Certificate

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/714ABB77D5246E14D8E5D98A14657391026964C0.cer
File:                     714ABB77D5246E14D8E5D98A14657391026964C0.cer (raw, json)
Hash identifier:          SW3QGAAa9wzM2AFIlFpgZL0J0MSsWcn06bfHHGkMFJI=
Subject key identifier:   71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       5CB15C5250D0369DC1219E69D6FD9AFFCEB04D0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 21 Apr 2023 03:24:16 +0000
Certificate not after:    Fri 19 Apr 2024 03:29:16 +0000
Subordinate resources:    IP: 2602:fafd:f01::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b1:5c:52:50:d0:36:9d:c1:21:9e:69:d6:fd:9a:ff:ce:b0:4d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Apr 21 03:24:16 2023 GMT
            Not After : Apr 19 03:29:16 2024 GMT
        Subject: CN=714ABB77D5246E14D8E5D98A14657391026964C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:79:74:c0:e4:e9:be:12:2a:a9:f5:9a:47:7f:
                    aa:31:19:2c:26:93:98:a0:90:35:91:93:bc:39:35:
                    b2:c5:a9:e5:90:7a:cf:67:cf:f6:3c:3e:ee:09:59:
                    2e:4a:60:f6:7e:69:9d:e7:3a:3f:87:44:c9:af:76:
                    16:43:b7:c0:07:bd:eb:00:eb:0a:3d:c8:10:8c:d7:
                    8b:91:2e:15:5e:6a:04:15:c4:a7:87:b4:03:42:b0:
                    0e:9c:a7:48:78:bc:b0:1e:33:3f:c3:fc:a2:bf:b6:
                    63:86:2b:46:fa:0d:91:a8:60:d8:7b:ee:8d:ed:0e:
                    b1:c9:8d:0e:6c:df:6a:4a:17:52:36:4e:a0:d3:ff:
                    4f:b6:3a:0d:26:25:2b:80:a7:b6:a1:a3:94:fc:30:
                    91:58:0f:95:a2:8e:24:c9:4e:81:85:ff:87:f0:ae:
                    b7:cc:88:c1:6f:24:3f:c8:0c:76:e5:b9:da:ad:fc:
                    00:60:29:6c:f8:42:8f:b9:30:9a:c2:72:e4:23:fd:
                    04:e3:3f:3e:00:da:90:29:59:cb:bc:f7:ee:ec:9c:
                    1e:d9:6e:d5:c6:97:a8:e3:79:ee:cf:2f:49:28:f2:
                    57:0c:29:fe:78:1e:0e:1e:7c:be:31:20:da:db:dd:
                    c8:7a:7e:ab:32:32:60:d7:1e:25:6c:1d:a5:96:63:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:4A:BB:77:D5:24:6E:14:D8:E5:D9:8A:14:65:73:91:02:69:64:C0
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/2/714ABB77D5246E14D8E5D98A14657391026964C0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:be:3a:27:da:d7:88:9a:81:98:c9:c7:11:19:0b:62:07:
         c1:1f:d2:a0:07:c4:e0:da:43:f9:38:8c:40:f3:83:f6:d9:a3:
         7f:db:1c:9e:98:3e:19:3a:e5:0d:50:07:9b:16:1d:6c:2b:4c:
         1d:16:f4:d7:3b:a4:9e:a6:cd:44:7e:df:e5:c4:2f:83:05:7a:
         6c:5d:ec:36:48:c8:ab:27:03:61:6d:3d:9a:ae:32:70:a5:c7:
         58:a6:25:fa:e6:7f:af:43:92:5b:7d:66:74:4c:40:9e:2f:50:
         8c:cb:7d:c5:b3:d8:e0:7f:04:47:5a:42:00:5e:8b:42:de:1c:
         5b:9e:8b:4f:5e:c4:f8:0f:69:72:1c:8c:55:17:39:75:7b:1e:
         1a:af:66:9e:54:87:ad:3e:32:2a:b9:84:66:74:40:63:ad:15:
         10:74:4c:84:7e:94:cf:ca:44:66:54:cb:d1:bd:aa:26:9e:30:
         53:2d:ef:f4:b4:15:56:4d:20:0a:76:53:e4:21:ed:3f:c3:2b:
         6d:c8:45:a0:b0:d0:6d:05:ae:86:87:30:ad:84:5d:27:44:2d:
         7c:80:6c:fe:17:53:9c:24:12:0e:c9:81:81:f1:b7:c1:14:d9:
         28:bd:a3:5d:a9:89:7f:bb:ca:3c:3f:dd:f4:d0:cd:73:6f:8c:
         7b:cc:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----