Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1267hBIQBsq6mCasY77U5mJmC_U.cer
File:                     1267hBIQBsq6mCasY77U5mJmC_U.cer (raw, json)
Hash identifier:          goMQ83VwgH/1KefwdMmuayT9V4QGDpIKPP6RGkbfQog=
Subject key identifier:   D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185716909340257746507322C6EBFF4CAF7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 07:36:27 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200454
                          AS: 203619

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:09:34:02:57:74:65:07:32:2c:6e:bf:f4:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:36:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d76ebb84121006caba9826ac63bed4e662660bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:f4:c0:cc:19:d4:f6:e0:3a:08:d3:b2:83:
                    35:2a:54:8b:f8:7c:f4:94:93:97:b1:d5:db:38:a9:
                    61:d5:05:c6:84:1f:05:ba:3d:6c:b9:89:33:77:b4:
                    35:57:7e:2c:85:fd:92:80:a9:50:30:d2:ff:f1:fc:
                    6c:16:6a:28:e5:c8:09:c9:0a:b0:52:2a:69:54:ec:
                    50:fe:7b:c7:52:a0:87:cc:55:71:5c:1c:ca:e3:cb:
                    67:f1:34:ee:3d:73:87:ff:9e:f0:5c:4a:c7:84:15:
                    8b:2b:c6:d4:dd:17:95:c3:21:b3:fe:7c:32:d7:ba:
                    76:7b:68:61:c5:2a:e9:e0:6e:05:82:7d:06:18:96:
                    cf:5a:ca:4b:86:d2:66:f0:e0:15:cd:49:6a:da:e0:
                    f0:6c:ee:ca:06:35:38:d7:79:15:2c:3b:60:94:09:
                    97:04:1f:dc:82:6b:a2:a6:a2:95:22:bb:33:01:de:
                    1f:08:1c:06:d7:bd:a8:f5:10:44:15:2d:c2:4e:9b:
                    a9:d0:d1:f4:3c:19:df:07:ae:3a:a5:09:1e:d6:2a:
                    8e:e6:75:5b:4f:e1:70:0c:43:b4:dc:96:9f:bd:5b:
                    7e:f3:ca:ba:40:a9:b5:de:79:55:ea:d9:d8:df:76:
                    2e:27:91:bd:f5:45:fe:e5:80:67:ea:58:9f:0e:16:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6E:BB:84:12:10:06:CA:BA:98:26:AC:63:BE:D4:E6:62:66:0B:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/3810bd-d1c3-4afc-ad01-4f7399cfd885/1/1267hBIQBsq6mCasY77U5mJmC_U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200454
                  203619

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:8c:e9:2b:90:b9:ac:95:68:d0:23:cc:a6:77:a1:dd:46:
         74:57:0a:df:f5:f3:36:a7:b3:5c:7f:7f:56:d4:54:56:b2:c6:
         36:64:35:7c:e3:37:b1:5f:7a:65:37:46:43:d0:f4:f4:82:4c:
         28:6e:5b:6e:d5:e3:11:98:51:3e:32:33:5e:40:25:19:df:d8:
         29:de:ef:80:88:16:b4:49:96:59:0e:74:5a:60:1b:5b:a8:4d:
         8e:e0:ed:45:98:25:04:5a:1c:d6:9a:14:56:2e:b8:f6:b1:8f:
         27:4e:4c:da:13:34:ef:17:e4:89:70:b8:59:7d:24:74:cd:b2:
         4f:78:f9:0e:59:3a:d2:21:44:ea:2e:aa:71:6b:41:40:8c:dd:
         a6:87:58:a7:d0:0c:60:63:de:7e:92:3e:eb:b2:bc:01:7b:c1:
         f0:6e:b3:e0:54:75:dc:b6:9a:c1:2e:c2:dd:17:e2:1b:16:9a:
         e7:c0:3e:96:d1:2d:22:6d:62:19:d7:f0:26:3b:6c:b8:68:4a:
         cd:aa:83:d1:96:99:d9:44:a8:f0:e6:58:42:29:83:c8:0b:c5:
         84:1d:c8:b9:65:c9:ca:f8:16:fa:f0:d7:15:69:eb:21:15:7b:
         d8:ae:f4:84:4e:65:68:87:94:70:0b:9b:f9:e1:4c:31:84:a6:
         a6:1d:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----