Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ACZ5HSXg8epGVUcip6woObX3uEc.cer
File:                     ACZ5HSXg8epGVUcip6woObX3uEc.cer (raw, json)
Hash identifier:          xJVYiDROf3n0BkyPAVluAz39p6aSdUtglqtODBhqs1s=
Subject key identifier:   00:26:79:1D:25:E0:F1:EA:46:55:47:22:A7:AC:28:39:B5:F7:B8:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856D897CA79266D80DF7EB7CC5E10D6D80
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 13:33:25 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 29320

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:89:7c:a7:92:66:d8:0d:f7:eb:7c:c5:e1:0d:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:33:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0026791d25e0f1ea46554722a7ac2839b5f7b847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:c2:b3:1e:c5:e1:f1:b6:f4:08:f7:80:17:
                    01:bd:86:c7:53:a5:46:57:90:78:bb:2d:5d:b7:db:
                    3d:ff:6f:b9:0a:0e:13:34:07:1c:71:4e:a4:85:9c:
                    7b:7f:f9:66:d4:9e:60:4c:0a:25:66:a3:97:0b:f7:
                    e1:37:e5:79:09:c4:24:a6:de:12:ce:fd:cb:d6:40:
                    33:9d:2c:b5:3b:0d:09:9c:fb:15:c4:f4:dd:0b:80:
                    48:86:46:ec:10:7f:1a:89:d5:2a:fa:5b:ff:38:0e:
                    68:66:da:4e:2a:5c:3f:56:47:46:2f:0e:30:e8:e0:
                    ff:39:44:bd:d7:7f:99:c5:22:cf:dc:2f:bd:96:a5:
                    6e:c4:77:1f:50:2b:dd:75:2f:b8:c7:5f:80:aa:74:
                    36:c3:60:e6:ec:42:75:ee:a7:d0:9b:52:d2:9d:f0:
                    86:5c:71:6b:6f:f5:b0:d2:fb:dd:da:46:2e:b1:f1:
                    17:31:e9:ae:6d:4d:c1:61:2a:c0:46:ac:3d:a4:8c:
                    d8:c6:c4:fe:17:61:63:3a:98:fe:8a:c3:d0:ab:91:
                    af:7a:aa:f2:be:10:ca:fb:1c:91:28:a7:99:b6:ec:
                    d1:6a:a6:34:97:1d:2f:fe:fd:38:50:bc:a6:e0:34:
                    33:d0:f6:0a:e7:34:3d:04:e4:67:28:e7:3c:56:48:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:79:1D:25:E0:F1:EA:46:55:47:22:A7:AC:28:39:B5:F7:B8:47
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29320

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:2b:f8:2f:92:d6:02:18:1c:ba:a7:5b:c1:88:ee:06:d4:
         ff:25:c1:1f:f3:c0:9f:ee:9b:30:2e:f0:40:04:d0:7a:d3:1c:
         cd:d3:05:03:4e:ce:08:cf:23:9e:5b:af:c2:72:f1:99:e2:cf:
         a1:a4:f0:26:a8:85:52:3f:de:be:a3:a3:ce:dc:c7:e5:2b:28:
         0c:98:fa:c9:c8:7b:d2:5c:4e:cd:6b:8d:75:36:1c:0b:a8:04:
         d1:be:51:54:48:81:7f:b6:d5:c8:72:a5:c6:84:d3:17:db:f0:
         e9:c7:e3:c6:36:23:4e:d9:58:02:cc:02:b8:56:9b:29:e9:8a:
         08:4e:d7:7a:d8:4a:a9:d2:fc:0c:34:6d:8a:c2:d0:42:53:96:
         a7:ef:10:16:f7:4b:dc:b0:03:0f:7b:0f:c1:9d:82:aa:72:54:
         63:09:46:c4:d3:aa:ee:17:7f:f2:4c:6a:98:9f:ab:e6:e6:c8:
         a9:38:8b:4a:0b:16:4d:b6:dc:91:52:7b:6d:c0:cb:4a:43:b8:
         15:96:60:e8:1b:95:6b:72:5c:4b:30:7f:ff:da:20:42:3c:f9:
         39:75:39:fd:b1:c3:d4:f9:39:ac:f3:1d:88:69:00:a0:46:f3:
         78:8e:7a:d5:52:27:b1:3c:ae:92:82:70:a5:db:96:64:07:a4:
         b5:e0:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----