Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OxSprfjx_8zdSkpPcCeQR_lvZxo.cer
File:                     OxSprfjx_8zdSkpPcCeQR_lvZxo.cer (raw, json)
Hash identifier:          NcB7jnQocxFVXGd+cx7zsCI4Yg9ZiEiFvo+YDIQ6UVs=
Subject key identifier:   3B:14:A9:AD:F8:F1:FF:CC:DD:4A:4A:4F:70:27:90:47:F9:6F:67:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DB5A1EB4CC876E119FC5D1D3532001
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/e456f6-4e4f-4908-9b75-53da52589752/1/OxSprfjx_8zdSkpPcCeQR_lvZxo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/e456f6-4e4f-4908-9b75-53da52589752/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:30:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 202264

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 08:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:5a:1e:b4:cc:87:6e:11:9f:c5:d1:d3:53:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:30:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3b14a9adf8f1ffccdd4a4a4f70279047f96f671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:16:6d:d1:7c:a1:4b:7c:cc:e3:0d:12:d9:
                    51:b7:8a:a4:a4:e2:63:15:bc:13:20:9c:25:29:62:
                    f2:84:3a:1d:ca:4b:ec:22:da:48:3c:a1:31:1c:87:
                    9c:f5:ad:67:0c:a6:76:f8:9e:61:53:be:8a:49:3a:
                    31:24:59:ae:f4:63:57:27:4b:91:0d:aa:b0:6b:5a:
                    74:7c:c4:42:c7:87:d0:d5:2b:32:d3:f2:e7:47:a1:
                    a9:ac:10:ca:1b:89:b7:ad:7f:78:56:d6:86:43:ab:
                    a3:69:06:1c:32:f8:e2:db:ca:18:1b:98:97:46:ff:
                    55:d6:09:dc:05:b7:eb:ac:4c:27:31:42:e5:83:1d:
                    da:69:e9:e5:78:de:b1:64:45:f6:d7:95:b7:be:94:
                    61:76:79:c3:90:bd:fa:fa:88:a7:6c:0e:db:47:9f:
                    8c:13:4c:a0:03:f1:c4:3a:b6:72:94:78:a4:8b:d5:
                    83:f1:2c:7c:9f:b2:16:43:06:8e:cb:76:c5:66:b8:
                    f9:1a:f0:74:87:c3:62:b7:dd:bb:a5:d4:ee:2d:db:
                    d3:6a:2a:c4:f2:4c:55:1a:ac:32:49:ca:ad:8a:2d:
                    fb:02:2a:ba:dd:db:f7:8d:8e:eb:6d:41:98:5b:8e:
                    a8:18:20:fe:2d:9c:7a:dd:f0:1c:80:cb:2e:d0:56:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:14:A9:AD:F8:F1:FF:CC:DD:4A:4A:4F:70:27:90:47:F9:6F:67:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e456f6-4e4f-4908-9b75-53da52589752/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e456f6-4e4f-4908-9b75-53da52589752/1/OxSprfjx_8zdSkpPcCeQR_lvZxo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202264

    Signature Algorithm: sha256WithRSAEncryption
         9a:dc:b7:8d:ed:91:41:c8:ef:b1:a7:f2:73:f5:73:b2:9e:79:
         7b:e1:5a:46:c2:5c:cb:78:4f:ad:c7:1a:1d:f6:a4:40:ad:a1:
         05:b0:53:ae:5d:1c:d3:07:12:7e:fb:f6:ee:d4:17:0a:40:6c:
         48:02:4b:dd:da:b7:37:65:f9:bf:39:f0:56:81:cb:63:5a:e7:
         ad:94:75:97:8f:da:87:5b:6c:87:d4:13:02:1e:19:da:1b:0b:
         fd:d3:7b:d2:59:63:b6:cb:55:c5:a1:c1:8b:cb:53:5c:ef:6f:
         b2:97:69:3d:33:64:67:6a:58:49:c4:59:97:87:f9:03:09:86:
         1f:3a:f9:46:e9:7c:66:72:5b:f2:59:24:9e:d9:1c:3b:3c:ca:
         fe:3c:23:3c:46:ec:11:ae:cb:c6:78:a4:35:47:9b:0b:e9:6b:
         f3:db:89:35:17:a3:d3:76:89:56:1d:03:21:95:b8:fe:b3:d3:
         49:77:e6:f0:1f:1d:47:4a:16:c9:d0:08:3d:61:1a:60:00:fd:
         8e:fb:61:0c:ba:c5:ab:91:7c:0d:4c:c1:12:fd:43:80:97:c7:
         6b:8c:49:bf:6a:8c:04:4b:a2:08:d5:dd:dc:73:5e:85:bb:2e:
         e7:7f:a7:2c:76:96:b9:71:c2:cf:57:15:3a:d6:25:fb:fd:c5:
         57:42:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----