Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
File:                     ooUyAWpiyOCKx4PmwHHBHTQs910.cer (raw, json)
Hash identifier:          Unh23FoGGVKJzBrDrIitMuVl/JBZGruo1nOcQ1DwuJY=
Subject key identifier:   A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       1F9F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/ooUyAWpiyOCKx4PmwHHBHTQs910.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 20 Jan 2023 00:01:19 +0000
Certificate not after:    Sun 31 Mar 2024 00:00:00 +0000
Subordinate resources:    IP: 196.202.224.0/21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8095 (0x1f9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 20 00:01:19 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:a3:2c:b6:b9:b7:12:ac:0e:d0:27:6d:f8:
                    ff:34:3c:69:7a:30:46:31:4f:a5:5b:57:cf:72:a2:
                    4b:59:11:fa:34:dc:77:a0:bc:f6:ff:b9:a3:7e:69:
                    10:70:6c:f9:fe:3c:30:d5:7d:43:89:14:f3:0d:5b:
                    6e:6b:88:e0:b5:0c:aa:82:b9:6d:af:6a:00:f6:ca:
                    13:2f:5c:60:56:3f:53:f5:d3:20:04:57:08:ee:1c:
                    29:3e:be:ab:57:98:73:ef:b0:db:bc:30:1b:66:f2:
                    33:36:78:0d:fd:7d:2f:35:59:9d:5e:1a:9a:60:a9:
                    f0:c0:95:cd:55:c6:83:c8:4c:f0:e6:8b:f2:42:ac:
                    6a:20:cb:e1:8d:39:ae:02:24:d4:93:06:cd:30:a6:
                    19:1a:4c:de:0c:96:08:a2:cb:c6:4d:00:5e:8e:20:
                    d1:85:47:7c:08:a8:f3:c3:fe:a1:3d:29:cc:93:98:
                    2a:f5:00:03:7b:5b:5a:9d:83:aa:de:57:2c:d5:4a:
                    c9:ba:48:b2:71:3d:81:0d:cf:21:21:28:33:39:c5:
                    72:f8:71:f9:a9:3f:ca:31:6d:a0:69:5b:2e:e2:c0:
                    8c:c7:f1:e8:da:3e:c9:88:e6:dd:04:50:59:05:30:
                    2d:92:4f:03:64:99:69:42:88:97:9a:03:14:de:06:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/ooUyAWpiyOCKx4PmwHHBHTQs910.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.202.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:48:cb:4e:c5:cf:37:6c:50:b2:d5:29:41:1c:18:3c:ba:cf:
         47:fd:1b:84:e2:0f:ae:95:5f:05:37:c2:02:f2:3e:38:c9:48:
         e9:00:bb:b2:b2:4c:f9:44:52:87:49:5a:dd:cb:5a:e7:b5:b5:
         94:79:45:a8:d9:c2:59:67:c4:8d:96:b0:c6:26:af:48:11:d5:
         5e:b8:51:3a:60:39:35:c8:f3:94:02:1d:be:28:d7:85:fc:a5:
         a0:4d:7c:5c:85:87:ea:20:68:d1:79:43:fa:8f:6b:a3:d0:fb:
         10:81:e0:c8:32:4e:c5:71:d1:58:a4:a9:9f:78:2f:35:64:3c:
         c8:e0:e3:d1:b3:bc:69:f7:4c:21:da:10:c4:24:25:5a:c9:4c:
         1e:37:a6:a9:18:31:ca:eb:10:3c:c7:8a:73:92:10:0e:4c:28:
         7f:ed:a3:72:f6:d8:8c:6d:90:51:9e:6a:ac:e9:e0:68:7b:93:
         37:3d:00:2f:51:63:54:b0:b6:4f:4e:c4:fb:05:1e:e4:7b:79:
         d3:1d:e0:45:00:5a:a9:54:46:b4:1d:82:2c:34:40:41:d4:f6:
         88:eb:11:94:1f:8d:de:7b:2f:cb:34:86:9a:b2:b7:39:d1:1d:
         7e:31:60:ad:d1:ca:cb:33:57:a2:ee:93:cb:72:8d:57:36:1c:
         8a:34:32:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----