Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkzsIRHEOxmocK-p-6P5DNVI-7s.cer
File:                     HkzsIRHEOxmocK-p-6P5DNVI-7s.cer (raw, json)
Hash identifier:          Y8PRR3XF9TgF5uMBDSa4F9l6iYFyqV8dXnvCSQWzgSc=
Subject key identifier:   1E:4C:EC:21:11:C4:3B:19:A8:70:AF:A9:FB:A3:F9:0C:D5:48:FB:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01884E56C2050032A859DE40C69CE61A4922
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 May 2023 15:18:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 198480

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:56:c2:05:00:32:a8:59:de:40:c6:9c:e6:1a:49:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 24 15:18:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e4cec2111c43b19a870afa9fba3f90cd548fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:dd:90:11:00:ca:7c:ce:41:eb:92:dc:6a:
                    77:a1:44:4a:df:a4:d8:04:88:63:d7:f8:24:46:48:
                    2b:ef:78:f4:b3:46:ac:f5:59:5b:84:9d:63:ef:03:
                    f4:e1:9e:55:72:00:ef:43:92:0c:60:b8:aa:ad:81:
                    cd:99:44:0b:8b:70:77:c5:45:a4:d9:5c:80:38:6a:
                    0b:97:fa:08:8f:83:43:ae:72:00:83:5a:c4:3e:8e:
                    1a:f6:25:f4:41:e3:8e:7c:73:c8:b5:dc:63:67:e9:
                    ed:fe:85:ae:1f:d6:84:1b:e9:a7:a8:08:6c:a1:0b:
                    4b:6c:b3:17:45:6d:db:80:c1:be:78:f4:7e:e0:bf:
                    33:30:51:3b:21:75:fd:c2:c2:cc:d5:8e:d8:d7:44:
                    cf:72:4a:3d:8a:77:5c:b6:c5:f9:54:68:e2:d1:7b:
                    b6:c9:7f:ee:e5:37:68:cf:67:62:af:da:48:fe:00:
                    72:af:02:09:ed:c0:34:8c:da:23:38:5a:38:df:bb:
                    60:dc:02:70:a9:2e:dd:0d:e6:6d:3d:57:75:b0:fc:
                    93:4a:6e:ed:73:1f:6a:89:6b:5e:6a:1b:83:e8:7e:
                    d1:c7:f6:2e:aa:8b:34:a9:4d:fc:02:e5:84:56:eb:
                    96:67:99:5b:d5:0f:0d:3f:18:26:ff:23:29:42:d3:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:EC:21:11:C4:3B:19:A8:70:AF:A9:FB:A3:F9:0C:D5:48:FB:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5a3d7c-16a8-46d5-9973-e92e0dae492c/1/HkzsIRHEOxmocK-p-6P5DNVI-7s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198480

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:28:65:a8:21:6d:fa:c9:27:08:85:f8:e2:5c:16:af:93:
         ac:cf:34:0e:f0:01:df:9a:ed:ee:6b:9e:e6:b9:23:66:ff:1d:
         e1:e7:08:08:f5:37:6f:97:fa:06:f9:a6:f7:81:53:06:17:09:
         55:95:7b:13:db:2d:9e:01:de:27:04:d4:b0:7d:72:e0:12:f2:
         41:e7:ce:8b:78:df:53:8f:df:6e:1e:05:d9:21:53:7b:2e:34:
         87:a3:b8:45:bd:e5:a0:1a:c9:65:c9:f9:4c:dc:4a:f8:42:d8:
         37:57:22:d3:6f:30:e8:02:25:96:fd:58:a0:40:39:34:e4:6b:
         d0:f2:8e:bf:6d:81:0f:2f:88:d1:11:95:7b:a3:43:57:3c:80:
         cf:b8:ed:48:a6:0f:15:c6:c4:50:ba:5f:97:ce:ca:b6:7f:f8:
         7c:85:38:3e:73:cd:78:50:4c:e9:41:ef:92:1c:d0:42:74:43:
         fe:65:17:a0:0a:70:5a:6b:8f:2b:90:21:50:2d:01:01:b1:32:
         97:c9:ba:20:47:dc:3c:59:3f:16:4d:53:36:45:c4:bb:32:56:
         ea:c3:ae:0a:3e:53:d9:49:c1:95:49:49:7f:61:c5:13:85:21:
         49:69:9b:df:be:50:74:7e:93:de:50:97:ed:3b:6f:5c:e1:78:
         1a:b8:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----