Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LjVrMaT4btJNJSu77dBUI53YSPI.cer
File:                     LjVrMaT4btJNJSu77dBUI53YSPI.cer (raw, json)
Hash identifier:          bokhDAJoXRUCG12DeDJVYaryz1yY7DHNpYBnXah41Ts=
Subject key identifier:   2E:35:6B:31:A4:F8:6E:D2:4D:25:2B:BB:ED:D0:54:23:9D:D8:48:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D598C64A23889FE48D08376240E587
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:01 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 209574

Validation:               Failed, certificate revoked on Thu 26 Jan 2023 12:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d5:98:c6:4a:23:88:9f:e4:8d:08:37:62:40:e5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e356b31a4f86ed24d252bbbedd054239dd848f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:52:ac:20:3a:59:fd:89:a0:88:8a:8c:f4:
                    c3:76:c2:20:ff:b4:2d:9b:5c:22:cb:f9:e4:94:e9:
                    06:f7:24:e6:b9:2c:e5:34:08:cd:37:b2:50:09:c1:
                    ac:c9:02:f1:eb:e1:66:43:85:fd:e5:da:7b:9a:d1:
                    3d:fe:6b:a5:39:d1:33:bd:b4:a4:93:4d:71:35:49:
                    b0:76:e7:a8:a9:59:e4:1a:6f:2a:7a:f5:86:44:c3:
                    15:5a:a3:cd:ff:6e:fc:b8:7b:0e:cc:0b:2b:f9:76:
                    61:79:5f:0e:18:81:bd:4b:c6:d3:d2:00:bd:3e:2d:
                    87:59:f8:20:40:c1:f7:71:c0:b0:5c:76:68:4c:ed:
                    b0:da:1d:39:cf:25:c1:23:f4:11:dc:d4:96:ff:5a:
                    ec:52:8c:93:e9:90:76:49:2c:f3:c9:25:0f:e9:d3:
                    9f:5b:0f:d1:64:7e:7f:be:bc:c9:b8:93:ca:8f:a9:
                    c7:d4:e2:ee:3d:fc:5b:8f:f9:89:8c:2f:fb:ea:37:
                    6d:25:32:80:39:31:06:da:49:e9:da:56:02:ad:0c:
                    77:d5:78:03:9a:17:d3:fa:51:2d:e3:b9:02:5d:d8:
                    25:d8:93:f3:56:13:92:e7:91:ac:e5:90:98:79:30:
                    2a:31:40:68:1a:0b:30:06:2d:1c:67:19:0b:e6:4c:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:6B:31:A4:F8:6E:D2:4D:25:2B:BB:ED:D0:54:23:9D:D8:48:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b8e082-1afb-42c1-9be9-6632118c24d9/1/LjVrMaT4btJNJSu77dBUI53YSPI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209574

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:d6:73:b8:1d:4e:f8:17:10:2c:5b:55:c4:81:a0:f2:63:
         69:ec:24:30:31:89:68:c4:55:ec:90:93:4b:af:9c:fb:dc:9a:
         88:bc:ef:6a:f1:bb:88:ef:e0:f6:79:fe:ea:9d:10:b2:3d:11:
         77:f9:a6:8a:88:3a:d5:41:c2:12:40:d8:e9:db:c6:72:15:af:
         2f:5f:61:19:f7:85:d3:8c:d3:7a:7c:7b:29:81:ba:ea:10:5b:
         fb:60:95:ce:60:3f:ea:14:c0:1b:8d:64:4d:fb:32:87:af:79:
         9a:85:eb:11:cb:2d:f1:77:ff:5d:eb:60:10:c8:73:36:3f:46:
         86:c3:6d:0d:80:40:c0:08:ac:c9:1a:f4:c2:37:3d:53:88:fa:
         af:ce:df:0c:48:5c:eb:85:e2:61:fb:93:06:9a:89:ac:6b:98:
         42:f7:5a:f7:2f:6a:af:71:de:fd:27:23:91:b5:19:64:29:49:
         f0:47:59:1b:69:47:dc:81:41:40:17:7e:15:0e:b9:97:64:3d:
         72:de:a8:6e:80:23:da:3d:62:74:63:8d:0b:42:cf:5e:1d:81:
         ae:8f:0e:39:11:21:ef:39:83:d4:a2:a6:b0:c2:06:13:ef:9d:
         8c:f8:85:a6:47:8b:fa:95:34:f8:59:76:d9:01:26:79:62:d4:
         af:d4:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----