Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IO3JmxaoBn9DxgzmfRoIUvTdTgk.cer
File:                     IO3JmxaoBn9DxgzmfRoIUvTdTgk.cer (raw, json)
Hash identifier:          DY6KgHPqFvSF6jVhW2u0ffYsz6HWLuclnaSxx8A3oKA=
Subject key identifier:   20:ED:C9:9B:16:A8:06:7F:43:C6:0C:E6:7D:1A:08:52:F4:DD:4E:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A3D10C200FB9122C6D5A012EC0DDB5E3C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 28 Aug 2023 16:53:43 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216411

Validation:               Failed, certificate revoked on Sun 26 Nov 2023 09:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3d:10:c2:00:fb:91:22:c6:d5:a0:12:ec:0d:db:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 28 16:53:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20edc99b16a8067f43c60ce67d1a0852f4dd4e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:67:a2:a2:a2:3e:1f:df:e7:42:79:42:f4:
                    aa:12:37:2f:39:d1:5c:c1:04:7b:21:f7:7a:a0:41:
                    26:0a:6a:74:49:99:03:8d:30:55:77:f3:57:5e:18:
                    a7:a8:d5:d5:b3:01:c9:ea:a6:29:59:48:c3:fb:e2:
                    61:d1:7b:7e:ff:67:73:5a:ce:85:10:26:4b:58:43:
                    d8:06:95:bf:89:24:4a:55:67:57:25:87:18:d4:2b:
                    77:35:b4:5a:4e:84:9c:22:83:fc:ae:79:bd:eb:7c:
                    13:65:92:4b:40:8c:72:98:a1:87:2c:7d:49:10:96:
                    95:52:0c:5d:89:01:98:fb:51:4a:55:df:b6:82:db:
                    11:93:73:78:90:97:d0:44:a1:c8:7d:05:23:76:f6:
                    2c:73:7d:d6:c7:d7:50:59:78:eb:5c:75:e3:b3:b6:
                    e0:cf:2e:0d:dc:13:bd:b6:7c:90:31:35:97:da:06:
                    06:2e:c5:62:ec:bc:2c:28:df:80:8e:18:ec:37:9e:
                    b0:04:3d:94:0b:82:92:1c:a5:fb:76:88:0c:72:8d:
                    2d:a9:e6:71:52:9f:44:4a:67:5c:03:a4:f0:6c:c4:
                    dc:26:3f:39:c6:24:09:e8:96:1c:54:8d:20:64:dc:
                    72:c5:79:71:9f:0c:ac:a0:8b:6e:1b:ad:a0:71:cb:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:C9:9B:16:A8:06:7F:43:C6:0C:E6:7D:1A:08:52:F4:DD:4E:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f82613-0344-4bca-b846-b52cab088423/1/IO3JmxaoBn9DxgzmfRoIUvTdTgk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216411

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:3a:8f:d3:c5:f4:4a:98:0d:0d:03:ee:c9:0c:90:96:17:
         94:d7:2e:0f:25:d2:20:a9:3a:5d:f8:ff:18:2c:c8:14:b7:74:
         00:f9:c3:f6:c3:b9:28:6e:3d:3d:ab:57:b2:a3:8d:a5:d2:9c:
         e4:da:b7:70:7a:88:77:d2:31:4d:2b:c8:de:a6:a7:5d:ed:b5:
         cc:b0:b0:7a:a1:24:40:bb:cb:82:4a:06:1f:98:31:4f:ae:b8:
         66:4c:92:6d:6f:36:ee:31:a2:86:a9:c2:e0:e5:12:52:0b:99:
         a3:01:ae:ca:07:3c:9b:74:33:85:4e:45:31:4e:c9:c2:91:2c:
         3e:98:47:ca:bb:e7:42:b3:ad:93:6c:9e:d0:f9:f8:d5:54:c3:
         d0:3b:9b:94:74:b6:b9:42:2c:c3:01:b6:59:66:3c:69:e5:ae:
         09:90:68:06:48:28:10:e8:28:38:35:e0:e7:45:e0:4b:d6:a9:
         03:5f:23:73:2f:cd:3c:6e:a7:de:43:2f:68:4b:50:af:2e:4d:
         db:46:48:de:d4:56:1b:7a:a6:0b:f7:23:6b:6c:1b:9c:1f:02:
         80:e6:c5:5c:d1:57:f9:df:99:37:26:a4:e3:5c:d3:fd:a4:52:
         25:f2:d6:9a:48:94:36:07:03:cb:71:74:24:8f:81:54:a8:fa:
         00:28:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----