Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5esnPgRD5X_8ooYLDCBhPw5CfGI.cer
File:                     5esnPgRD5X_8ooYLDCBhPw5CfGI.cer (raw, json)
Hash identifier:          13lCSm/QH1GyosDnIfacCm3BjfjMygpHb5JavsXTbTg=
Subject key identifier:   E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0189681EA7A8E1A4A3AEE58991C793B3E632
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 08:29:46 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 207067

Validation:               Failed, certificate revoked on Tue 18 Jul 2023 11:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:1e:a7:a8:e1:a4:a3:ae:e5:89:91:c7:93:b3:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 18 08:29:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5eb273e0443e57ffca2860b0c20613f0e427c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:be:6d:a5:ba:ad:8f:0e:2e:1b:29:0a:63:
                    53:a5:79:f3:cb:20:da:38:2e:47:6d:31:c3:22:da:
                    5d:55:3e:2d:46:2b:32:fa:87:7e:5f:9a:98:a2:0a:
                    aa:c4:ac:e1:53:cc:7f:04:db:22:b5:5e:66:f0:de:
                    c1:c4:5c:72:69:b0:17:4f:f3:6b:99:4b:40:b1:21:
                    43:63:4d:99:5d:08:39:c8:1a:24:2c:dc:1a:db:24:
                    1f:00:f9:7f:0d:91:63:cf:39:52:b4:6d:fe:e0:89:
                    9e:d2:a7:8f:78:86:4b:32:b0:5b:6b:63:67:bb:6c:
                    95:83:87:52:be:9e:25:6f:3d:bc:05:6d:ea:6b:52:
                    28:59:00:27:5f:e5:99:b3:3d:f3:c7:e6:8d:0a:cb:
                    71:a9:8c:62:fc:ea:86:52:2b:2c:d3:7b:c7:82:64:
                    46:5f:89:02:91:b1:0d:c6:d3:8f:42:1b:72:69:01:
                    a7:fd:40:c8:4f:25:9e:62:04:36:f6:d1:78:78:24:
                    ba:0c:f0:43:b6:cf:86:dd:e8:55:ea:0e:70:4d:33:
                    ca:b4:84:02:eb:a7:21:44:30:f4:1b:b6:55:94:61:
                    21:4a:70:b1:54:e5:ea:a1:a2:de:81:96:d9:f5:d3:
                    e6:e3:42:b4:af:ef:36:5b:15:75:a5:6a:fc:a5:1c:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:27:3E:04:43:E5:7F:FC:A2:86:0B:0C:20:61:3F:0E:42:7C:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7941ad-2131-47eb-b567-7742903b1baf/1/5esnPgRD5X_8ooYLDCBhPw5CfGI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207067

    Signature Algorithm: sha256WithRSAEncryption
         8e:c6:01:37:60:92:32:f3:f0:cc:4b:37:95:6a:1f:04:bb:3f:
         a1:ba:69:20:a7:53:7c:24:b2:0e:27:e8:65:72:db:f6:02:09:
         5f:52:be:ac:df:25:a7:ed:1e:30:9d:22:e5:39:c1:fc:ab:52:
         28:14:df:c1:9f:10:d5:92:65:dd:51:03:16:f6:2c:d1:d7:ac:
         79:f9:7a:aa:48:ec:99:92:5f:8b:55:4c:79:2c:81:09:0f:15:
         6f:b4:b8:17:11:0b:44:de:62:26:4e:e0:6e:a7:fd:c5:c6:ec:
         9d:51:9f:c4:50:98:b9:52:a3:8e:82:a3:bd:cc:6f:5a:a8:70:
         51:2c:5b:78:66:7a:fd:ca:2c:17:ed:50:c4:62:f7:7b:65:4f:
         2a:eb:d0:fd:ce:40:2a:04:80:8e:da:3c:25:e6:48:cd:d6:4b:
         c3:0f:15:4c:a4:3a:e0:63:32:9b:43:85:7c:5f:be:47:8d:68:
         26:d9:ff:34:42:02:5e:77:9c:32:f7:93:9f:09:d7:f1:09:f3:
         82:5b:87:87:b0:a2:fe:7a:68:dc:14:97:83:cc:64:87:32:03:
         f6:2c:82:ad:fb:bd:12:53:b6:7c:17:32:60:07:84:d4:cc:d9:
         0e:d6:6f:e3:bb:40:e6:44:96:c0:fe:78:fa:22:b5:9f:a9:80:
         e0:f1:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----