Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UOsa846r3pXr1o2RZCKLZHSI6HQ.cer
File:                     UOsa846r3pXr1o2RZCKLZHSI6HQ.cer (raw, json)
Hash identifier:          eGxNEMInSwElZ6p/3jEjyQxNeoz+L3aoy8H/aI+iMpg=
Subject key identifier:   50:EB:1A:F3:8E:AB:DE:95:EB:D6:8D:91:64:22:8B:64:74:88:E8:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0188456F027276803670D5A5781DD5BDCBC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.mft
caRepository:             rsync://rpki.co/repo/August/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:48:03 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:45:6f:02:72:76:80:36:70:d5:a5:78:1d:d5:bd:cb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 22 21:48:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50eb1af38eabde95ebd68d9164228b647488e874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:47:b1:a7:da:df:14:60:70:6e:64:43:ea:
                    a8:21:1e:04:61:fe:3e:1b:3a:cb:ea:29:91:0e:91:
                    e6:5b:d3:16:48:2a:c4:cd:9f:96:db:6e:e1:20:79:
                    4d:05:d2:cd:d5:0f:b8:2a:ce:1f:9f:bf:50:d7:70:
                    89:78:66:5b:94:2b:5d:6d:06:ad:ac:ea:bd:ad:9b:
                    12:21:f1:d4:6b:f4:74:22:bd:74:0c:c7:1a:98:bc:
                    02:85:ea:30:da:ae:77:b8:6c:48:d3:ff:9b:90:fa:
                    3d:0b:6a:29:89:e0:24:74:6c:10:e9:c2:4e:81:bd:
                    8e:4d:1a:8c:07:d3:bc:04:b4:e8:fa:81:45:22:ac:
                    24:f8:23:da:59:24:79:dc:94:6c:fe:91:ed:74:91:
                    de:37:ee:96:1c:f6:77:f9:14:21:87:af:58:1a:07:
                    6c:49:45:f3:dd:f5:ca:0a:67:f5:5e:3b:b3:20:f9:
                    f6:c5:57:bb:9b:ec:09:f4:01:57:6c:66:0f:a4:68:
                    7c:0f:65:8b:21:5a:6e:40:bf:81:1b:06:e0:25:06:
                    f6:bc:61:30:84:b0:0c:d6:b0:9d:d9:24:da:84:0a:
                    e6:84:ef:f6:00:1d:17:0c:b1:33:a8:04:df:78:07:
                    3f:35:6d:99:8b:3e:4c:7a:21:13:ae:ff:93:1c:44:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:1A:F3:8E:AB:DE:95:EB:D6:8D:91:64:22:8B:64:74:88:E8:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/August/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/August/1/50EB1AF38EABDE95EBD68D9164228B647488E874.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:83:4d:e2:8a:35:1c:b8:a3:8f:d5:98:f1:ef:63:34:b9:
         31:7c:79:af:46:ed:30:f2:5d:af:9a:f1:bb:1f:7e:04:9f:ea:
         96:87:ee:b2:5c:ed:c4:95:f1:eb:83:ae:0c:d9:8b:81:81:1e:
         cd:0a:90:44:a7:d1:4d:66:9e:3f:40:84:71:1c:e3:85:7e:67:
         8b:81:34:00:4a:4b:d3:31:c1:c2:93:47:c1:2e:d0:75:97:60:
         ca:69:b9:69:90:ec:64:c0:8b:7a:13:97:0b:e5:ad:5a:41:04:
         5a:58:66:f8:dd:bd:ac:08:65:65:55:1a:09:15:1f:f9:e4:53:
         81:83:f6:e1:44:3b:a4:43:b0:a9:5b:d4:26:83:e8:9d:e4:f5:
         9d:7c:2f:87:7c:53:a5:66:45:77:e2:80:55:11:5e:83:e4:6c:
         38:59:6b:1a:09:e8:78:fd:97:85:dd:ac:89:cd:93:3f:6a:a5:
         8f:0a:57:19:07:e2:c0:7e:23:6c:20:3a:01:91:a1:7c:7f:49:
         8f:1b:db:2f:d4:ed:f5:70:55:49:fe:6a:cd:d5:99:22:68:37:
         8b:55:0f:29:5f:15:40:15:52:f0:aa:f0:98:31:fb:82:a9:76:
         27:de:0f:65:e9:e8:f1:bd:65:d9:6e:f5:c3:cf:87:4c:3c:88:
         a6:30:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----