Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DQPfUfCBhTHYreggjrgiU1QRboA.cer
File:                     DQPfUfCBhTHYreggjrgiU1QRboA.cer (raw, json)
Hash identifier:          t+rEGMCpltvhaFFcmVHvE7PN6eIl7bHoazxh3eFuZ7k=
Subject key identifier:   0D:03:DF:51:F0:81:85:31:D8:AD:E8:20:8E:B8:22:53:54:11:6E:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188E332419CDEDECE7E3C5DC8C22FEEB216
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 22 Jun 2023 13:01:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 47251
                          IP: 2001:678:254::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:32:41:9c:de:de:ce:7e:3c:5d:c8:c2:2f:ee:b2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 22 13:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d03df51f0818531d8ade8208eb8225354116e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:61:f3:fa:1b:86:76:29:e3:6d:85:de:8a:
                    f0:d1:8e:4d:b9:f8:c0:05:67:c6:2f:00:5f:b3:e3:
                    2b:a4:b7:57:8d:a6:10:b5:1c:1f:c6:68:54:2b:87:
                    38:77:d7:2c:33:42:e4:d7:be:bc:d8:fc:3a:f3:26:
                    43:8c:7c:95:36:04:5e:3d:e2:37:81:0d:5b:56:a2:
                    6b:8c:98:96:10:6b:6c:fc:ca:55:90:c4:d2:93:f4:
                    4f:5a:c1:3f:3c:d7:f1:8f:47:92:51:f1:0f:9e:23:
                    84:73:ce:ec:75:f4:0a:21:ed:42:51:15:4e:5b:de:
                    0a:46:7e:9e:3c:61:8b:f0:11:18:21:92:6a:e8:3f:
                    10:1d:c5:21:d4:72:95:51:82:df:ea:c5:0e:e8:5e:
                    6f:0a:44:ab:75:79:b0:26:36:dc:5e:84:99:36:63:
                    b9:0f:a5:d9:f6:c2:f6:28:bd:32:d1:a5:d3:69:d9:
                    8c:22:c3:fe:f6:e0:77:af:6c:f8:cb:e7:c5:37:47:
                    ef:fb:a0:e9:83:06:8e:16:44:b5:64:f0:be:da:ca:
                    8f:36:9e:c1:2c:10:a2:7b:3c:9d:fa:6a:6d:3e:00:
                    5a:81:48:4b:b2:ee:23:db:0e:20:86:e3:5a:25:fa:
                    ec:38:42:56:c8:94:9b:8c:5c:ea:09:f0:e8:3e:62:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:DF:51:F0:81:85:31:D8:AD:E8:20:8E:B8:22:53:54:11:6E:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:254::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47251

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:22:be:19:2c:77:c6:af:ac:b5:fb:aa:17:3e:8e:f4:7c:
         d6:42:55:af:33:81:75:18:16:b0:3d:c7:d8:e6:e1:ec:35:c8:
         bf:33:20:fa:e2:61:28:42:49:19:94:f3:93:ad:f3:fb:14:04:
         ca:f5:9b:88:f9:68:29:bb:bc:cd:0a:31:82:8a:a3:3c:d1:b0:
         c2:28:24:23:9e:d1:30:2d:db:96:36:74:e1:f2:80:3d:c2:9a:
         da:90:df:15:0b:4f:c0:46:4a:83:cf:c4:f2:fc:cb:87:10:01:
         d7:68:10:4f:ee:05:a8:4e:a3:37:8d:00:e1:c8:37:62:5f:11:
         2e:e5:19:0f:58:f4:4c:3b:69:55:6e:44:aa:ec:82:df:41:de:
         0a:13:d2:c9:52:9f:92:ec:e5:9e:36:66:6f:71:51:0a:5f:ea:
         27:be:ed:8d:03:fd:df:28:13:c3:95:9c:6b:19:30:8a:d2:ea:
         10:d6:94:26:bc:f0:ac:7a:9a:06:d3:7e:ee:37:22:50:af:d7:
         dc:c0:9a:9b:a2:02:a7:7d:fc:51:fa:dd:8f:64:a2:95:c9:4e:
         8c:2c:7c:a9:85:2d:33:97:ad:0d:73:f5:c4:f5:35:b8:6a:db:
         55:47:c0:0c:9b:e7:f9:5e:7f:c0:93:c6:ab:cc:4a:f0:62:ae:
         a8:47:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----