1:66:3b:27:ca:27:75:43:3c:56:
                    14:fd:cd:ff:c5:5b:32:e8:74:7f:fb:f9:97:83:d3:
                    2f:ed:ac:c8:7b:44:23:25:ad:74:d9:8c:f1:59:43:
                    6b:a8:14:67:f7:5d:f7:6b:67:a9:50:4a:04:ef:37:
                    42:e1:bd:fa:ea:8a:ea:5f:1d:9d:38:a6:f1:76:28:
                    24:29:5c:e8:77:68:ac:52:96:45:6e:af:86:c2:b1:
                    80:6f:51:d7:61:ea:fe:0d:11:b2:cf:31:ab:ce:ab:
                    c5:5c:e7:c5:86:30:62:59:d0:6b:dc:6c:27:6f:d7:
                    98:2b:30:f5:58:48:67:4e:c3:2c:b8:6a:3c:94:24:
                    65:fd:42:63:3a:7f:71:12:a7:ce:e3:0a:7b:75:f1:
                    c4:c7:43:7b:39:e6:c7:57:4d:b4:c2:58:5e:ba:3c:
                    b8:ab:a1:92:fb:c8:00:c9:40:07:56:66:7f:a9:86:
                    99:f5:fe:9b:ae:65:9a:97:78:15:57:19:a7:ec:6f:
                    33:ab:27:8e:8e:fb:8b:a9:54:4a:ee:7c:dd:a9:45:
                    73:3a:65:08:a8:d4:70:a0:5e:cc:23:06:ec:11:4e:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:89:E8:CA:2B:2A:FA:FC:8C:41:3D:B2:C2:90:64:5A:6B:7C:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/61b430-5aec-4d09-8cfd-d63ad3191b7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/61b430-5aec-4d09-8cfd-d63ad3191b7a/1/lEaJ6MorKvr8jEE9ssKQZFprfNg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199682

    Signature Algorithm: sha256WithRSAEncryption
         14:15:ef:34:bd:94:aa:3a:f6:92:93:88:39:aa:10:5d:6b:0e:
         05:5d:43:b0:3d:cc:bf:df:c1:03:17:4e:87:31:9d:b5:e1:b2:
         14:4a:86:72:db:52:06:bb:8c:c2:b9:5b:f5:62:b4:37:f3:2f:
         05:0e:a9:c8:f2:90:ba:0d:65:f8:d2:95:5e:ba:e4:13:47:aa:
         f3:dc:6b:22:6a:90:d4:29:b6:2d:52:2f:50:1d:7a:44:c7:f2:
         01:3e:37:06:ba:51:8b:bb:cc:20:54:21:49:7d:ae:e1:0b:65:
         f3:e9:41:37:0a:40:76:8e:31:9a:94:06:31:2d:f8:2d:3b:93:
         d5:8d:c2:54:ea:09:ca:61:e4:36:33:64:b2:bb:a6:56:ff:88:
         ea:9b:e9:96:ae:a8:f6:8f:a9:9a:f5:77:2b:be:32:32:1a:1f:
         44:21:65:a9:fd:36:f4:1c:b9:c3:06:0d:04:09:36:60:e3:12:
         4a:59:92:ee:fe:50:4d:09:bd:e9:75:7b:ee:15:12:19:ad:dc:
         f3:f8:f2:5f:6f:13:7e:fb:16:ab:2a:d9:d3:73:66:f5:b7:c2:
         0d:4c:ec:9c:ec:98:4a:17:e2:8c:2e:be:50:12:ea:fa:06:37:
         51:d5:6c:ae:e1:02:b0:8a:e5:3b:61:6e:90:68:c2:04:c3:29:
         9b:ba:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----