Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2HNZMAy1eBswOZwkOjVrBNOzTxI.cer
File:                     2HNZMAy1eBswOZwkOjVrBNOzTxI.cer (raw, json)
Hash identifier:          Wa7gn9KISuYnA/L6Y4+38p1sTijLxHYEvCPhjV8jlvI=
Subject key identifier:   D8:73:59:30:0C:B5:78:1B:30:39:9C:24:3A:35:6B:04:D3:B3:4F:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B637A560B717EBAB55526EAEEE5DB24
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:39 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211977

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:7a:56:0b:71:7e:ba:b5:55:26:ea:ee:e5:db:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d87359300cb5781b30399c243a356b04d3b34f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:fb:3d:e8:0b:62:f1:b8:ea:ee:68:6c:e4:
                    c6:8e:1b:7e:fb:af:45:bf:97:85:01:4c:bf:d5:9a:
                    c8:ad:3c:ff:c9:0a:04:ee:6b:80:e1:b2:4f:0c:4f:
                    65:91:46:78:01:d2:30:a6:be:42:6e:ba:c5:35:18:
                    b1:99:1a:07:68:85:68:44:ce:b2:b4:8a:15:00:9a:
                    fc:4b:f7:41:83:05:07:00:e8:23:11:79:e8:dc:da:
                    22:2f:d0:85:a0:56:b8:1e:f7:c5:03:8c:fa:68:4d:
                    e5:33:0f:d6:55:f5:3b:f3:f7:e9:49:e0:bf:2f:e0:
                    76:43:6a:80:9f:ad:7a:2f:d9:5c:a1:d2:b2:9c:d8:
                    d6:50:5f:c6:27:e8:9a:07:b0:bf:d9:1a:db:83:95:
                    36:eb:58:fc:4d:98:62:1e:66:21:cc:45:02:b0:09:
                    2b:b9:17:6c:1e:c5:41:fe:73:f6:78:39:93:9e:56:
                    73:22:17:7f:0c:c9:df:4f:8a:84:ef:d7:34:17:7c:
                    02:72:bf:06:52:af:2f:02:23:f2:4c:01:57:76:7e:
                    b0:7c:dd:70:00:92:d2:98:e1:82:38:e4:41:ce:9c:
                    ab:b7:fc:72:47:d8:51:ff:6b:b8:26:d5:c2:fe:c9:
                    90:e3:ca:af:a5:f8:2f:6a:c8:40:b9:81:49:de:34:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:59:30:0C:B5:78:1B:30:39:9C:24:3A:35:6B:04:D3:B3:4F:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/507913-1b3a-41df-827e-77d540858f81/1/2HNZMAy1eBswOZwkOjVrBNOzTxI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211977

    Signature Algorithm: sha256WithRSAEncryption
         33:60:89:56:48:78:e2:22:b0:94:12:63:e1:19:c6:d1:58:59:
         a9:70:3d:9f:77:97:c9:87:07:56:7c:25:0f:38:5d:2b:c5:d3:
         28:1e:d7:bf:c9:0b:6b:e5:af:9d:62:81:ca:68:47:f1:5d:0d:
         64:3e:72:a0:d6:29:9e:3b:b3:7b:6c:07:74:88:37:f6:cf:82:
         e0:5e:41:71:ca:6b:2d:25:3e:be:ff:62:cf:34:a7:8a:1d:ea:
         7d:3f:2b:42:dd:60:94:d6:09:17:7a:85:97:0b:11:20:cf:a9:
         71:fa:35:ad:e7:38:e6:dd:4a:07:ab:1d:b0:ab:ef:ba:ed:2a:
         e9:07:a3:50:86:8c:05:24:9f:56:90:6a:f2:5f:48:ab:32:a9:
         7c:ed:95:b0:af:ba:c2:6c:4c:42:55:7c:02:02:eb:2e:fe:20:
         74:9b:32:37:fa:4c:0b:b6:7c:d4:24:93:fd:1f:93:71:8e:b2:
         9f:6e:a3:ae:51:b0:32:8b:83:c5:d2:48:2c:00:68:f2:e7:9e:
         68:a6:90:b1:6d:76:52:87:4a:ae:b4:3b:c9:e5:b0:3d:1e:0e:
         20:6a:43:3b:35:5b:52:c4:f0:a7:d0:67:c2:fb:34:08:af:24:
         73:f2:43:7e:62:4a:4e:3c:06:9a:ca:c2:76:4c:8f:b1:30:78:
         3c:ee:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----