Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OQEjiStlbgtxfgTK6AGfqVqvwWk.cer
File:                     OQEjiStlbgtxfgTK6AGfqVqvwWk.cer (raw, json)
Hash identifier:          kMO462xtqeh+t3p63yqQ5cQ3I6V4wN+LuRiPe6iFfHg=
Subject key identifier:   39:01:23:89:2B:65:6E:0B:71:7E:04:CA:E8:01:9F:A9:5A:AF:C1:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B632E4BF89B655E9C4F6E54CC32A583
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 200431

Validation:               Failed, certificate revoked on Thu 29 Jun 2023 08:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:2e:4b:f8:9b:65:5e:9c:4f:6e:54:cc:32:a5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=390123892b656e0b717e04cae8019fa95aafc169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:2a:f6:b9:cc:24:f4:a3:2d:39:de:a7:f3:
                    7a:a7:d8:d1:c7:45:7b:fa:2a:ae:81:99:0e:7e:9a:
                    db:74:bc:6d:c5:10:89:26:f8:9b:60:73:3e:d1:0b:
                    03:bb:56:18:4e:68:6e:c2:06:51:45:67:2e:ba:ac:
                    e8:70:63:75:ee:8e:5f:65:13:2f:a5:1b:a8:f8:8a:
                    f9:d1:d9:3c:91:dc:3d:d5:20:6c:41:0f:8d:51:cd:
                    c1:69:ef:2d:96:2f:63:2d:0c:c1:f6:20:02:22:62:
                    45:d5:7c:14:48:bd:bc:12:5b:d0:bb:b3:94:eb:f9:
                    1b:34:5b:07:98:ca:0f:37:84:df:16:dc:65:69:ab:
                    88:6c:be:a9:47:0f:ac:34:3d:25:7e:93:9d:00:de:
                    75:ce:83:2f:88:79:ff:60:36:42:34:c3:97:25:5b:
                    43:41:3c:9c:80:76:dc:85:f7:99:0e:33:8c:d7:32:
                    d3:2a:93:3d:3e:56:3d:84:be:6c:de:4b:92:16:a7:
                    4a:72:71:03:a9:de:bb:0d:b3:ec:cb:69:b0:70:7b:
                    1f:5f:48:40:ef:23:2a:24:fa:f7:c3:d6:62:16:6e:
                    9b:0a:37:38:c8:3c:4e:c3:44:b4:db:81:27:c0:8e:
                    44:c6:b2:94:cb:9a:9e:62:43:58:f6:89:4e:00:eb:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:23:89:2B:65:6E:0B:71:7E:04:CA:E8:01:9F:A9:5A:AF:C1:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200431

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:bf:e6:ad:32:09:f7:87:17:02:e9:dc:78:29:2c:05:c4:
         b9:53:dd:6e:27:3e:a1:06:94:d4:7b:09:e7:22:92:68:39:1a:
         a1:4f:7b:2a:e9:6a:64:c0:08:f6:cd:1b:07:e8:21:36:ba:44:
         4a:32:17:d5:24:a2:b2:2e:ce:64:79:75:94:c9:ea:0d:1d:c5:
         9b:00:22:88:d6:7a:30:7f:57:d7:06:28:a6:08:c0:7c:63:30:
         77:22:b8:9f:f0:2f:48:b2:00:4e:fc:62:d3:fb:ce:ca:1e:be:
         23:20:23:1d:1a:23:83:28:21:47:e9:23:a3:5f:10:d5:6d:ec:
         8f:04:fe:4e:fb:42:67:2e:fa:60:d0:f1:3c:bb:b5:3f:99:00:
         5f:4c:ab:1e:fa:11:fd:8c:73:c8:e7:8e:00:63:86:3e:1b:41:
         71:2a:d4:df:86:44:c8:38:10:1f:e7:17:3f:7c:ac:d8:42:2f:
         34:cb:55:08:55:75:3a:95:73:3f:53:b2:ff:ca:92:0a:6d:83:
         17:f6:de:2e:7d:a9:0e:e9:8b:3c:c6:14:fd:61:92:b2:e7:bd:
         64:9e:36:73:b9:30:93:7b:9c:60:a9:ec:58:2c:c4:44:14:2d:
         0a:8d:31:11:6c:84:46:2b:05:38:6b:a6:c2:ad:99:36:c3:9d:
         49:94:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----