Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUj5v55jt6KC3ubUMUuclpXw3Hk.cer
File:                     GUj5v55jt6KC3ubUMUuclpXw3Hk.cer (raw, json)
Hash identifier:          SX0MNpcABFR7jEbn1CQtaTlI0BDnbT4kg5EKSFakAVo=
Subject key identifier:   19:48:F9:BF:9E:63:B7:A2:82:DE:E6:D4:31:4B:9C:96:95:F0:DC:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F22AFB8A9E57CDF42ACDBBF9ADB13
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 211459

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:22:af:b8:a9:e5:7c:df:42:ac:db:bf:9a:db:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1948f9bf9e63b7a282dee6d4314b9c9695f0dc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:41:d6:f2:f5:40:4d:1c:d7:93:eb:87:ca:
                    a0:33:17:e4:a0:aa:1c:ef:d4:51:df:9d:41:5d:bf:
                    6b:72:70:5a:8b:7d:d3:94:b4:50:96:d8:04:e3:9c:
                    72:2e:ff:bc:22:17:34:65:33:b0:3b:39:7b:a6:a6:
                    fe:bc:a9:18:2b:40:5c:49:1d:57:13:d9:dd:92:6d:
                    4f:b4:84:2b:60:36:76:07:cc:9a:97:c4:2c:99:fc:
                    f2:b3:e1:db:8d:b8:0c:80:69:9f:92:7b:f4:2f:ef:
                    b9:b6:d0:e0:4c:62:bc:a2:5c:c5:8f:5c:3d:d6:05:
                    71:c8:73:c2:6c:6b:bc:15:3f:6e:80:e6:d5:66:8b:
                    62:16:1a:ef:f5:be:88:5d:29:87:46:59:a4:69:c2:
                    fc:de:db:51:f8:1a:91:60:46:0b:b5:ea:f6:17:3d:
                    f6:6b:f9:ba:c8:0a:0c:44:d8:2c:ad:e6:8f:f2:94:
                    0f:63:6a:ac:0a:7a:7e:f8:00:c5:31:60:0a:5d:c6:
                    73:c8:15:1f:94:34:98:73:89:04:33:31:e7:c3:25:
                    fd:ab:08:46:09:c4:37:6a:f3:ed:4a:d6:ac:79:57:
                    2e:86:e6:63:d3:73:3b:a0:e3:eb:b9:19:74:ec:e5:
                    c2:f5:9d:c6:01:5d:a4:cb:d2:95:db:bc:60:55:db:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:F9:BF:9E:63:B7:A2:82:DE:E6:D4:31:4B:9C:96:95:F0:DC:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211459

    Signature Algorithm: sha256WithRSAEncryption
         4b:17:b9:c8:0a:93:41:c2:24:99:bb:f3:38:de:ba:0e:d2:ee:
         af:2c:59:90:a9:92:f3:c1:64:56:d6:e5:db:4e:5d:0e:cd:28:
         34:b0:fb:95:a8:13:d2:e9:a0:c0:00:d9:00:46:23:6c:bb:65:
         0d:ef:a5:d0:f4:d7:45:3e:87:1e:bd:6a:ba:e5:dc:7e:b1:c1:
         c6:58:c6:08:41:e5:e2:b6:8d:a3:40:a7:68:95:eb:58:26:33:
         68:79:0a:c8:9c:99:d1:ad:ad:50:5e:6e:c9:9d:82:de:a6:35:
         52:e9:ef:d4:48:c9:fd:c5:aa:0d:59:9b:80:2f:20:f1:04:dd:
         9f:d6:d9:ab:20:5c:7f:d0:0e:6b:98:69:22:45:52:4d:b4:28:
         7e:18:3b:53:19:a8:42:85:9c:63:75:d9:14:8b:dc:83:e6:0e:
         a0:64:2a:2b:c1:0b:32:a0:1c:6e:3c:79:08:41:7c:67:f7:c8:
         e2:20:4d:71:2e:85:ea:d9:0a:ea:8a:81:21:b6:09:3a:41:0c:
         4e:7b:17:f9:95:b7:c0:09:4d:72:99:bc:75:2c:18:c1:30:a0:
         97:e4:ed:39:5b:d6:de:9c:91:ab:74:8d:a6:0a:fd:d9:8e:c9:
         cf:5f:19:ce:f5:76:e4:ed:16:ef:83:d8:c9:c2:35:fe:3d:e0:
         3b:23:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----