Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/853einOu6vkH0X_zfnrm46M9RZ8.cer
File:                     853einOu6vkH0X_zfnrm46M9RZ8.cer (raw, json)
Hash identifier:          yCbS0HNLt7AWqfXr0nItgqko1xtbJPqoq1HGuYqFvR4=
Subject key identifier:   F3:9D:DE:8A:73:AE:EA:F9:07:D1:7F:F3:7E:7A:E6:E3:A3:3D:45:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D680CE671B9FD2DD46638190187297
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:36:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 57110

Validation:               Failed, certificate revoked on Tue 23 May 2023 07:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:80:ce:67:1b:9f:d2:dd:46:63:81:90:18:72:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:36:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f39dde8a73aeeaf907d17ff37e7ae6e3a33d459f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:cf:bc:d5:c9:fa:76:c2:86:22:82:e9:d8:
                    fc:4b:ff:8e:e9:af:41:3b:6f:91:c9:e1:66:e9:35:
                    5a:ff:5f:5f:ae:69:27:3a:a3:c5:5f:23:70:02:8e:
                    79:bb:c0:9e:c7:67:0a:cb:7d:85:ba:c3:05:38:7a:
                    4e:61:a0:b1:1b:fc:97:67:f0:e9:27:f4:53:99:63:
                    51:c9:d6:34:47:bf:ad:b6:88:a4:51:ae:ad:f5:11:
                    05:60:e1:2c:ea:98:58:4c:b2:18:11:53:4d:b9:b4:
                    e4:8a:62:bf:a4:98:77:c2:f1:9a:16:d5:39:b0:e7:
                    da:70:f8:1a:a0:83:53:a1:8b:29:5c:0b:34:cb:10:
                    6f:35:c3:19:39:33:22:72:a8:63:d7:89:c3:84:17:
                    61:2e:a1:24:fa:6b:b7:bf:70:bd:04:dc:51:04:d0:
                    1c:a2:58:16:64:87:68:6c:b4:14:ed:93:e0:9e:bb:
                    ee:43:c3:75:5f:2e:68:04:48:d0:5e:b9:6a:31:3d:
                    41:d5:b2:61:12:0a:f0:9a:71:53:3a:57:a9:07:9b:
                    8c:44:c4:01:60:f6:f7:cc:d8:36:6e:33:fa:24:34:
                    4c:88:97:a2:ed:2d:c6:bc:80:1d:58:5e:b7:20:89:
                    1f:57:2f:26:61:3b:6b:80:fd:ff:56:2d:4a:77:dc:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:DE:8A:73:AE:EA:F9:07:D1:7F:F3:7E:7A:E6:E3:A3:3D:45:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57110

    Signature Algorithm: sha256WithRSAEncryption
         07:32:71:1a:34:cb:12:37:37:cd:d0:63:14:e9:e8:5f:22:27:
         68:24:30:7f:9c:bb:e4:db:80:15:50:38:a8:0b:54:42:0d:3c:
         c9:0c:d1:cc:71:fc:70:8f:a1:f9:87:25:33:23:84:81:eb:b9:
         be:15:9d:2c:08:41:40:09:b9:fc:21:0b:ec:05:c7:3a:6c:f5:
         6a:90:ec:6b:7f:94:50:02:87:ed:1f:8a:53:9a:34:09:4b:bf:
         24:a8:3d:8f:72:60:ae:19:87:3e:a3:48:b9:9a:41:54:92:86:
         1b:2d:7c:5e:30:d7:8a:7c:e9:14:9f:19:e2:d3:73:8e:8d:f3:
         23:ab:73:35:93:fa:c9:82:39:89:6d:a8:eb:d1:6f:11:b9:2f:
         db:af:e0:f1:18:c6:e9:66:df:74:36:12:b0:32:21:d5:6a:c9:
         12:53:ab:4e:dc:42:36:4c:09:ca:9e:2a:80:7b:67:8a:0f:14:
         8f:01:56:df:a0:5b:7d:bb:d3:e9:ff:cf:26:05:7b:95:d5:b5:
         f4:0a:7f:1b:f3:47:9c:43:78:0d:a1:12:67:c4:cf:62:17:76:
         41:b1:d9:4c:bc:1b:2e:27:b8:91:31:d6:a8:5f:c2:d7:6c:12:
         bd:c9:a5:7a:24:3b:31:36:d7:ba:d9:65:8d:c7:cb:76:5c:70:
         2f:d4:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----