Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.cer
File:                     85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.cer (raw, json)
Hash identifier:          ijm3B1a0Y/r6Zj/R6tNLiOQHyITu5MD198OknuqgbDQ=
Subject key identifier:   85:FE:CD:EA:28:AE:74:12:F8:A3:93:EB:EB:AA:2C:66:E2:3B:CF:A8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3D6581598CC4964628B1F0523AA4861FCCF820A4
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Manifest:                 rsync://krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft
caRepository:             rsync://krill.stonham.info/repo/Stonham/1/
Notify URL:               https://krill.stonham.info/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 23:47:37 +0000
Certificate not after:    Thu 26 Sep 2024 23:52:37 +0000
Subordinate resources:    IP: 2a05:dfc1:8900::/40

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 23:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:65:81:59:8c:c4:96:46:28:b1:f0:52:3a:a4:86:1f:cc:f8:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 28 23:47:37 2023 GMT
            Not After : Sep 26 23:52:37 2024 GMT
        Subject: CN=85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:e9:c4:2b:90:91:49:d6:67:40:0a:1d:a7:
                    a5:5c:44:8b:cd:8e:c3:36:9c:62:90:0f:37:ac:15:
                    74:0f:f3:42:bb:76:7c:b4:26:5d:bb:a8:ab:ad:55:
                    f2:a9:5f:2d:d8:00:eb:80:a5:75:22:c0:4e:27:56:
                    05:17:bf:f1:58:a1:15:a8:af:01:a7:0c:44:c9:e5:
                    bd:24:54:d5:86:33:e5:e1:1b:a2:48:ce:73:7d:04:
                    5c:04:c6:73:32:7b:b5:23:f0:98:6b:df:5d:70:97:
                    ca:53:9f:fa:46:fb:8f:ad:6e:56:46:b1:94:89:2b:
                    3b:55:e3:dc:85:bb:89:10:88:70:5c:b0:3c:fc:40:
                    8c:0d:c3:01:03:7b:29:f5:15:f5:a3:f8:70:17:c3:
                    45:92:78:92:7e:5d:b7:28:4f:97:a8:fe:ff:d8:f1:
                    0e:35:51:8e:46:8a:fc:01:7d:69:84:4e:ec:08:46:
                    8b:d8:dc:78:da:19:17:2d:46:3e:de:ac:f3:25:17:
                    e6:48:1c:db:72:c0:96:d7:77:20:17:00:3f:96:0a:
                    7c:e4:ad:c9:87:a9:f4:b4:9d:6f:dd:59:a0:23:de:
                    5f:f8:f1:65:ad:33:23:70:be:18:04:81:35:c4:b5:
                    a1:41:76:6c:ba:d7:7e:69:f1:65:1f:ad:71:eb:cd:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:FE:CD:EA:28:AE:74:12:F8:A3:93:EB:EB:AA:2C:66:E2:3B:CF:A8
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.stonham.info/repo/Stonham/1/
                RPKI Manifest - URI:rsync://krill.stonham.info/repo/Stonham/1/85FECDEA28AE7412F8A393EBEBAA2C66E23BCFA8.mft
                RPKI Notify - URI:https://krill.stonham.info/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:51:e9:f0:b1:9c:13:c8:04:fe:9a:80:de:6b:46:40:39:cb:
         38:a1:22:f9:6f:27:b0:02:6f:13:8c:dd:5a:25:05:b0:f3:51:
         4d:6f:13:e5:1f:26:89:d8:63:ab:5a:eb:e8:c5:b8:ed:56:f9:
         0a:86:8e:c5:82:aa:a3:d6:23:c0:f4:ee:b2:c4:14:81:81:48:
         41:ca:9d:ed:39:96:30:62:8b:a3:4a:0b:aa:45:5e:31:2f:82:
         ec:03:7e:49:73:19:b2:0e:3a:73:2e:aa:90:8c:b7:ef:91:58:
         92:54:02:e4:ff:ef:b2:ce:64:58:2b:3d:4b:50:3f:7d:a6:31:
         19:3c:f2:9a:f0:b5:89:a0:11:61:05:e7:a9:30:17:8d:00:1b:
         f9:39:4b:d1:5e:cc:b9:9d:b2:20:2d:50:b6:5f:48:3f:12:47:
         96:d0:24:6a:3c:58:4f:a3:87:1e:af:6f:b2:02:3a:48:76:a3:
         26:36:70:d1:b2:f1:f4:9e:61:8e:97:8b:99:97:90:af:9f:d7:
         b2:89:28:ea:4d:ec:42:04:68:9f:9e:26:f6:12:f5:53:7b:95:
         cc:0b:1a:84:63:63:10:e4:73:dc:d3:fa:00:35:5a:6d:ca:dc:
         f4:45:e7:e7:6f:52:7e:21:7f:d8:3c:cf:8f:3e:de:e8:96:f4:
         56:be:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----