Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Mi513YpNo0rx7fQfAXHVom0h04.cer
File:                     3Mi513YpNo0rx7fQfAXHVom0h04.cer (raw, json)
Hash identifier:          JIN2nelneWCvU2au6Zqe4FSscL9EErznBcf5XR5v+B0=
Subject key identifier:   DC:C8:B9:D7:76:29:36:8D:2B:C7:B7:D0:7C:05:C7:56:89:B4:87:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018722C2D4F3F986955BEDB3BADFB738C0C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/fca527-bd7f-4044-8bc5-a00d739818b3/1/3Mi513YpNo0rx7fQfAXHVom0h04.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/fca527-bd7f-4044-8bc5-a00d739818b3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 27 Mar 2023 11:10:06 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 59523

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 18:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:c2:d4:f3:f9:86:95:5b:ed:b3:ba:df:b7:38:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 11:10:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dcc8b9d77629368d2bc7b7d07c05c75689b4874e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:28:6a:02:37:a8:52:57:1b:92:b4:2d:4e:
                    32:8e:38:1b:b2:b0:3a:04:39:a8:c8:35:b6:b2:f3:
                    54:c7:e2:41:ce:5f:66:b3:0c:6f:b8:f2:63:33:59:
                    5c:60:1e:b9:d8:bd:99:22:e4:4f:29:48:75:63:0c:
                    1c:4c:f1:45:5b:bb:a7:72:6b:d0:9e:64:e0:2c:03:
                    22:8a:95:b9:6a:a1:74:ff:3c:22:50:13:26:0f:cd:
                    25:92:04:28:a7:5f:b8:43:b7:99:6a:19:42:70:33:
                    81:a0:c1:d6:ce:dd:e4:0f:73:4d:51:e3:85:5c:7b:
                    c6:89:38:22:a4:e1:92:65:e4:1e:e4:8f:c8:3b:26:
                    49:30:32:ed:69:81:07:c8:d7:28:39:c4:82:78:79:
                    cb:8f:70:28:2c:37:e7:4a:b9:32:d7:fc:31:94:b7:
                    8a:3b:ea:be:55:a2:2e:fe:cf:25:28:4a:08:04:0b:
                    9a:dc:d0:18:7d:25:64:69:10:1a:75:8d:e1:b5:b6:
                    e4:17:99:8a:4b:1f:72:90:b7:2d:93:77:1f:56:72:
                    63:74:f4:a8:38:70:7d:a7:a9:43:66:d3:0c:3c:2d:
                    94:4c:8e:0d:e1:49:1f:73:71:60:26:18:3f:6b:7c:
                    64:25:3f:5b:c3:e6:9f:63:ef:2d:b5:37:9b:38:0f:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:B9:D7:76:29:36:8D:2B:C7:B7:D0:7C:05:C7:56:89:B4:87:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fca527-bd7f-4044-8bc5-a00d739818b3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fca527-bd7f-4044-8bc5-a00d739818b3/1/3Mi513YpNo0rx7fQfAXHVom0h04.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59523

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:2e:43:e2:38:1a:0f:65:d4:b3:4c:a2:88:1a:2b:72:74:
         b4:4a:69:65:c8:e3:41:63:fe:2d:80:77:4e:3b:b3:b8:f9:5a:
         fc:cf:ec:bc:1c:c0:8c:d3:2e:36:c3:a5:be:3f:35:7a:00:a4:
         16:6d:a4:27:6c:9d:b5:e9:a8:c4:8e:2a:ce:6a:26:1c:9c:98:
         64:93:12:25:db:35:f1:17:bd:93:56:5f:ec:55:40:04:0b:b3:
         40:2e:e2:92:09:c2:fb:5d:a4:6f:25:44:37:5e:9b:a0:f8:5f:
         e3:b5:b7:69:de:ed:93:0c:3f:cb:0d:9d:cc:f2:21:b8:0d:27:
         62:42:61:a0:c0:cb:33:3d:e2:9e:e7:d5:da:3f:ae:8a:42:91:
         c3:77:77:8e:79:9a:43:b7:2f:ef:70:96:95:1c:4f:89:f6:30:
         d7:22:6d:f8:28:3d:d6:c6:d3:73:f2:7e:29:de:0f:de:cf:74:
         49:c3:89:1f:d9:83:5d:f5:3c:89:32:99:e7:ce:f7:e2:74:cc:
         f4:99:84:f0:ed:06:5a:dc:ec:7c:57:d5:24:b1:18:ab:14:ca:
         f8:17:57:b1:44:d5:65:03:a2:58:60:92:22:60:9d:20:2e:46:
         86:3c:67:de:88:54:c5:35:12:7a:ec:ca:8c:97:60:1f:e4:a8:
         e8:0d:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----