Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33F4b5bDPADln-Twjzl_aAgXVqc.cer
File:                     33F4b5bDPADln-Twjzl_aAgXVqc.cer (raw, json)
Hash identifier:          MdhFYPLxDnsBeIZ+S80Sx4qI3Gt/Gq3GbL3zBL4ipSc=
Subject key identifier:   DF:71:78:6F:96:C3:3C:00:E5:9F:E4:F0:8F:39:7F:68:08:17:56:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC328DF29DB4227ADC67E30C153A819F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/4/DF71786F96C33C00E59FE4F08F397F68081756A7.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/4
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 03:54:44 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 57870
                          AS: 199099
                          AS: 203458

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:28:df:29:db:42:27:ad:c6:7e:30:c1:53:a8:19:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:54:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=df71786f96c33c00e59fe4f08f397f68081756a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:1f:7b:6f:5c:da:f0:0c:89:22:41:02:85:
                    5e:12:94:46:ad:d8:02:9d:50:91:cd:47:f9:33:a2:
                    aa:b0:e8:36:ca:f7:40:d3:83:27:e7:97:3e:6d:da:
                    4d:7f:45:71:d8:37:36:c6:de:43:22:cf:74:1e:8b:
                    50:a9:d3:29:a4:03:d3:97:51:67:ce:a9:b8:1f:f8:
                    d7:50:ab:5e:24:92:dc:ef:40:3c:7e:7f:61:f2:40:
                    c2:7c:6f:50:97:ce:ae:9e:0a:fe:b9:c2:10:e4:d2:
                    76:15:a1:b3:1c:bd:eb:4e:1c:08:ab:c3:73:82:74:
                    af:ba:d7:e6:07:63:5d:18:43:cd:1f:de:e8:8a:96:
                    43:c3:99:e2:48:fd:e0:53:d0:bb:1c:1d:e2:a5:97:
                    75:a2:fe:57:70:2c:9e:2e:b9:cd:40:37:dd:ab:7c:
                    6d:7c:3d:ec:52:ae:6f:d2:42:e6:37:67:a3:12:b9:
                    b1:bd:61:1b:fc:91:49:8b:47:81:43:29:91:c5:d7:
                    36:0b:c2:87:58:7a:4f:e0:cf:0c:4e:84:0b:9e:11:
                    eb:6c:45:8a:7e:19:18:9c:d0:0f:8e:04:f7:3a:eb:
                    34:ed:9e:79:01:d2:51:22:fb:15:f6:fb:3d:15:cb:
                    c7:07:cb:73:67:9a:1b:d1:d4:0f:26:b4:ac:c2:07:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:71:78:6F:96:C3:3C:00:E5:9F:E4:F0:8F:39:7F:68:08:17:56:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/4
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/4/DF71786F96C33C00E59FE4F08F397F68081756A7.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57870
                  199099
                  203458

    Signature Algorithm: sha256WithRSAEncryption
         34:31:fd:dd:85:d2:75:dc:9a:73:54:52:94:b5:21:b7:32:d5:
         ff:e3:71:70:7c:25:3d:3e:6e:5f:e4:78:e5:50:2f:b1:5d:aa:
         4f:97:66:da:f2:a5:f6:54:84:31:05:e0:c7:52:9e:04:b2:d6:
         54:84:a6:eb:3e:39:ab:2a:6c:e9:d8:16:fd:6b:34:bc:49:23:
         91:ce:b7:6b:69:63:a2:0e:24:9e:18:25:01:d3:9f:66:40:d9:
         d8:14:a4:18:a2:4a:05:5f:82:3a:aa:6e:2a:c1:4f:f2:6a:d6:
         f3:a3:0b:bb:09:40:50:ee:dd:ea:6f:a5:e9:5f:17:23:ea:45:
         a4:d6:1f:0d:1f:b8:7c:ec:5e:57:26:ef:6c:1f:df:c6:c5:46:
         37:db:a9:ce:51:72:b4:bd:9c:27:d7:e1:80:39:95:31:74:48:
         b9:eb:32:0a:66:3a:c2:71:29:d0:34:7e:9f:d5:8c:62:08:3c:
         34:cc:3d:7e:30:31:e3:76:16:97:31:a0:bf:3b:96:88:df:f0:
         bd:ab:c0:c3:9f:73:06:55:03:52:88:e3:6b:b1:b2:01:48:f8:
         05:c1:de:ce:7a:fa:95:96:83:43:78:f6:e0:c4:4e:f6:8f:13:
         f5:01:ed:d6:36:83:4a:89:88:8e:79:4f:28:57:e4:a6:26:6f:
         8a:af:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----