Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ub2qbPb1_V-gQRQYYfJqcp3iXLg.cer
File:                     Ub2qbPb1_V-gQRQYYfJqcp3iXLg.cer (raw, json)
Hash identifier:          oGYfSKHSSZWt/DegvirVh/fQiBiomaZyNDePQhy16Cs=
Subject key identifier:   51:BD:AA:6C:F6:F5:FD:5F:A0:41:14:18:61:F2:6A:72:9D:E2:5C:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187A1DBF9549F284932A1FC03B3D6CA86BC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/4/51BDAA6CF6F5FD5FA041141861F26A729DE25CB8.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/4
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 21 Apr 2023 03:29:20 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50224

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 11:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:db:f9:54:9f:28:49:32:a1:fc:03:b3:d6:ca:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 21 03:29:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51bdaa6cf6f5fd5fa041141861f26a729de25cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:7c:2e:1a:2a:e4:04:8f:32:f4:da:9d:c2:
                    ac:69:b5:82:b4:93:07:6d:63:1d:3d:68:69:c7:e4:
                    28:e6:c3:5a:2f:71:62:0b:1c:54:03:bc:d5:77:0d:
                    15:64:11:36:6f:e0:3d:45:30:0d:7e:31:9d:e0:5a:
                    8e:ae:04:b7:d7:5a:ae:8f:78:5b:b0:af:ae:13:69:
                    44:53:71:98:29:66:cb:74:54:b4:c7:6d:b1:d1:5c:
                    4b:b4:30:9d:51:eb:17:f1:1c:fb:12:ac:35:59:ae:
                    9c:47:18:65:2b:fc:dc:92:93:77:dd:b5:62:c5:20:
                    0b:62:63:08:c6:42:27:26:64:26:06:ce:ca:6b:08:
                    2c:14:c5:16:0f:40:34:e3:c5:d0:46:74:31:eb:a0:
                    5e:b3:3f:70:17:7c:3d:aa:40:47:49:f6:d6:b3:6d:
                    7d:ac:74:74:28:82:df:4e:b2:73:ea:72:9a:8d:71:
                    1b:24:60:90:e1:7c:6b:b2:81:a8:26:fa:e8:85:88:
                    1f:21:f6:fe:5b:9e:79:8e:0c:41:2c:88:b4:9f:06:
                    ec:f4:76:23:77:49:de:73:e9:11:2c:5e:e5:bb:66:
                    3b:69:5e:b6:e6:29:af:b4:bf:c5:f6:fa:aa:a5:e7:
                    56:6f:44:4e:9b:1e:99:bd:60:ae:32:5b:df:cb:c4:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BD:AA:6C:F6:F5:FD:5F:A0:41:14:18:61:F2:6A:72:9D:E2:5C:B8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/4
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/4/51BDAA6CF6F5FD5FA041141861F26A729DE25CB8.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50224

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:6a:9f:b1:5b:ea:b3:21:d3:b4:7a:fa:1a:01:88:03:b8:
         b7:38:fb:ba:50:b1:b1:c8:64:e4:7e:df:10:0f:2f:a9:9d:de:
         7b:ba:71:9e:ed:39:01:7a:5f:cd:e8:9f:a7:69:64:d5:95:f5:
         4f:60:a1:94:86:58:13:2a:7e:39:9c:0d:7e:f0:31:61:fe:4f:
         78:f6:a7:dc:21:42:44:bb:2a:13:4b:99:92:b2:ae:5a:47:93:
         2a:7c:af:4a:43:e9:b2:18:ae:55:1d:d7:cc:8c:16:e3:9f:06:
         07:5d:e2:a1:70:bd:18:18:57:06:cd:67:5f:f9:67:f1:ce:6d:
         a8:10:ee:ae:2a:c6:f3:b2:c2:6b:e3:a7:c8:e7:87:cb:f4:14:
         f7:8e:c9:3c:cb:76:e3:bd:32:fc:5e:2e:69:65:b2:13:36:ef:
         b1:47:fe:66:50:06:ec:21:6b:eb:29:67:b3:fc:2a:c4:0b:56:
         b9:10:1e:99:22:30:6e:18:09:f5:dd:67:e3:e2:41:54:f6:fc:
         59:58:c3:3d:1c:16:f5:8a:e2:b0:05:24:d7:eb:dd:c7:64:49:
         6f:69:b9:94:1e:da:36:9b:e4:6a:18:20:d4:c5:1a:9e:3b:fd:
         09:b8:3c:8d:1d:e8:2e:cd:38:76:ea:f6:b7:86:72:6f:2c:cd:
         59:28:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----