Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CW1lbM28nYClQ6cwTseMncohAg.cer
File:                     1CW1lbM28nYClQ6cwTseMncohAg.cer (raw, json)
Hash identifier:          eagsgZLjcqoDbxv8I2f6TFWjMtmE+uhnLzFWA/+Rsbo=
Subject key identifier:   D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856E6518059A1570D374A0F9A6F09838A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 17:33:17 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 204610

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:65:18:05:9a:15:70:d3:74:a0:f9:a6:f0:98:38:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:33:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d425b595b336f27602950e9cc13b1e3277288408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:e1:a2:14:d4:ef:3d:14:6b:79:70:c1:4c:
                    52:3d:16:a2:e6:c8:0e:ea:e2:1e:54:f2:8f:60:96:
                    6d:b3:c3:5d:38:98:3f:47:fb:68:6d:18:f6:1a:f0:
                    50:64:14:23:e5:f2:4a:d5:09:fc:26:c4:b7:c8:03:
                    c2:c1:e1:5e:03:3f:58:9c:dd:b3:3f:bc:b7:72:f3:
                    7e:7b:ed:ba:a3:1c:f9:6c:f8:92:41:cc:95:66:f6:
                    ea:1e:ef:ac:5f:90:b5:d5:98:5b:56:29:74:9e:85:
                    bf:90:e9:92:52:51:98:32:09:a5:23:f0:fb:f4:09:
                    5e:85:7d:89:d1:f5:db:e5:cc:ca:e8:f4:47:99:0b:
                    72:66:a7:69:03:9f:9f:ad:3e:58:5c:67:83:37:87:
                    a6:d4:0e:e4:e5:98:cc:5b:d6:41:2e:9e:aa:3d:c0:
                    c2:bf:5b:7b:4a:e9:bd:d9:fa:36:28:4f:43:14:4f:
                    44:58:57:05:97:51:4f:f6:03:c2:04:63:7c:7d:b4:
                    88:f3:5d:c1:19:bd:59:56:90:47:09:d1:21:eb:68:
                    b0:97:55:8c:78:fb:a0:a8:aa:53:bb:77:f0:71:df:
                    86:8b:b0:70:5a:c5:75:9a:40:15:71:b4:3a:16:33:
                    81:bc:28:b8:52:a9:85:fe:63:cf:5e:99:15:3e:92:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204610

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:19:54:5b:22:45:7e:2d:00:04:b5:7d:7f:cf:fa:26:8f:
         4b:f4:fb:f8:41:54:88:1a:24:f9:24:af:3f:f3:cd:b4:28:e3:
         ec:f5:5f:d7:3e:2f:e4:17:93:c1:77:37:3a:4e:0a:f1:fc:34:
         e3:35:f5:d2:7c:71:71:0a:50:da:70:fe:cd:57:57:91:70:63:
         d7:a4:ca:5a:40:e4:d5:3c:92:e9:ff:78:b0:d2:fa:35:11:f9:
         ab:07:2e:9e:8a:e5:6c:fd:da:ee:c4:60:2b:9f:d3:e0:17:f4:
         2b:b4:e0:d9:69:97:96:66:bf:d7:cd:a7:28:44:6f:de:d1:dc:
         bf:46:48:ed:88:dc:b8:ee:95:ae:78:c2:25:ef:87:cd:0f:f7:
         42:fa:cb:db:16:b3:55:0d:7b:97:8a:b5:ce:7b:a0:15:99:8f:
         34:65:c9:0e:32:4b:33:91:b6:96:1d:8a:80:24:df:29:8e:66:
         2c:5a:03:79:26:4a:fc:6b:d4:ed:73:7c:e5:58:8d:76:62:82:
         cc:7a:d0:f8:d6:3b:00:85:e3:d9:b3:82:df:ab:39:00:8f:68:
         f8:44:72:d2:ed:39:a9:65:57:92:b8:71:df:c3:a0:b2:73:f2:
         b5:79:b5:d3:1e:29:9d:91:67:02:08:16:f4:a7:76:4d:f6:2e:
         cd:2e:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----