Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer
File:                     IueHG5Jm471Rbb1UI0VoavNL_JE.cer (raw, json)
Hash identifier:          dvFw6hr3/MFjNkfX4BuG8htDzF1TQDPLuXSGIzjJjC4=
Subject key identifier:   22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185708A7A206BEE1DDEC2CBD6B5B5680312
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 03:33:21 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 203146
                          IP: 2001:67c:2ff8::/48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8a:7a:20:6b:ee:1d:de:c2:cb:d6:b5:b5:68:03:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:33:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22e7871b9266e3bd516dbd542345686af34bfc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:42:98:90:d4:54:a7:63:c0:02:51:ae:6a:
                    07:b8:aa:b7:96:80:e8:cc:ce:05:e7:0d:e4:c4:46:
                    ec:e4:7b:2b:45:54:21:16:8c:3d:d5:45:21:7e:1f:
                    28:df:30:2b:d5:b9:e4:6f:a2:9f:90:5d:d3:8f:fa:
                    36:54:9d:26:94:f2:ee:91:31:66:ff:d7:9e:e1:c6:
                    bb:e6:db:ff:74:fd:54:61:87:da:7e:6b:89:f3:ef:
                    b6:1c:bc:c6:b3:79:e4:67:fe:7a:03:2b:23:54:e0:
                    20:fa:3b:96:0b:9c:38:d2:3e:55:56:a3:64:20:df:
                    a0:c6:81:10:dd:56:26:4f:d5:a4:c9:0b:7f:fe:f1:
                    61:29:29:e0:53:b7:7f:0f:30:98:97:be:e0:ea:4a:
                    4f:f1:4c:a2:9e:d5:ac:40:48:7f:27:49:9a:da:36:
                    bb:c9:39:08:ec:12:a8:38:ad:30:58:ac:e4:9c:f0:
                    4d:75:d6:17:cd:05:ec:3a:73:99:94:d4:dc:4b:3a:
                    f0:e7:35:f2:e0:56:26:ac:77:d2:83:36:10:70:fe:
                    61:c0:47:9f:7b:86:71:e7:8c:a1:e4:e7:4b:dc:f8:
                    17:73:90:29:2a:fb:a2:a1:4c:3b:e9:05:c6:73:c5:
                    f7:be:3f:33:ea:26:14:94:dd:c2:08:c9:f5:05:99:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ff8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203146

    Signature Algorithm: sha256WithRSAEncryption
         83:73:33:58:d8:59:0d:f3:18:59:c3:49:99:a1:bf:5f:1a:32:
         65:4c:2f:5e:41:e5:7c:7b:12:4e:a1:96:6a:d0:b0:bd:9b:d9:
         40:46:8d:71:0b:1c:de:d0:33:e3:f2:65:99:79:77:e4:cf:c8:
         8e:6b:15:bd:82:de:d9:cc:97:bf:4a:ea:5c:48:3e:49:fd:4f:
         93:1b:0d:be:ac:85:ce:cc:f2:a8:a2:e7:4a:c7:ab:19:3e:72:
         d8:7a:77:6f:96:29:ad:f5:71:34:bc:ff:73:b2:a8:7d:b7:d0:
         ce:10:a9:fa:e0:69:91:a3:25:01:6d:e5:8a:bc:53:23:d3:ca:
         a6:11:95:27:d9:2c:43:da:ca:70:e0:09:48:2f:6b:ac:63:bb:
         8e:07:e7:c1:0b:9a:5a:d3:f9:8b:78:be:72:8a:62:37:b9:0c:
         e4:9e:73:05:d9:c6:55:ae:8a:d4:e3:bf:43:96:82:da:16:01:
         60:13:eb:78:88:3f:c5:5c:21:23:37:60:cc:77:f5:0c:e1:ad:
         55:e3:25:f3:87:c4:d2:d7:ac:fc:cc:d3:fd:b1:7a:cc:8f:96:
         55:81:af:17:91:8c:22:9f:25:23:6a:3d:f5:a4:c1:8a:1f:49:
         5b:49:6d:d2:5d:91:44:0f:f2:88:f2:2b:4b:02:90:a2:97:bc:
         3c:c4:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----