Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TZEOJ26cPgUFiHhf3JqSddiA1Ko.cer
File:                     TZEOJ26cPgUFiHhf3JqSddiA1Ko.cer (raw, json)
Hash identifier:          h9A+66Xy3VzCn/df/uL2zWLVTCFotxIel4xAoyxAb1s=
Subject key identifier:   4D:91:0E:27:6E:9C:3E:05:05:88:78:5F:DC:9A:92:75:D8:80:D4:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018B6CCFAF58BA30DDBC345306AE87D155E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 16:27:12 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 216089

Validation:               Failed, certificate revoked on Sun 29 Oct 2023 14:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:cf:af:58:ba:30:dd:bc:34:53:06:ae:87:d1:55:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 26 16:27:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d910e276e9c3e050588785fdc9a9275d880d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:d3:55:1a:eb:e8:45:32:c4:80:0f:6d:d4:
                    ea:bb:e7:5e:9f:3b:c0:25:4b:02:1b:0a:e2:75:5b:
                    3c:85:98:0e:cb:61:bf:18:1c:c2:40:ae:4f:a5:23:
                    6d:d2:52:43:e7:0f:84:ac:44:f6:8c:05:8a:8d:ab:
                    46:74:2d:7a:d8:6b:8e:4e:b6:97:b1:90:74:1a:5e:
                    00:a2:a7:9e:a2:ab:6b:2f:7d:ab:a6:1a:c9:63:59:
                    26:50:c6:91:af:51:1c:49:86:72:9f:34:61:cc:e8:
                    da:71:cc:ac:07:55:66:77:ec:b2:43:3f:7c:eb:55:
                    ad:cc:e5:0a:27:01:9d:7c:46:95:b6:96:5e:e1:ed:
                    5a:34:75:0d:0f:89:b4:6a:a9:91:fd:b6:b0:37:17:
                    1e:bc:06:d6:0b:73:b2:de:d8:9b:1f:74:8c:b8:2d:
                    f4:68:20:1a:5a:59:72:93:71:67:90:fd:57:00:5f:
                    7a:a1:ad:02:af:7d:bb:fb:f4:ea:f1:43:2d:6a:e8:
                    15:3b:51:d0:ec:bb:17:5c:fe:70:13:f2:f6:1d:71:
                    12:76:e0:d7:f6:f9:48:cc:30:f1:55:3a:71:bf:a9:
                    c7:60:e2:62:94:17:34:f2:f6:8c:14:b9:c5:7f:5e:
                    ce:c5:1c:68:95:71:40:e2:e0:01:b7:55:62:2f:b9:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:0E:27:6E:9C:3E:05:05:88:78:5F:DC:9A:92:75:D8:80:D4:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0d99e0-3b42-4f1a-aa11-24690b043800/1/TZEOJ26cPgUFiHhf3JqSddiA1Ko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216089

    Signature Algorithm: sha256WithRSAEncryption
         19:34:2d:b0:5c:f1:d9:c4:b1:43:01:f3:0c:06:30:cc:55:c7:
         31:ed:df:00:29:b2:14:5f:d2:fa:ca:da:e6:f2:e7:cb:4f:5d:
         48:f0:42:ae:70:fb:00:6d:80:c8:32:dc:df:f7:c1:03:69:0b:
         af:12:bf:b3:65:16:2b:e2:e0:7a:2e:83:1b:98:8f:49:62:79:
         6e:f3:2f:ff:34:bc:b6:28:9f:6e:b6:33:90:d1:a9:75:99:dd:
         fe:c1:67:f3:d7:54:f8:66:cc:ea:37:db:ee:6b:c6:0c:c9:e3:
         5b:bb:ef:7c:8d:59:c4:ba:bd:de:98:72:dc:2d:fb:04:32:e6:
         07:2c:a5:0d:3e:8b:cb:c8:b6:f6:11:7b:7d:9f:e5:11:8e:1c:
         02:ed:8b:00:c2:d3:9a:a2:8e:74:73:8c:64:b2:86:a0:ba:4f:
         2f:0e:09:b1:bd:bc:7b:bb:c9:5f:cd:5e:d8:dc:3a:04:05:bb:
         0c:55:00:f3:ed:62:63:e5:7f:d2:c5:1f:6a:2b:0c:a8:18:eb:
         2b:04:36:7d:2f:8b:29:b4:09:24:27:b1:77:b1:43:b2:ae:a1:
         8c:8e:8f:9b:10:b5:62:16:a5:e5:8f:ce:9e:10:df:1b:85:5d:
         a5:56:c7:a1:6d:ed:50:c5:85:49:3b:9b:f6:14:93:35:3e:1d:
         23:79:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----