Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer
File:                     AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer (raw, json)
Hash identifier:          6RqwXGKHIlb9eR4brJGWvEemdDPth0zO2MZPEnPVgmw=
Subject key identifier:   01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAC5C562963A70F16673B086EE05ABC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/AUMYaE_K2fhqIcRdDHuIFmWQqLk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:31:53 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 42720
                          IP: 194.110.206.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ac:5c:56:29:63:a7:0f:16:67:3b:08:6e:e0:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:31:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=014318684fcad9f86a21c45d0c7b88166590a8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:29:0e:f8:18:b3:f9:2f:97:b6:19:8e:dd:
                    91:7a:9e:70:76:2e:d1:05:4c:0c:14:2e:fe:ff:b5:
                    fe:89:d1:09:15:63:86:5a:83:2d:a1:5f:1d:88:47:
                    ac:cd:00:fe:ae:73:f5:9d:5e:09:8c:50:8a:16:78:
                    74:3e:25:1d:07:23:45:90:30:05:d8:4e:d7:77:85:
                    19:d4:d2:11:40:a8:39:12:48:19:88:1f:b6:e0:6e:
                    e8:99:2e:cf:07:3d:db:03:18:93:af:76:30:4b:2d:
                    e3:d3:8c:e6:5e:82:9d:48:ab:4f:61:4a:9d:23:83:
                    25:56:ff:38:e0:3b:2f:9e:0a:eb:d4:88:37:de:3c:
                    5f:c6:dd:b6:ea:5b:c5:80:8b:bd:ba:34:88:37:65:
                    70:73:a0:16:28:42:e4:21:1d:64:d3:b6:e7:69:0a:
                    3c:7d:9f:71:fb:c3:d6:52:55:b2:ad:23:e6:db:53:
                    85:45:8e:89:a5:74:de:59:a4:2b:3e:39:81:d5:46:
                    f5:df:f7:bc:ac:aa:93:32:6f:6b:35:01:75:04:05:
                    3f:42:2d:3b:0d:4a:0e:a5:d2:69:48:0d:37:5d:f7:
                    fa:09:42:d5:14:5b:a3:fc:d2:86:62:97:e4:c1:95:
                    ea:7a:d1:df:b1:38:39:8d:b1:64:57:3e:ef:f4:49:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/AUMYaE_K2fhqIcRdDHuIFmWQqLk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.206.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42720

    Signature Algorithm: sha256WithRSAEncryption
         74:13:f8:51:1c:cb:46:ca:02:09:8f:f8:d4:61:3d:b4:ea:79:
         4d:86:fb:ce:29:b2:72:a4:ad:2f:84:d6:d2:05:30:af:00:34:
         5b:1f:cc:46:79:d2:83:5a:0e:70:11:94:ac:91:fa:90:b6:2d:
         56:e8:d0:31:43:70:28:7e:b0:09:d9:d5:e8:7b:04:b1:e3:e3:
         bb:7f:e2:d7:b5:89:c9:89:19:a8:d8:a6:42:3d:09:fa:b9:89:
         ca:cf:fc:8f:29:ca:e9:4c:31:d5:66:65:d7:cd:60:86:96:fb:
         df:74:e7:b3:1e:97:11:c3:1f:37:7d:2a:f5:a2:c5:f4:3f:42:
         a3:b1:9e:df:ba:ce:f5:73:d0:74:65:0c:41:f5:9c:04:36:3f:
         96:a5:b8:83:5a:36:b9:15:f8:8a:ae:83:8c:59:24:6c:49:ed:
         73:25:99:3e:e9:75:b3:78:ba:82:53:91:b5:8e:21:a3:f9:05:
         43:a4:ae:5d:52:8a:c5:65:0e:84:2f:bc:79:fa:28:f5:e2:ec:
         0f:39:aa:81:1d:15:82:9b:b5:5a:0c:14:da:7c:e2:59:cd:08:
         34:dc:15:e2:fc:ac:7f:cd:54:c1:ed:c0:57:ad:19:f2:fe:8b:
         1c:35:7a:95:a3:6a:67:2b:6a:16:fd:e3:42:3d:c8:38:f8:65:
         31:ae:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----