Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S0vkhqEzH9K62V49CsN_SxhVJt8.cer
File:                     S0vkhqEzH9K62V49CsN_SxhVJt8.cer (raw, json)
Hash identifier:          KjOoltqVnzoiGPMwcHc2JeSkcRz+YMgdbv3T0MqBtGE=
Subject key identifier:   4B:4B:E4:86:A1:33:1F:D2:BA:D9:5E:3D:0A:C3:7F:4B:18:55:26:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018A47F2A989B3A3C63ADCEAAD992D80A825
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/f87d4f-4fba-42f2-b5bd-61e41dd58f18/1/S0vkhqEzH9K62V49CsN_SxhVJt8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/f87d4f-4fba-42f2-b5bd-61e41dd58f18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 19:36:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216375

Validation:               Failed, certificate revoked on Fri 01 Sep 2023 11:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:47:f2:a9:89:b3:a3:c6:3a:dc:ea:ad:99:2d:80:a8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 30 19:36:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b4be486a1331fd2bad95e3d0ac37f4b185526df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:0a:01:ce:e2:67:32:96:48:00:d6:b1:b5:
                    22:18:47:ec:a8:20:83:09:0b:13:97:67:92:81:0e:
                    59:18:e8:84:0b:fa:1a:b9:09:3f:29:37:92:e7:38:
                    13:58:77:de:1e:be:b4:ce:77:f0:e7:39:0c:0e:a7:
                    29:4d:1a:10:a1:b4:7d:7b:e6:ff:ff:36:9e:6f:1b:
                    6b:52:ed:d4:ef:4f:a1:cf:fe:cb:8a:27:62:96:d8:
                    f6:c4:19:e2:95:2b:6e:39:9c:6e:09:f0:01:97:ab:
                    05:25:4c:76:41:47:26:2c:03:9e:1b:59:ef:e1:c8:
                    d7:09:ce:1c:6d:1a:ac:93:90:db:a2:da:d9:63:ab:
                    cc:42:6c:be:53:dc:26:d4:81:d7:30:8a:13:d9:3e:
                    27:c9:af:5d:7a:14:35:73:5e:f2:29:c3:aa:d3:47:
                    16:ef:e3:9a:b4:67:70:4b:ff:a8:e4:e9:c2:ce:a8:
                    8f:93:b0:83:94:08:1c:47:41:23:f5:4a:75:01:7b:
                    b2:bd:2f:38:48:5b:68:85:17:b8:d4:ce:0d:e9:72:
                    39:4f:6f:96:b1:35:01:14:9b:14:a1:16:be:61:b8:
                    c0:0c:d8:b5:22:b7:92:81:6b:2d:9f:0b:ea:ed:d7:
                    c4:de:b8:a9:f1:b7:60:5f:d3:05:49:cb:81:a2:bf:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:E4:86:A1:33:1F:D2:BA:D9:5E:3D:0A:C3:7F:4B:18:55:26:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f87d4f-4fba-42f2-b5bd-61e41dd58f18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f87d4f-4fba-42f2-b5bd-61e41dd58f18/1/S0vkhqEzH9K62V49CsN_SxhVJt8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216375

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:4f:b3:7c:50:c0:e6:e1:ee:dd:f5:bc:a1:d2:e2:fa:2f:
         3e:f2:b9:ea:0c:17:9f:f2:88:ba:e9:6c:91:7b:06:42:45:18:
         1e:aa:e6:cc:2c:02:c4:eb:9a:52:aa:fd:0d:67:5e:38:b0:fb:
         07:9e:67:29:87:54:f6:bb:fe:a9:37:bc:6e:97:0e:f2:37:40:
         3e:19:c5:de:74:bd:b6:71:45:de:28:2d:be:eb:c7:3a:d1:80:
         45:0e:77:b4:f0:66:f6:4a:60:27:66:16:9e:cb:d5:c7:9c:8f:
         93:2a:3c:bf:8d:8c:f3:f1:4c:2d:ca:7d:0c:bc:b5:32:d6:db:
         79:71:06:82:c7:40:8c:55:00:08:7f:32:80:23:8d:50:d1:f6:
         10:0b:2d:64:85:7a:b3:97:90:4b:0f:81:df:94:39:15:e0:19:
         51:29:b1:3b:57:4b:6d:34:2e:7a:31:24:8d:17:78:0f:de:d1:
         49:ab:d4:96:ab:59:0e:80:b2:11:0f:87:ed:50:b1:29:13:0b:
         5a:5b:5d:e3:3c:82:15:cc:6b:b7:e9:01:a3:69:69:87:68:cd:
         61:ac:9a:69:75:c8:a3:0c:ea:93:8b:1d:44:46:73:b7:3b:17:
         b1:6c:84:55:b3:3d:10:1a:10:97:1a:84:b4:0a:54:18:24:c9:
         b5:c6:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----