Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gw6MRmTuLdbNx6_sRkFBlpbWBSs.cer
File:                     Gw6MRmTuLdbNx6_sRkFBlpbWBSs.cer (raw, json)
Hash identifier:          FNUYyckIspSunsxPymlRpur8xnzoOB/r4vMyt1v9JsQ=
Subject key identifier:   1B:0E:8C:46:64:EE:2D:D6:CD:C7:AF:EC:46:41:41:96:96:D6:05:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856F41EA69259BDB8BB9D189F1F5F2E981
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/92/6f911d-45fb-4ded-b487-b54ae53686c5/1/Gw6MRmTuLdbNx6_sRkFBlpbWBSs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/92/6f911d-45fb-4ded-b487-b54ae53686c5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 21:34:28 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203913

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 08:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:41:ea:69:25:9b:db:8b:b9:d1:89:f1:f5:f2:e9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b0e8c4664ee2dd6cdc7afec4641419696d6052b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:d7:c6:71:41:a3:a4:66:04:e5:2d:a9:be:
                    31:e5:d6:c4:ca:4b:bc:10:5b:b0:cf:60:a9:7e:3e:
                    11:e3:02:63:c9:f0:1b:e2:f5:50:ba:fa:3b:dd:16:
                    0a:cf:73:1f:12:72:eb:7e:6f:51:56:ca:e6:e5:10:
                    c3:14:9f:e3:78:14:05:68:bf:03:4c:da:a9:ce:79:
                    e7:d3:27:d8:d0:12:6a:27:f6:e8:77:ea:bc:50:0a:
                    f2:75:fb:d5:96:20:0f:bf:14:bc:3b:1c:f8:bc:a4:
                    57:44:a8:20:6e:10:06:10:0f:97:34:0f:cb:a6:85:
                    99:15:f0:65:d1:29:d5:45:33:25:1a:49:6b:bb:d5:
                    28:8d:e1:3d:3a:fa:8a:81:2b:40:53:75:26:14:41:
                    37:35:6e:14:f2:f9:4b:a7:c1:f5:0f:54:e4:6c:ea:
                    01:37:68:ca:45:e8:94:3a:68:77:8b:60:24:1c:73:
                    29:2b:37:2c:61:4b:54:f9:15:ed:15:3c:33:d9:4d:
                    40:51:2d:0b:66:8e:b2:23:e3:fd:60:99:2e:60:e6:
                    39:7f:94:6a:83:0a:9b:e3:e4:43:7f:8c:25:da:f9:
                    12:cf:36:c5:07:03:42:b9:ce:86:32:d7:88:3b:be:
                    f0:68:de:10:91:02:ff:6c:7c:41:df:9e:e0:da:8c:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:8C:46:64:EE:2D:D6:CD:C7:AF:EC:46:41:41:96:96:D6:05:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6f911d-45fb-4ded-b487-b54ae53686c5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6f911d-45fb-4ded-b487-b54ae53686c5/1/Gw6MRmTuLdbNx6_sRkFBlpbWBSs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203913

    Signature Algorithm: sha256WithRSAEncryption
         af:3c:17:f9:52:76:df:e1:f3:e6:7a:ad:2d:6b:aa:1e:65:6c:
         c8:68:a1:20:39:c2:42:a5:27:74:ce:bf:2b:39:a0:93:fd:04:
         eb:09:f0:d9:cf:1d:ca:17:a9:b7:84:d6:15:9b:de:5e:5e:0b:
         10:f9:b7:c3:11:61:90:f3:d3:87:17:b6:e5:da:fe:b3:bf:76:
         ff:9f:18:7b:b7:da:5f:e2:e4:bf:5d:da:26:5d:50:3f:be:26:
         1c:b9:e5:ef:67:70:aa:d4:dc:9b:65:37:62:e9:f6:81:d7:eb:
         0b:04:93:c8:f5:8a:13:dc:94:f9:8a:b3:bf:43:90:28:1e:af:
         0d:b6:b1:fc:20:42:46:22:10:d2:7d:0c:83:e6:ee:db:d4:f5:
         ad:ed:e7:58:09:a4:8e:e7:d5:8c:cc:c9:15:56:a5:01:bb:e1:
         4b:ba:d6:78:33:85:4a:34:ac:ed:7b:97:5b:ef:e4:2b:e0:da:
         05:16:26:60:f3:ad:7d:1f:e5:df:5a:35:fe:f5:e6:de:73:35:
         45:7d:4e:59:ce:cc:b1:28:f6:3e:74:09:c9:cd:62:4f:22:da:
         f1:ef:ef:30:ce:51:22:1b:14:f0:6e:1a:f0:89:a1:98:68:0a:
         e2:93:d9:fa:87:1b:53:c5:ab:84:03:79:6e:40:e4:be:a1:89:
         75:55:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----