Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
File:                     3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer (raw, json)
Hash identifier:          6ns+BX8qw0GcNCUPdw+hMRNvWERJUGK5ZWRIKCbQgnI=
Subject key identifier:   DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185ED7EB49E909D809DB4DBB35A4DA67DD6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/180
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Thu 26 Jan 2023 09:53:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209224
                          IP: 2a09:cbc0::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ed:7e:b4:9e:90:9d:80:9d:b4:db:b3:5a:4d:a6:7d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 26 09:53:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:81:23:0e:82:63:7b:67:b7:50:7b:79:75:
                    b0:c4:3e:29:30:21:7b:ed:b4:4a:05:4f:e5:55:61:
                    64:52:3d:ea:fe:1f:97:61:c3:d4:9f:94:1d:a5:33:
                    ac:f6:18:17:f8:41:53:a5:ee:43:39:10:a7:9f:26:
                    18:e4:0f:df:db:ca:9f:d3:10:d4:90:11:ff:b6:ec:
                    90:b5:b6:c6:95:62:6e:73:89:e5:b7:81:86:79:60:
                    23:ea:8d:3f:18:9b:28:65:72:ca:d3:53:ce:d2:32:
                    48:8d:cd:5a:11:29:0e:13:db:6b:5b:1a:97:61:b4:
                    e8:38:78:cc:f8:d7:68:b2:70:34:e0:90:27:50:23:
                    4b:f4:f6:d5:9e:f2:69:a2:8d:3b:11:65:df:f5:20:
                    e6:2e:b3:61:c6:81:ef:be:b9:22:11:a0:df:d9:45:
                    ff:59:78:37:2a:5e:26:74:9a:72:13:38:20:d1:a4:
                    00:76:4c:83:ac:64:d7:1e:80:68:a8:b5:c1:36:42:
                    2c:c6:94:5e:40:9b:06:a4:e1:01:95:74:3f:ed:8d:
                    75:44:e4:f9:0e:ca:0e:f6:26:a3:8c:08:78:41:97:
                    17:ed:bd:8a:f5:2d:fc:30:93:78:ea:a1:26:25:ee:
                    83:41:d7:c9:c9:70:c5:58:da:8f:93:36:e2:94:e9:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:cbc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209224

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:bb:ea:c7:ea:7f:e8:90:ab:8b:5b:38:ba:48:4b:31:7b:
         1a:db:bd:ee:35:96:87:f5:ec:d6:7b:5b:2d:ce:ec:77:9d:54:
         84:0a:57:e8:0c:d2:ac:40:0e:72:63:81:c5:24:0c:d2:f1:c6:
         c8:6d:f7:33:70:97:da:b4:6e:76:53:18:24:a6:9f:60:46:98:
         78:8f:03:32:50:20:e6:7a:c6:e8:1a:a0:63:80:cc:a9:a5:f6:
         56:ca:d7:1c:b8:61:d4:43:12:a6:62:44:bb:45:6e:bc:29:48:
         e4:3f:d1:9c:25:02:ff:95:e9:50:07:c6:90:92:55:f3:a0:2c:
         8f:b3:06:25:2e:78:de:db:c3:01:c7:d5:19:5e:92:fb:5d:ef:
         ba:02:9e:ae:6f:34:8d:33:87:39:d3:4b:a2:d3:0d:22:bb:7f:
         bb:72:38:7d:e8:3f:0a:cb:7f:01:35:f9:8b:87:3d:9d:b0:7e:
         e8:7f:98:d3:6b:81:7b:3e:1b:d6:83:1a:a9:35:21:4c:8c:67:
         5b:96:88:c7:19:fe:3d:ba:1e:5f:b5:8b:70:e9:1f:7a:38:75:
         91:a4:17:76:68:22:7b:44:63:76:4d:17:69:bb:13:fe:fc:9c:
         0c:73:63:dd:b0:a8:27:d9:7a:a8:7f:97:c7:c2:d2:06:b1:63:
         5e:41:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----