Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36OonVEuU-PF2zF148ixuAJcVUo.cer
File:                     36OonVEuU-PF2zF148ixuAJcVUo.cer (raw, json)
Hash identifier:          tJkV23vPfgcxwyKYYcYvNOOM6ZkDFNuJo8Ab4qQI9jM=
Subject key identifier:   DF:A3:A8:9D:51:2E:53:E3:C5:DB:31:75:E3:C8:B1:B8:02:5C:55:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D7121BC3B26BA0E234B0714AE86B1A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/36OonVEuU-PF2zF148ixuAJcVUo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:38 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 205779

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:12:1b:c3:b2:6b:a0:e2:34:b0:71:4a:e8:6b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dfa3a89d512e53e3c5db3175e3c8b1b8025c554a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:98:29:97:a7:3f:c0:76:06:5a:68:41:ff:
                    11:f8:90:a3:4d:92:30:97:53:d7:ad:0e:30:14:ec:
                    98:66:3f:bd:44:4e:2b:a3:09:71:48:05:38:81:7b:
                    fc:11:b7:ed:29:9b:ec:ad:27:1c:fa:05:1f:70:cc:
                    7b:41:d0:89:d0:57:b1:77:58:0a:32:be:2a:3b:e9:
                    7b:9d:53:92:41:fc:42:4e:6b:e8:bb:69:4c:ee:05:
                    e0:14:85:d8:b0:d3:1d:7d:6b:84:ed:e4:8d:9b:b9:
                    82:51:a1:cf:6f:ca:02:c6:0e:0b:b8:ec:07:c3:eb:
                    8b:ce:bb:69:26:4d:0e:bc:3d:8b:03:20:5a:d1:fe:
                    9a:dc:31:fe:73:44:7e:8b:b3:ef:de:e9:a8:a3:c3:
                    d3:1f:bc:0b:fe:cb:64:ce:35:48:fd:d9:42:30:b6:
                    32:88:34:6b:98:f9:b1:09:23:69:59:19:f5:d9:b6:
                    94:cb:cb:f7:77:2b:a4:42:1d:0f:ed:87:67:c5:a8:
                    8c:c2:72:aa:97:d6:29:ed:a9:20:19:0f:d1:27:9d:
                    50:2a:f3:3f:6f:96:7a:d9:bf:4b:1b:13:ab:4d:b1:
                    54:db:86:44:85:8b:0f:d9:0f:98:82:01:54:cf:3a:
                    b0:34:16:39:33:80:bf:ff:41:1e:07:f4:60:9c:fe:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A3:A8:9D:51:2E:53:E3:C5:DB:31:75:E3:C8:B1:B8:02:5C:55:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/78b0ea-d0a9-40f3-9be1-0c0f865ea96b/1/36OonVEuU-PF2zF148ixuAJcVUo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205779

    Signature Algorithm: sha256WithRSAEncryption
         47:49:19:db:ab:f1:7f:dc:65:75:d2:ba:30:26:4c:09:16:f7:
         49:82:aa:64:fa:55:31:0f:c1:a3:ab:25:1a:1e:4c:78:bb:42:
         39:b0:f1:cb:18:51:97:e7:08:83:5c:f6:b5:d5:1d:f6:c1:81:
         05:c2:e3:2d:d7:71:4f:2d:4a:f6:0b:37:69:28:22:3d:dd:48:
         0f:31:6e:cd:37:2b:3d:79:71:72:b5:b6:cf:14:69:25:64:87:
         4e:85:03:56:20:2f:b6:40:2e:d5:81:b0:4e:d2:78:96:54:be:
         25:99:91:82:1a:7f:1b:ea:c2:63:c0:85:dc:bc:38:ef:cc:a8:
         4e:e8:64:de:cb:78:6c:6e:d0:cb:8d:ad:c8:30:11:bb:5f:e5:
         b2:6e:f8:e9:93:b5:5b:f1:9e:fa:b8:42:c7:9b:20:f0:a6:23:
         dc:a3:f8:3a:e7:2a:90:d1:f5:97:33:42:a9:f5:10:bd:e4:e2:
         93:44:1e:fa:b0:b8:55:a8:ec:5f:fb:1d:c3:76:2b:80:49:8a:
         fd:c9:a5:40:b9:c6:8a:a5:16:5c:a3:37:50:36:b5:e7:25:9c:
         18:81:47:e9:40:31:8f:b1:c8:96:2b:50:67:52:e0:25:57:4c:
         b5:81:9e:90:ea:81:84:c2:8f:eb:97:b9:ce:f8:87:c7:ed:2a:
         6d:98:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----