Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEb3j180EOsOVtwXADZn4DBxG68.cer
File:                     AEb3j180EOsOVtwXADZn4DBxG68.cer (raw, json)
Hash identifier:          XuXDKmNeiOhet4aSWhBTOqiGd+DLavPtok+V5317DbA=
Subject key identifier:   00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A0393D1B56B59AB032E9D2B1249EA9E3A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 17 Aug 2023 12:58:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2a11:df00::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:03:93:d1:b5:6b:59:ab:03:2e:9d:2b:12:49:ea:9e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 17 12:58:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0046f78f5f3410eb0e56dc17003667e030711baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:2f:e7:e8:96:62:b0:2d:41:37:b0:3f:d6:
                    ce:6a:d3:80:1b:1a:5f:36:cb:ab:03:77:e0:a9:78:
                    a1:e9:0c:05:44:ae:0f:44:b8:97:7c:16:c0:d5:f0:
                    10:e6:3c:ea:dc:b3:16:58:da:31:90:40:3b:47:b6:
                    e1:ed:b2:96:34:9b:ad:dc:3a:4f:c6:f9:85:f6:13:
                    c0:3e:fa:34:d0:44:31:45:b2:19:37:c6:8a:91:d0:
                    64:5d:d8:9c:fa:34:0d:51:b3:34:07:55:39:05:4e:
                    b6:a8:71:c3:41:b3:55:c5:8e:a3:d8:83:71:2d:43:
                    ed:85:65:97:03:f1:63:a6:9f:8b:b6:bc:11:72:e0:
                    c9:7d:93:4a:ed:04:2d:18:f2:bb:22:b1:20:91:c5:
                    e3:fa:f8:0a:97:6d:6c:6f:81:43:5d:ba:87:97:1d:
                    c4:95:6b:39:b6:22:0a:bf:6a:6f:32:fd:54:52:3d:
                    4f:e4:51:7a:c2:8c:d1:fd:a5:49:6b:2b:41:3b:8e:
                    12:31:f8:56:f9:9e:29:4f:b0:73:b1:ab:dd:b1:a7:
                    00:0c:77:7d:50:a5:31:8e:19:b4:89:51:ad:77:1a:
                    85:c6:98:50:8d:ba:e6:28:90:61:6a:dd:65:69:e6:
                    f2:18:6e:23:9f:3b:96:3d:39:b5:a9:40:d1:98:a6:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:df00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:9a:42:b1:c4:76:08:ca:e3:0c:12:44:85:e5:da:49:d6:
         23:bb:de:06:c3:a9:94:80:0b:c3:d8:7a:7a:26:d6:ce:d6:0f:
         16:8c:5a:26:f2:6f:8f:b1:b6:35:14:53:b4:ce:ed:43:c3:85:
         bb:17:39:b0:5b:1d:5f:ce:4d:02:05:5f:54:ff:99:62:e5:c5:
         e1:6c:8e:e5:8e:15:5b:25:24:0b:13:86:f9:1b:ee:07:df:9d:
         bb:02:a2:d2:c4:96:13:c8:9e:34:8e:f7:20:0d:2c:59:9e:d5:
         dd:01:6f:7c:02:97:b1:04:1a:ae:ae:5a:3f:da:6f:1c:5c:46:
         b6:9a:71:36:64:78:29:18:f8:9e:61:1f:13:0e:eb:c7:f6:ae:
         80:2c:60:d5:71:d4:53:fb:0c:7b:b2:d1:e2:ac:ba:4e:67:3e:
         8a:dd:0d:33:82:38:16:34:b9:d4:34:1a:d6:4a:7e:58:ae:3e:
         f8:b5:d7:2d:74:43:f0:7f:98:fe:ef:82:f7:0a:35:9c:38:a3:
         8a:91:ea:82:14:0f:0b:cc:37:40:48:99:cb:fd:a7:1b:41:11:
         71:df:f8:d1:05:a3:67:29:9b:b4:2d:00:86:1a:2f:f3:02:f3:
         b2:f6:20:6b:a3:0d:1b:e6:ae:c5:22:4a:a1:44:cf:6e:8f:19:
         a8:49:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----