Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8xxZgf7EUG-i9TtrKLgtFHeTSKs.cer
File:                     8xxZgf7EUG-i9TtrKLgtFHeTSKs.cer (raw, json)
Hash identifier:          VsEu4zErs5rlnpS24OxgDxMXNHA5mDZ4e+pDXHf0Xqw=
Subject key identifier:   F3:1C:59:81:FE:C4:50:6F:A2:F5:3B:6B:28:B8:2D:14:77:93:48:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856ED2BBBD2DD35C69A695670D369C729E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 19:33:02 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198894

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d2:bb:bd:2d:d3:5c:69:a6:95:67:0d:36:9c:72:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:33:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f31c5981fec4506fa2f53b6b28b82d14779348ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:ad:4e:67:96:32:ca:a3:07:a8:00:df:87:
                    03:7c:08:64:d1:12:55:cd:df:4e:03:f9:7f:8e:d1:
                    23:44:cb:d7:10:17:02:4b:c3:c1:e8:02:cc:07:5a:
                    d7:d0:40:79:e2:df:f2:62:d1:67:da:b8:1d:35:09:
                    e5:5e:78:9a:78:59:cc:f3:f8:68:33:11:18:2a:82:
                    a2:2c:94:ba:2e:60:24:4a:2a:05:54:a3:ee:2a:e4:
                    da:5e:fd:37:1b:39:83:8d:e5:4b:a4:16:4c:f3:94:
                    2f:e3:5f:a0:8e:61:ab:16:1b:de:5c:df:5b:75:bb:
                    71:67:17:a9:92:3f:40:40:e3:56:2e:85:43:59:64:
                    e6:de:2c:71:00:a5:0a:58:df:7a:66:74:f9:a3:7c:
                    eb:78:68:f2:a1:c9:57:e5:b8:42:17:5c:e1:dc:0a:
                    52:ee:7d:83:a0:71:45:97:e0:3e:56:ca:ca:66:7c:
                    de:f3:2c:70:da:5e:05:01:48:85:6a:3c:83:77:2e:
                    ec:bc:8b:38:aa:1e:8f:e1:2d:7c:99:e9:58:11:10:
                    45:9c:85:32:6d:e7:dc:9a:f9:97:75:92:87:0c:53:
                    11:8f:40:0b:b6:01:8c:05:b7:32:03:2d:48:0f:8e:
                    2d:eb:59:61:3c:af:ec:89:bb:15:0a:64:0b:6e:38:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:59:81:FE:C4:50:6F:A2:F5:3B:6B:28:B8:2D:14:77:93:48:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c65ff8-cf51-4c5a-b19b-23783ca7fd20/1/8xxZgf7EUG-i9TtrKLgtFHeTSKs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198894

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:16:ef:6c:04:90:4e:f2:23:ea:de:df:37:d6:54:8b:26:
         5d:34:49:66:1c:ee:7e:51:6e:77:3f:73:7f:94:0b:68:b2:e5:
         72:3a:54:61:3a:35:70:28:e5:98:e7:87:37:81:3b:8a:f0:66:
         d3:43:c1:f5:5d:3c:7f:00:58:3c:5b:9b:0e:50:3d:a2:1e:d5:
         09:02:17:6a:cb:2a:77:8d:e0:5a:e2:d4:0f:dc:ac:51:5c:f8:
         3a:7f:8f:5b:2b:03:38:c2:84:e1:fc:d3:29:94:14:18:f4:02:
         55:f4:c5:fe:27:7f:2e:f7:bb:bf:79:a0:13:45:ef:8b:72:19:
         0f:ad:89:67:b5:1d:46:a7:e2:90:7d:c2:2f:18:07:7d:b7:96:
         25:fc:23:05:ad:9a:72:e5:b8:9a:2b:de:81:1a:fd:e4:13:4f:
         aa:f6:4f:40:5c:67:23:04:a8:e5:f4:fc:bb:e0:8d:fc:c9:90:
         ec:c0:19:d6:e2:1b:27:f4:2a:cc:c9:e5:84:50:6e:3a:a5:97:
         fd:70:62:30:ed:2c:14:d0:af:9d:e0:d0:5a:09:b2:19:ff:10:
         d3:a4:79:7d:5a:11:d2:35:c5:1b:b0:b1:05:85:74:f8:2b:45:
         ee:6e:9c:2e:d7:d9:0f:78:9a:a8:f4:c1:b3:80:7b:a4:d7:d7:
         7d:87:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----