Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9gwoHY-xEtNNDNwh1lok8IraF6o.cer
File:                     9gwoHY-xEtNNDNwh1lok8IraF6o.cer (raw, json)
Hash identifier:          CPJceYkeFLt3A2Nl22YGabaXcPQGKYw/QiDGZ9a17hk=
Subject key identifier:   F6:0C:28:1D:8F:B1:12:D3:4D:0C:DC:21:D6:5A:24:F0:8A:DA:17:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01873F4402A2A04C28F136D48CDD69C213C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/2/F60C281D8FB112D34D0CDC21D65A24F08ADA17AA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/2
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 02 Apr 2023 00:00:34 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 49975

Validation:               Failed, certificate revoked on Sun 16 Apr 2023 09:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:3f:44:02:a2:a0:4c:28:f1:36:d4:8c:dd:69:c2:13:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 00:00:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f60c281d8fb112d34d0cdc21d65a24f08ada17aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:11:aa:58:c2:58:e5:83:7d:dc:5c:ee:a5:
                    dc:b0:f8:82:10:9e:89:50:66:f2:3e:97:b7:d9:35:
                    f2:21:42:b9:e2:1a:cc:75:f3:df:fb:42:cd:db:ee:
                    ad:ac:76:6e:f6:ec:8a:b2:89:e5:7a:a5:49:94:30:
                    f8:9f:75:59:17:12:82:a4:b5:3d:b7:a1:a3:7a:91:
                    9c:2e:d5:02:74:b2:6a:8a:09:58:19:e4:0d:d9:08:
                    40:82:59:18:f9:81:26:1b:b6:42:50:a3:86:48:65:
                    69:a0:46:84:03:f5:8b:11:b7:f3:52:f2:6b:80:07:
                    c1:0a:51:4f:04:33:eb:81:ed:0a:b0:23:2f:c1:22:
                    94:5b:98:b3:f7:e1:93:2a:eb:c5:68:31:89:f4:a7:
                    55:44:0d:b8:29:b5:d6:47:ec:8a:0e:89:b2:a2:e0:
                    ba:57:8b:61:43:a9:52:a8:f0:62:dc:a4:72:34:31:
                    d5:0b:2d:91:64:5a:93:df:62:3c:46:51:bf:c3:88:
                    8c:bb:ef:4b:63:b3:29:86:f4:42:33:a3:ab:51:26:
                    37:77:21:7c:bd:e9:1a:ad:f4:14:4d:4d:95:cf:a2:
                    3a:f3:30:37:1a:f1:39:ee:ed:08:95:d1:6b:08:06:
                    fc:62:c9:d9:44:1e:3e:fc:02:c2:bc:32:7c:e8:fd:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:28:1D:8F:B1:12:D3:4D:0C:DC:21:D6:5A:24:F0:8A:DA:17:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/2
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/2/F60C281D8FB112D34D0CDC21D65A24F08ADA17AA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49975

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:da:77:d2:a1:e7:96:f2:31:93:00:8f:84:fe:a2:cc:55:
         d0:2e:6a:a3:2c:d4:71:1d:79:8c:06:7f:df:4c:a5:6c:6f:6f:
         c7:b3:22:6c:da:0f:1a:1b:19:69:fc:c0:e7:73:1e:be:99:0f:
         b7:24:3f:d7:95:97:5a:51:fe:fe:f2:cd:70:4a:1a:e7:93:3d:
         6b:0f:d7:85:fc:4f:24:a2:d2:55:e1:79:a2:3f:f2:73:a4:94:
         cb:60:20:6e:3c:5c:a1:ad:06:1b:12:e7:5c:d6:67:53:6b:3b:
         ce:91:14:94:13:f9:a9:52:10:74:7b:73:44:1e:da:6c:e2:f9:
         97:e5:22:93:aa:e0:46:5c:1b:dc:54:38:37:b2:4f:e5:7f:b6:
         f7:f6:17:92:8f:c8:de:a3:f8:c4:a7:38:a2:ab:e9:fa:a1:b1:
         32:08:24:e9:a8:92:d0:39:33:3d:6b:98:5d:42:7e:b8:90:65:
         3b:4c:ab:5c:9e:e7:e3:24:e1:ea:6b:ba:11:f5:a6:61:9f:d9:
         92:13:ff:36:c1:12:fc:74:04:f6:91:2f:9e:4c:e0:ff:a3:d3:
         d6:8a:2e:3b:e2:8f:dd:b0:5b:00:88:f8:a3:e7:0d:84:f4:0b:
         a6:87:d0:10:03:b6:33:14:98:35:4c:0b:3c:83:52:ea:29:e0:
         7b:96:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----