Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7vzmCWSk_LEPcYldqpKW0PA8CyA.cer
File:                     7vzmCWSk_LEPcYldqpKW0PA8CyA.cer (raw, json)
Hash identifier:          Y8qsOaYg+YFoO8z8xEE2FcsplA1LEIeqK4KG84egzqw=
Subject key identifier:   EE:FC:E6:09:64:A4:FC:B1:0F:71:89:5D:AA:92:96:D0:F0:3C:0B:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018FF46C8B2BBD3F5DF13C09C0CC114EFCA9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/ece416-7fd1-4dea-9ea2-6837b550be56/1/7vzmCWSk_LEPcYldqpKW0PA8CyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/ece416-7fd1-4dea-9ea2-6837b550be56/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 07 Jun 2024 20:38:25 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214768

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f4:6c:8b:2b:bd:3f:5d:f1:3c:09:c0:cc:11:4e:fc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun  7 20:38:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eefce60964a4fcb10f71895daa9296d0f03c0b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:2d:93:8a:b4:f3:c9:7b:df:f2:6b:f8:e9:
                    20:66:7f:62:9a:70:59:9f:58:80:64:ce:3f:bb:b6:
                    f8:2a:e1:8d:53:26:52:6e:fa:45:94:21:73:8f:38:
                    c7:73:56:74:32:9d:45:46:27:46:00:65:88:33:fe:
                    41:5d:ae:18:d6:6a:8a:5e:e2:17:59:cc:63:7c:4a:
                    1c:4d:64:ae:2c:c4:81:a9:ff:3d:d6:88:92:bd:8d:
                    7f:81:45:98:7f:62:62:0e:3c:6b:05:4e:36:16:1f:
                    a8:26:bf:71:78:02:c9:ec:04:dc:9d:86:59:15:40:
                    e7:a7:44:b0:99:20:53:10:22:98:46:d4:9c:54:f7:
                    ad:ce:8a:42:92:b9:0c:3e:1b:0f:12:4a:3f:c3:28:
                    39:68:af:d1:f0:53:bf:c2:d7:d3:46:e6:cd:01:b1:
                    6a:30:61:b9:22:52:73:be:20:58:c9:cf:ec:79:ba:
                    c4:7d:e0:43:da:c7:a3:8e:05:25:f7:82:3f:58:d3:
                    ba:19:ca:6a:7d:b4:dc:01:b3:23:ea:58:a6:0e:23:
                    db:be:10:d5:70:8f:51:40:21:ea:ef:ba:fe:9c:ac:
                    44:e2:43:aa:2c:aa:54:d7:38:7f:20:38:be:dc:58:
                    a0:f1:46:4d:77:25:dc:81:84:c2:74:bc:8d:af:14:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FC:E6:09:64:A4:FC:B1:0F:71:89:5D:AA:92:96:D0:F0:3C:0B:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ece416-7fd1-4dea-9ea2-6837b550be56/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ece416-7fd1-4dea-9ea2-6837b550be56/1/7vzmCWSk_LEPcYldqpKW0PA8CyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214768

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:c8:d4:3f:b4:a1:e3:2c:fc:5a:e1:ae:20:b4:08:11:75:
         7d:97:2f:39:a3:0a:61:48:0c:f7:9a:94:70:c6:f1:3e:04:36:
         b2:6c:aa:2f:8d:d8:94:6f:03:a4:31:35:d9:31:f9:e8:08:24:
         66:68:cb:b5:0b:b1:58:19:82:e2:74:7b:63:ab:aa:4f:ff:3b:
         56:95:e8:2f:30:a3:ac:2f:39:ce:a0:c2:1a:ae:4e:70:98:5b:
         b4:bd:12:96:d5:1b:58:de:3e:29:f3:99:e3:b2:82:81:6a:a4:
         44:bd:84:73:0f:da:07:ff:a8:a3:ee:8a:5b:24:52:14:14:e2:
         1c:35:a9:d7:05:20:68:91:40:f8:5b:4f:96:35:de:ee:ff:a0:
         94:48:f4:52:10:02:0c:f4:11:cc:6f:6e:55:ed:68:fc:8d:30:
         6b:44:3b:15:82:2c:e4:45:d5:23:d7:63:72:33:1f:a8:ce:00:
         e1:78:89:33:58:b6:20:d7:31:17:bc:0f:c2:6c:03:4f:f2:ff:
         22:25:9c:a4:c4:b0:d5:1d:5a:f7:e6:2d:bf:f5:b9:b1:2d:16:
         73:19:05:47:a5:21:b0:6c:f4:f1:36:cf:99:00:31:ff:a2:b9:
         f8:a9:18:67:36:90:3f:c8:2f:84:a6:92:ff:e7:4f:6e:24:40:
         78:0a:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----